Skip to content

build: ftp.gnu.org nettle + pin urcrypt dependency#1028

Closed
matthew-levan wants to merge 2 commits into
jb/close-sslfrom
ml/close-ssl
Closed

build: ftp.gnu.org nettle + pin urcrypt dependency#1028
matthew-levan wants to merge 2 commits into
jb/close-sslfrom
ml/close-ssl

Conversation

@matthew-levan
Copy link
Copy Markdown
Contributor

@matthew-levan matthew-levan commented Jun 5, 2026

No description provided.

Switch the nettle dependency from the gnutls/nettle GitHub mirror to the
official GNU release tarball (https://ftp.gnu.org/gnu/nettle/nettle-4.0.tar.gz),
pinned by its Zig hash. The GNU tarball is the canonical, GPG-signed artifact;
the mirror's auto-generated archive checksums are not guaranteed byte-stable.
Same nettle 4.0 sources, so ext/nettle/build.zig and the vendored gen/ config
are unchanged.
The urcrypt dependency was a temporary local path (../../../urcrypt). Pin it to
the urcrypt close-ssl source on GitHub (urbit/urcrypt @ f327ea6, the ml/tests
PR head) via an archive URL + Zig hash, so the build is reproducible.

Verified: `zig build` links urcrypt+nettle into the urbit binary and
`zig build jets-test` passes (test jets: ok).
@matthew-levan matthew-levan requested a review from a team as a code owner June 5, 2026 20:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant