guix_mirror_bot pushed a commit to branch rust-team
in repository guix.
commit e575d791b8e2012a5f01d5182aba6c6d45207534
Author: Hilton Chain <[email protected]>
AuthorDate: Wed Oct 21 18:26:16 2026 +0800
gnu: rust-webpki-root-certs: Remove compromised certificate.
* gnu/packages/rust-crates.scm (rust-webpki-root-certs-0.26.8)
(rust-webpki-root-certs-1.0.3, rust-webpki-root-certs-1.0.5)
(rust-webpki-root-certs-1.0.6, rust-webpki-root-certs-1.0.7)
(rust-webpki-root-certs-1.0.9) [#:snippet]: Remove compromised certificate
"emSign ECC Root CA - G3".
Link: https://codeberg.org/guix/guix/issues/11954#issuecomment-25957406
Link: https://github.com/rustls/webpki-roots/pull/133
---
gnu/packages/rust-crates.scm | 36 ++++++++++++++++++++++++++++++------
1 file changed, 30 insertions(+), 6 deletions(-)
diff --git a/gnu/packages/rust-crates.scm b/gnu/packages/rust-crates.scm
index e3b462421d7..4bd1b0dcfff 100644
--- a/gnu/packages/rust-crates.scm
+++ b/gnu/packages/rust-crates.scm
@@ -41889,7 +41889,11 @@ fn main() {
(define rust-webpki-root-certs-0.26.8
(crate-source "webpki-root-certs" "0.26.8"
- "1i462gigwj2mfxa7fxa2cvjmz19pr2j37aiz9cs1hb4dbqgxdbh9"))
+ "1i462gigwj2mfxa7fxa2cvjmz19pr2j37aiz9cs1hb4dbqgxdbh9"
+ #:snippet
+ ;; Remove compromised "emSign ECC Root CA - G3".
+ '(substitute* "src/lib.rs"
+ ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
(define rust-webpki-root-certs-1.0.10
(crate-source "webpki-root-certs" "1.0.10"
@@ -41897,23 +41901,43 @@ fn main() {
(define rust-webpki-root-certs-1.0.3
(crate-source "webpki-root-certs" "1.0.3"
- "0vkqczsmad6rr1rc5qnr36f6jqblz9p1xrvv5rv4ps0d93n53mh5"))
+ "0vkqczsmad6rr1rc5qnr36f6jqblz9p1xrvv5rv4ps0d93n53mh5"
+ #:snippet
+ ;; Remove compromised "emSign ECC Root CA - G3".
+ '(substitute* "src/lib.rs"
+ ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
(define rust-webpki-root-certs-1.0.5
(crate-source "webpki-root-certs" "1.0.5"
- "1p05rj22vamgs9n34326vypxy3klmdbphqrjrxl3y4cb8309z8in"))
+ "1p05rj22vamgs9n34326vypxy3klmdbphqrjrxl3y4cb8309z8in"
+ #:snippet
+ ;; Remove compromised "emSign ECC Root CA - G3".
+ '(substitute* "src/lib.rs"
+ ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
(define rust-webpki-root-certs-1.0.6
(crate-source "webpki-root-certs" "1.0.6"
- "1jm844z3caldlsb4ycb2h7q6vw4awfdgmddmx2sgyxi6mjj1hkw0"))
+ "1jm844z3caldlsb4ycb2h7q6vw4awfdgmddmx2sgyxi6mjj1hkw0"
+ #:snippet
+ ;; Remove compromised "emSign ECC Root CA - G3".
+ '(substitute* "src/lib.rs"
+ ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
(define rust-webpki-root-certs-1.0.7
(crate-source "webpki-root-certs" "1.0.7"
- "0b59x5mzsilk42w59nif3lfhc24pgzb0v35pi6p01qy37z7424gk"))
+ "0b59x5mzsilk42w59nif3lfhc24pgzb0v35pi6p01qy37z7424gk"
+ #:snippet
+ ;; Remove compromised "emSign ECC Root CA - G3".
+ '(substitute* "src/lib.rs"
+ ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
(define rust-webpki-root-certs-1.0.9
(crate-source "webpki-root-certs" "1.0.9"
- "16qw59hxn1lln1615kb9rjy16pfxd1x8m9f9w6vwv36c5am58rdr"))
+ "16qw59hxn1lln1615kb9rjy16pfxd1x8m9f9w6vwv36c5am58rdr"
+ #:snippet
+ ;; Remove compromised "emSign ECC Root CA - G3".
+ '(substitute* "src/lib.rs"
+ ((".*b\"\\\\x30\\\\x82\\\\x02\\\\x4E.*") ""))))
(define rust-webpki-roots-0.25.4
(crate-source "webpki-roots" "0.25.4"