Re: GnuTLS security update

2016-09-12 Thread Leo Famulari
On Mon, Sep 12, 2016 at 02:56:13PM +0200, Ludovic Courtès wrote: > msmtp uses a GnuTLS that is different from from both other GnuTLS. The GnuTLS being used [0] corresponds to the GnuTLS on the master branch from before I pushed this graft. > I think the bug has to do with the fact that GnuTLS has

Re: GnuTLS security update

2016-09-12 Thread Ludovic Courtès
Leo Famulari skribis: > $ ./pre-inst-env guix build gnutls > /gnu/store/4x9r7rkinycxr7xda5a92knm8ikila6p-gnutls-3.5.2-debug > /gnu/store/n93gb4n301rz46k9cm0d12hb26gq5lg5-gnutls-3.5.2-doc > /gnu/store/di3yhn5hy4hzshpazkc6dkb4r67dbhks-gnutls-3.5.2 > > $ guix build gnutls # This Guix is

Re: GnuTLS security update

2016-09-11 Thread Leo Famulari
On Sun, Sep 11, 2016 at 09:53:22PM -0400, Leo Famulari wrote: > The problem is that the msmtp package I have built using this patch does > not refer to the grafted gnutls. I got the same result after building a > fresh Git clone of Guix. To clarify, I think that the msmtp package is using the wron

Re: GnuTLS security update

2016-09-11 Thread Leo Famulari
On Sun, Sep 11, 2016 at 10:54:09PM +0200, Ludovic Courtès wrote: > These 3 GnuTLS commits appear to be related to this issue: [...] > If applying these patches on top of our current GnuTLS version (and then > using it as a graft) works, we could do that. Unfortunately the test fails in the same

Re: GnuTLS security update

2016-09-11 Thread Ludovic Courtès
Hi, Leo Famulari skribis: > For master, the naive approach of cherry-picking the patch [1] did not > work; the test 'system-prio-file' fails consistently with that change. I > could instead try grafting the updated version. These 3 GnuTLS commits appear to be related to this issue: --8<---

Re: GnuTLS security update

2016-09-11 Thread Ludovic Courtès
Vincent Legoll skribis: > On Sun, Sep 11, 2016 at 5:41 PM, Leo Famulari wrote: >> There is a GnuTLS security advisory [0] regarding "an issue that affects >> validation of certificates using OCSP responses, which can falsely >> report a certificate as valid under certain circumstances." >> >> I

Re: GnuTLS security update

2016-09-11 Thread Vincent Legoll
On Sun, Sep 11, 2016 at 5:41 PM, Leo Famulari wrote: > There is a GnuTLS security advisory [0] regarding "an issue that affects > validation of certificates using OCSP responses, which can falsely > report a certificate as valid under certain circumstances." > > I updated GnuTLS on core-updates to