At some point, I'd like to make another attempt at
71f1f4884b ("openssl: stop static binaries referencing libs"), which
was reverted in 195c7da07d. One problem with my previous attempt is
that I moved OpenSSL's libraries to a lib output, but many dependent
packages were hardcoding the out output as the location of the
libraries. This patch fixes every such case I could find in the tree.
It won't have any effect immediately, but will mean these packages
will automatically use an OpenSSL lib output if it is reintroduced in
future.
This patch should cause very few rebuilds, because it shouldn't make
any change at all to most packages I'm touching. The few rebuilds
that are introduced come from when I've changed a package builder not
to use variable names like openssl.out in scripts / substitution
patterns, which would be confusing since they don't hardcode the
output any more.
I started by making the following global replacements:
${pkgs.openssl.out}/lib -> ${lib.getLib pkgs.openssl}/lib
${openssl.out}/lib -> ${lib.getLib openssl}/lib
Then I removed the ".out" suffix when part of the argument to
lib.makeLibraryPath, since that function uses lib.getLib internally.
Then I fixed up cases where openssl was part of the -L flag to the
compiler/linker, since that unambigously is referring to libraries.
Then I manually investigated and fixed the following packages:
- pycurl
- citrix-workspace
- ppp
- wraith
- unbound
- gambit
- acl2
I'm reasonably confindent in my fixes for all of them.
For acl2, since the openssl library paths are manually provided above
anyway, I don't think openssl is required separately as a build input
at all. Removing it doesn't make a difference to the output size, the
file list, or the closure.
I've tested evaluation with the OfBorg meta checks, to protect against
introducing evaluation failures.
continuation of #109595
pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.
python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
also update download url
Remove update script, because upstream has changed its CMS, which
changed the paths of the website, so the update script does not work any
more.
OpenSSL is needed for gct-tool and libgpgerror for RSA key utilities
(src/crypt3/cryptkeyrsa.c).
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @goibhniu
So far we used only the defaults, which are gtk2 and qt5. However
nowadays most applications have already switched to Qt 5 and Gtk 3, so
let's aim for that instead.
The reason Gtk 2 is still there is because GnuCash in nixpkgs is using
the Gtk 2 interface, so we can drop it as soon as a newer GnuCash has
landed in nixpkgs.
Right now the only package that depends on this is GnuCash (and
aqbanking of course), so I've tested this by not only building
gwenhywfar and aqbanking but also GnuCash. I did however not test
whether HBCI functionality works, only whether GnuCash starts up.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @goibhniu, @peti, @domenkozar
This is to make sure that we don't get a disparity between the version
in sources.nix and the version in the package expression and it's mostly
to get the package expression in par with aqbanking and gwenhywfar.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @goibhniu
Upstream changes in 5.7.8:
* Update bank information files for German banks because the format of
ZKA files has changed in the meantime.
Upstream release notes in German:
https://www.aquamaniac.de/sites/download/releasenote.php?package=03&release=217
Upstream changes in 5.7.7:
* Fix of manually adding new HBCI accounts (for example using
KMyMoney).
* Fix wrong truncation of account numbers in some turnovers of the
SWIFT parser.
* Simplified code for inserting new account data while fetching HBCI
accounts.
* Update information for German banks.
Upstream release notes in German:
https://www.aquamaniac.de/sites/download/releasenote.php?package=03&release=216
As with the gwenhywfar update, the updater script (update.sh) actually
didn't get the right file to download, so I temporarily modified it to
download file number 2 because file number 1 is the GPG signature. The
reason why I didn't fix the updater is because the upstream site will
have different URLs in the next upcoming version, so our updater is
basically end-of-life for now.
I also changed the package expression to use the version from
sources.nix instead of a hardcoded value.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @goibhniu
Upstream changes in 4.20.0:
* Update bank information files for German banks because the format of
ZKA files has changed in the meantime.
Upstream release notes in German:
https://www.aquamaniac.de/sites/download/releasenote.php?package=01&release=208
Upstream changes in 4.19.0:
* Add frontend for GTK3.
Upstream release notes in German:
https://www.aquamaniac.de/sites/download/releasenote.php?package=01&release=207
Upstream changes in 4.18.0:
* Show hashes for MD5, SHA1 and SHA512 in SSL certificates because
some bank servers display different hashing variants.
* Let GNUTLS handle the localisation of TrustStore certificates.
Upstream release notes in German:
https://www.aquamaniac.de/sites/download/releasenote.php?package=01&release=206
The updater script (update.sh) actually didn't get the right file to
download, so I temporarily modified it to download file number 2 because
file number 1 is the GPG signature. The reason why I didn't fix the
updater is because the upstream site will have different URLs in the
next upcoming version, so our updater is basically end-of-life for now.
I also changed the package expression to use the version from
sources.nix instead of a hardcoded value.
Signed-off-by: aszlig <aszlig@nix.build>
Cc: @goibhniu
* pkgs: refactor needless quoting of homepage meta attribute
A lot of packages are needlessly quoting the homepage meta attribute
(about 1400, 22%), this commit refactors all of those instances.
* pkgs: Fixing some links that were wrongfully unquoted in the previous
commit
* Fixed some instances
* 4.17.0: A few smaller fixes.
* 4.16.0beta: It's now possible to show saved passwords from the
GWEN_PASSWD_STORE file.
* 4.15.6beta: Improve Certificate handling with TLS connections.
* 4.15.5beta: Fix problem with some servers aborting SSL connections.
The full changelogs in German can be found at:
https://www.aquamaniac.de/sites/news/index.php
Built and tested successfully on my machine.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
* 5.6.11: Fix problem with some servers aborting SSL connections.
* 5.6.12: Improve handling of offset accounts during turnover
retrieval.
The full changelogs in German can be found at:
https://www.aquamaniac.de/sites/news/index.php
Built and tested successfully on my machine.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
We're going to create a closure of plugins for aqbanking, so that it's
easier to adapt the gwenhywfar search path to include these store paths.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @cillianderoiste, @urkud
The promised updater, which feeds sources.nix and should help updating
all the aqbanking libraries at the same time.
I was very reluctant to write the updater entirely in Nix as I've done a
while ago for Chromium, because this would involve ugly hacks to do so.
That's why I've done a more conservative approach here, only using
nix-instantiate to get the contents of the current sources.nix.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @cillianderoiste, @urkud
The upstream URLs unfortunately aren't canonical, so let's have a
sources.nix which contains the release IDs used by the upstream sites to
associate a version of a particular package.
We're then going to create an updater script which should update the
sources.nix from there on.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @cillianderoiste, @urkud
This should make it easier to deduplicate things, such as fetching
upstream sources and the plugin paths, because after all these libraries
are aqbanking-related and maintained by the same author on the same
site.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @cillianderoiste, @urkud
Having something like $out/lib/gwenhywfar/plugins/60 when on Nix is a
bit pointless, because we won't have something like a central plugin
directory which could contain plugins for older library versions.
Another reason to strip the effective shared object version is that we
really want to avoid the need to track and update the SO version on
every single update.
This makes it way easier to add support for libchipcard and/or other
related packages/plugins.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @cillianderoiste, @urkud
Upstream changelog for version 5.5.1 through 5.6.10 is in German only
and also not very detailled, so here is a comparison from a GitHub
mirror I've found:
https://github.com/cstim/aqbanking/compare/5.5.1...e129e64472a2
I've also used a similar scheme to what I've been using for gwenhywfar,
so that we can soon unify all of the aqbanking & related libraries.
Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @cillianderoiste, @urkud
This requires recent versions of aqbanking and gwenhywfar:
https://devel.aqbanking.de/trac/aqbanking/ticket/197
It seems as if the developers have changed their version numbering
scheme in 2012 and have only released versions with the "beta" suffix
since then.
Alyssa Ross