fetchMavenArtifact: switch mirrors to https

Maven repositories are disabling HTTP support for security.
Even though Nix adds some security with its own hash validation,
broken mirrors are a, well, suboptimal experience.
I don't know of any plans by sonatype, but it seems like a matter
of time.

https://www.lightbend.com/blog/lightbend-to-require-https-on-repos-starting-august-5-2020
wip/yesman
Robert Hensing 4 years ago
parent 10fafe2125
commit f0568c2228
  1. 8
      pkgs/build-support/fetchmavenartifact/default.nix
  2. 6
      pkgs/development/interpreters/clojurescript/lumo/deps.nix

@ -3,10 +3,10 @@
{ fetchurl, stdenv }:
let
defaultRepos = [
"http://repo1.maven.org/maven2"
"http://oss.sonatype.org/content/repositories/releases"
"http://oss.sonatype.org/content/repositories/public"
"http://repo.typesafe.com/typesafe/releases"
"https://repo1.maven.org/maven2"
"https://oss.sonatype.org/content/repositories/releases"
"https://oss.sonatype.org/content/repositories/public"
"https://repo.typesafe.com/typesafe/releases"
];
in

@ -4,9 +4,9 @@
let repos = [
"https://repo.clojars.org/"
"https://repo1.maven.org/"
"http://oss.sonatype.org/content/repositories/releases/"
"http://oss.sonatype.org/content/repositories/public/"
"http://repo.typesafe.com/typesafe/releases/"
"https://oss.sonatype.org/content/repositories/releases/"
"https://oss.sonatype.org/content/repositories/public/"
"https://repo.typesafe.com/typesafe/releases/"
];
in rec {

Loading…
Cancel
Save