pyrox.dev / nixpkgs
lol
fork atom

Merge pull request #34793 from oxij/pkg/fetchurl-securely

trivial: fetchurl more securely

authored by Graham Christensen and committed by GitHub 573c5203 29412172

+5 -3
unified split
+1 -1
pkgs/tools/networking/curl/default.nix
··· 27 name = "curl-7.58.0"; 28 29 src = fetchurl { 30 - url = "http://curl.haxx.se/download/${name}.tar.bz2"; 31 sha256 = "0cg7klhf1ksnbw5wvwa802qir877zv4y3dj7swz1xh07g3wq3c0w"; 32 }; 33
··· 27 name = "curl-7.58.0"; 28 29 src = fetchurl { 30 + url = "https://curl.haxx.se/download/${name}.tar.bz2"; 31 sha256 = "0cg7klhf1ksnbw5wvwa802qir877zv4y3dj7swz1xh07g3wq3c0w"; 32 }; 33
+4 -2
pkgs/tools/networking/stunnel/default.nix
··· 5 version = "5.44"; 6 7 src = fetchurl { 8 - url = "http://www.stunnel.org/downloads/${name}.tar.gz"; 9 - sha256 = "1692y69wl7j6yjgnrrzclgzb34bxsaxjzl1dfy47vms7pdfk42lr"; 10 }; 11 12 buildInputs = [ openssl ];
··· 5 version = "5.44"; 6 7 src = fetchurl { 8 + url = "https://www.stunnel.org/downloads/${name}.tar.gz"; 9 + sha256 = "990a325dbb47d77d88772dd02fbbd27d91b1fea3ece76c9ff4461eca93f12299"; 10 + # please use the contents of "https://www.stunnel.org/downloads/${name}.tar.gz.sha256", 11 + # not the output of `nix-prefetch-url` 12 }; 13 14 buildInputs = [ openssl ];