Merge pull request #34793 from oxij/pkg/fetchurl-securely

trivial: fetchurl more securely
This commit is contained in:
Graham Christensen 2018-02-09 19:44:12 -05:00 committed by GitHub
commit 573c52036c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 3 deletions

View file

@ -27,7 +27,7 @@ stdenv.mkDerivation rec {
name = "curl-7.58.0";
src = fetchurl {
url = "http://curl.haxx.se/download/${name}.tar.bz2";
url = "https://curl.haxx.se/download/${name}.tar.bz2";
sha256 = "0cg7klhf1ksnbw5wvwa802qir877zv4y3dj7swz1xh07g3wq3c0w";
};

View file

@ -5,8 +5,10 @@ stdenv.mkDerivation rec {
version = "5.44";
src = fetchurl {
url = "http://www.stunnel.org/downloads/${name}.tar.gz";
sha256 = "1692y69wl7j6yjgnrrzclgzb34bxsaxjzl1dfy47vms7pdfk42lr";
url = "https://www.stunnel.org/downloads/${name}.tar.gz";
sha256 = "990a325dbb47d77d88772dd02fbbd27d91b1fea3ece76c9ff4461eca93f12299";
# please use the contents of "https://www.stunnel.org/downloads/${name}.tar.gz.sha256",
# not the output of `nix-prefetch-url`
};
buildInputs = [ openssl ];