From patchwork Wed Jun 11 22:17:39 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Ashish SHUKLA X-Patchwork-Id: 43072 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 267FB27BC4B; Wed, 11 Jun 2025 23:18:23 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id A63DF27BC49 for ; Wed, 11 Jun 2025 23:18:22 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uPTln-0006se-94; Wed, 11 Jun 2025 18:18:08 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uPTlk-0006re-MJ for guix-patches@gnu.org; Wed, 11 Jun 2025 18:18:05 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uPTlk-0003o8-C1 for guix-patches@gnu.org; Wed, 11 Jun 2025 18:18:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:Date:From:To:In-Reply-To:References:Subject; bh=i1Cjc7tOMoWvdwOzaSiJdRlO6Mlme+UuBSjafMkzSmU=; b=C1TOeZMs420GhT8HgZqLtpXKipfGhExVGC79HGyUV/HyTZjp0x7viPl1WX8XnD63yT1XogKsm+1aj+9+M8FKRqO3a8mi5WvKG56mP5yz1Ya62TlAO3gd3pDz2XQIh2Prxpxhr+tY/0FcrOZ61pt3qR2cXDZA1xECCecmSfQUEAr05HFAudUx001/bSQdeHaKYRu9q52vCzTPGEOZS+7+SBTwMJ/QcRLmXQ6i291nbPxdzSnj0+HPnhab9K1vVwzqJ7AtPgKkMqr2FLczwW5zehluyMjwftMwVyzw/fU1sax2nM067KRlRvv9D5Gj8zlgBaZXL1ILXmd9CJOelx9xRg==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1uPTlk-0002B0-8H for guix-patches@gnu.org; Wed, 11 Jun 2025 18:18:04 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#78302] [PATCH v2 1/3] gnu: nginx: Update to 1.27.5. [security fixes] References: In-Reply-To: Resent-From: Ashish SHUKLA Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 11 Jun 2025 22:18:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 78302 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 78302@debbugs.gnu.org Cc: Ashish SHUKLA Received: via spool by 78302-submit@debbugs.gnu.org id=B78302.17496802838359 (code B ref 78302); Wed, 11 Jun 2025 22:18:04 +0000 Received: (at 78302) by debbugs.gnu.org; 11 Jun 2025 22:18:03 +0000 Received: from localhost ([127.0.0.1]:52877 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uPTlh-0002AT-Ij for submit@debbugs.gnu.org; Wed, 11 Jun 2025 18:18:03 -0400 Received: from anamika.lostca.se ([65.21.75.227]:48734) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1uPTlc-00028R-94 for 78302@debbugs.gnu.org; Wed, 11 Jun 2025 18:17:59 -0400 Received: from localhost.localdomain (2a02-9140-3881-5400-004b-3467-835f-7892.red-2a02-914.customerbaf.ipv6.rima-tde.net [IPv6:2a02:9140:3881:5400:4b:3467:835f:7892]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id 784A3288F0; Wed, 11 Jun 2025 22:17:49 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1749680269; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=i1Cjc7tOMoWvdwOzaSiJdRlO6Mlme+UuBSjafMkzSmU=; b=oWUBL5XN0btxBe9rrCn0A3iik2meWS6Ky5EowZMmzz+L+XVjtNGI27T6TxhShskCpDwQgK bWz+xN8oQiDotUffEf7E6xxQBmDqssPKhNrViwXvuAUDNj7WcRW2P4lH6q024rNlE47fJF JiS+GLTiNAUhItO9bBomXGytVAXe+zw= Date: Thu, 12 Jun 2025 00:17:39 +0200 Message-ID: <253854a2ccc50abdc0d6d8f534843fd91d7673e8.1749680261.git.ashish.is@lostca.se> X-Mailer: git-send-email 2.49.0 MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Ashish SHUKLA X-ACL-Warn: , Ashish SHUKLA via Guix-patches X-Patchwork-Original-From: Ashish SHUKLA via Guix-patches via From: Ashish SHUKLA Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This release includes fix for (CVE-2025-23419). * gnu/packages/web.scm (nginx): Update to 1.27.5. Change-Id: I45e89fc97a3536843e5af80ffb072db705fb3f84 --- gnu/packages/web.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) base-commit: 60828ad981b9d0673704f7a57e01fb6269852007 diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 22369cd3f5..94a29e2a86 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -567,14 +567,14 @@ (define-public nginx ;; Track the ‘mainline’ branch. Upstream considers it more reliable than ;; ’stable’ and recommends that “in general you deploy the NGINX mainline ;; branch at all times” (https://www.nginx.com/blog/nginx-1-6-1-7-released/) - (version "1.27.3") + (version "1.27.5") (source (origin (method url-fetch) (uri (string-append "https://nginx.org/download/nginx-" version ".tar.gz")) (sha256 (base32 - "00vrkdx0a6fpy8n0n7m9xws0dfa7dbb9pqnh3jv3c824ixbaj8xs")))) + "03nxfik3f7lj9lnj71nm1h7q26xsxhr1ppf302hbhv9akjxwwsp9")))) (build-system gnu-build-system) (inputs (list libxcrypt libxml2 libxslt openssl pcre zlib)) (arguments From patchwork Wed Jun 11 22:17:40 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ashish SHUKLA X-Patchwork-Id: 43073 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 09CCC27BC4B; Wed, 11 Jun 2025 23:19:21 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id C01E127BC49 for ; Wed, 11 Jun 2025 23:19:20 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uPTmh-00075E-Hi; Wed, 11 Jun 2025 18:19:03 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uPTmg-00074b-Ju for guix-patches@gnu.org; Wed, 11 Jun 2025 18:19:02 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uPTmg-0003wY-Az for guix-patches@gnu.org; Wed, 11 Jun 2025 18:19:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=cFUkcnfh2yarzuKosq4HbizQVV+h2WLV2VbimmTt1eM=; b=ehczd4rA4mhM4UrKJlnRTUG0/hCA4y5bynLC5vXOlMhelAr6kGCbhhFT7bLBZ6qlZzMbTfd9W3qFu+nE00nmBeT2G4MTRpLCd3j1el1SdDDMNsQCHE1XXPL+P/7ooDflzOE+W6wr7G1ARb9/lCiZSJXoWWDBSjDPU1cxXcDCQIBAALDDwTHskVI7i2omKG1pp1AgkgMUZEWu2ehW5gloj8fHUEdPjNZXQiZ2Wbb5+bkpGg65CVBd+QnUKovkW1e2UUBGldEu4A6QYrgn3fMDoM8mFBHD4wijIHjwzLa0IJO5vSRBcZ1WoIwHa51tamIvCUiexyn3LLPerhLuj+vB+A==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1uPTmg-0002GB-5s for guix-patches@gnu.org; Wed, 11 Jun 2025 18:19:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#78302] [PATCH v2 2/3] gnu: nginx-documentation: Update to 1.27.5. Resent-From: Ashish SHUKLA Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 11 Jun 2025 22:19:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 78302 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 78302@debbugs.gnu.org Cc: Ashish SHUKLA Received: via spool by 78302-submit@debbugs.gnu.org id=B78302.17496802868402 (code B ref 78302); Wed, 11 Jun 2025 22:19:02 +0000 Received: (at 78302) by debbugs.gnu.org; 11 Jun 2025 22:18:06 +0000 Received: from localhost ([127.0.0.1]:52881 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uPTll-0002BP-97 for submit@debbugs.gnu.org; Wed, 11 Jun 2025 18:18:05 -0400 Received: from anamika.lostca.se ([2a01:4f9:3b:505c::2]:36552) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1uPTlg-00029D-Tw for 78302@debbugs.gnu.org; Wed, 11 Jun 2025 18:18:02 -0400 Received: from localhost.localdomain (2a02-9140-3881-5400-004b-3467-835f-7892.red-2a02-914.customerbaf.ipv6.rima-tde.net [IPv6:2a02:9140:3881:5400:4b:3467:835f:7892]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id 0E2292886C; Wed, 11 Jun 2025 22:17:53 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1749680274; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=cFUkcnfh2yarzuKosq4HbizQVV+h2WLV2VbimmTt1eM=; b=OOXYMmQs9bk0c0Mw52KgudnEbibtEXr/l5Dx90rZwRf8xKBsq4sqVY/A3J4Y7XHSMLu2yL dNGEuGHNIGFF9pZXIrshtS5YH+d1NKwnlD6pUK2g/Qq5WxKTxbYEPC3lJdj1LiAo0+9OHn rDXc+Kz3GmIEWFV4lJUh0sm+b4b6EcY= Date: Thu, 12 Jun 2025 00:17:40 +0200 Message-ID: <3b9726ba32fbc5be9ade0003e3813ed19356ea4f.1749680261.git.ashish.is@lostca.se> X-Mailer: git-send-email 2.49.0 In-Reply-To: <253854a2ccc50abdc0d6d8f534843fd91d7673e8.1749680261.git.ashish.is@lostca.se> References: <253854a2ccc50abdc0d6d8f534843fd91d7673e8.1749680261.git.ashish.is@lostca.se> MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Ashish SHUKLA X-ACL-Warn: , Ashish SHUKLA via Guix-patches X-Patchwork-Original-From: Ashish SHUKLA via Guix-patches via From: Ashish SHUKLA Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches * gnu/packages/web.scm (nginx-documentation): Update to 1.27.5. Change-Id: I2cb7f9c67284e509cc7b21653882593ad2321324 --- gnu/packages/web.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index 94a29e2a86..cc1b8b5724 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -665,9 +665,9 @@ (define-public nginx (define-public nginx-documentation ;; This documentation should be relevant for the current nginx package. - (let ((version "1.27.3") - (revision 3156) - (changeset "5c6ef6def8bc")) + (let ((version "1.27.5") + (revision 3198) + (changeset "5b736526489f")) (package (name "nginx-documentation") (version (simple-format #f "~A-~A-~A" version revision changeset)) @@ -679,7 +679,7 @@ (define-public nginx-documentation (file-name (string-append name "-" version)) (sha256 (base32 - "09wdvgvsr7ayjz3ypq8qsm12idb9z626j5ibmknc8phm10gh8cgk")))) + "04qbi7rczv28k4ainnvnv7xxf48jmh5ydxpnlzr4zdpkl7fjz0j3")))) (build-system gnu-build-system) (arguments '(#:tests? #f ; no test suite From patchwork Wed Jun 11 22:17:42 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ashish SHUKLA X-Patchwork-Id: 43074 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 1BEC027BC4B; Wed, 11 Jun 2025 23:19:25 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-6.4 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_DNSWL_BLOCKED, RCVD_IN_VALIDITY_CERTIFIED,RCVD_IN_VALIDITY_RPBL,RCVD_IN_VALIDITY_SAFE, SPF_HELO_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 858B627BC49 for ; Wed, 11 Jun 2025 23:19:24 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1uPTmi-00075N-5s; Wed, 11 Jun 2025 18:19:04 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uPTmh-00074s-5w for guix-patches@gnu.org; Wed, 11 Jun 2025 18:19:03 -0400 Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1uPTmg-0003we-TJ for guix-patches@gnu.org; Wed, 11 Jun 2025 18:19:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debbugs.gnu.org; s=debbugs-gnu-org; h=MIME-Version:References:In-Reply-To:Date:From:To:Subject; bh=f71+NugiB5c+j4oiOlD2HMqO33Myz28AbC/UeLb6QQc=; b=vGrp9fgGPwXWBxgP9zdS5KLa2lDCh/k4+bpY6hhYiFK1vhWYCG3m55kPVI3TNCAoZeN/it0eV7LcJclSLC6waTbyBH5OxBlhq9w7ACPcN1Kw+3z/ALc0jrh+JWemszb7aXyIOnqfZAoAoiZLd63B7p+cw5Lqorxl5v3219jHbv2ZddRh2DtYY10qCjSGfUgzmM2xtP/esvfH+3/5rSIx/Gp4j88xfY6S2ANPaKfxAAW7Xux6ygrLoTVr8BT1jy6QsPZeIGd5A25ICM7+IoGuZwcLeCH6GuYEoPVxCK9xMqu4mzirqZsJiQMoCRsi1VKZ0wIN2gOXXz+bJhL+yRXBow==; Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1uPTmg-0002GJ-Nn for guix-patches@gnu.org; Wed, 11 Jun 2025 18:19:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#78302] [PATCH v2 3/3] gnu: Add nginx-http3. Resent-From: Ashish SHUKLA Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 11 Jun 2025 22:19:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 78302 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 78302@debbugs.gnu.org Cc: Ashish SHUKLA Received: via spool by 78302-submit@debbugs.gnu.org id=B78302.17496802998546 (code B ref 78302); Wed, 11 Jun 2025 22:19:02 +0000 Received: (at 78302) by debbugs.gnu.org; 11 Jun 2025 22:18:19 +0000 Received: from localhost ([127.0.0.1]:52884 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uPTly-0002Dm-UU for submit@debbugs.gnu.org; Wed, 11 Jun 2025 18:18:19 -0400 Received: from anamika.lostca.se ([65.21.75.227]:41422) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1uPTlw-0002Ca-Do for 78302@debbugs.gnu.org; Wed, 11 Jun 2025 18:18:17 -0400 Received: from localhost.localdomain (2a02-9140-3881-5400-004b-3467-835f-7892.red-2a02-914.customerbaf.ipv6.rima-tde.net [IPv6:2a02:9140:3881:5400:4b:3467:835f:7892]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id D6DE42886E; Wed, 11 Jun 2025 22:18:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1749680290; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=f71+NugiB5c+j4oiOlD2HMqO33Myz28AbC/UeLb6QQc=; b=EUfqA3SRuZFvtD4OZtpxyN9iza2IKa9jv4tQkcwExGF8ATWmS/TL4txHa+oTHf9PMRY/H1 vj8hHSiyZ3wBSoP4OlMKPIDBChAQOwTRjiu8JTWtH+dtrgyC7BwlWrbdaiNTeT3mYB4HYJ ZiPwcplLXMrSrrZuOx3nmkdMBnNxdIs= Date: Thu, 12 Jun 2025 00:17:42 +0200 Message-ID: <67fccf4293646c164ab3f9c01bb9de826f5a5caf.1749680261.git.ashish.is@lostca.se> X-Mailer: git-send-email 2.49.0 In-Reply-To: <253854a2ccc50abdc0d6d8f534843fd91d7673e8.1749680261.git.ashish.is@lostca.se> References: <253854a2ccc50abdc0d6d8f534843fd91d7673e8.1749680261.git.ashish.is@lostca.se> MIME-Version: 1.0 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Ashish SHUKLA X-ACL-Warn: , Ashish SHUKLA via Guix-patches X-Patchwork-Original-From: Ashish SHUKLA via Guix-patches via From: Ashish SHUKLA Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches This package uses boringssl for QUIC support in nginx. * gnu/packages/web.scm: Add nginx-http3. Change-Id: I05348d57d5fcd4be661c3500b186df5e05f24160 --- This revision addresses the lint warnings. gnu/packages/web.scm | 48 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) diff --git a/gnu/packages/web.scm b/gnu/packages/web.scm index cc1b8b5724..5725ba2b45 100644 --- a/gnu/packages/web.scm +++ b/gnu/packages/web.scm @@ -125,6 +125,7 @@ (define-module (gnu packages web) #:use-module (gnu packages build-tools) #:use-module (gnu packages certs) #:use-module (gnu packages check) + #:use-module (gnu packages cmake) #:use-module (gnu packages compression) #:use-module (gnu packages cpp) #:use-module (gnu packages crates-crypto) @@ -714,6 +715,53 @@ (define-public nginx-documentation "This package provides HTML documentation for the nginx web server.") (license license:bsd-2)))) +(define-public nginx-http3 + (let* + ((boringssl-commit "864a235afcf4d2575b1eab8de96fbf0d84f6cda9") + (boringssl + (origin + (method git-fetch) + (uri + (git-reference + (url "https://boringssl.googlesource.com/boringssl") + (commit boringssl-commit))) + (file-name (git-file-name "boringssl" boringssl-commit)) + (sha256 + (base32 "0ayd3519zyrwn9ccmlch3j7qvkg80az7z278n2vhrrl977dakyny"))))) + (package + (inherit nginx) + (name "nginx-http3") + (inputs + (modify-inputs (package-inputs nginx) + (replace "openssl" boringssl))) + (native-inputs + (modify-inputs (package-native-inputs nginx) + (append cmake-minimal))) + (arguments + (substitute-keyword-arguments (package-arguments nginx) + ((#:phases phases #~(list)) + #~(modify-phases #$phases + (add-before 'configure 'build-boringssl + (lambda* (#:key inputs parallel-build? #:allow-other-keys) + (mkdir-p "boringssl-build") + (let ((boringssl-build-dir (string-append (getcwd) + "/boringssl-build"))) + (with-directory-excursion (assoc-ref inputs "openssl") + (invoke "cmake" (string-append "-B" boringssl-build-dir) + "-DCMAKE_BUILD_TYPE=RelWithDebInfo") + (invoke "make" "-C" boringssl-build-dir + (string-append "-j" + (if parallel-build? + (number->string (parallel-job-count)) + "1"))))))))) + + ((#:configure-flags flags #~(list)) + #~(cons* "--with-http_v3_module" + (string-append "--with-cc-opt=-I" + (assoc-ref %build-inputs "openssl") "/include") + (string-append "--with-ld-opt=-Lboringssl-build -lstdc++") + #$flags))))))) + (define-public nginx-accept-language-module ;; Upstream has never made a release; use current commit instead. (let ((commit "2f69842f83dac77f7d98b41a2b31b13b87aeaba7")