gnu: Add libkomparediff2.

* gnu/packages/kde.scm (libkomparediff2): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

gnu: hidapi: Fix 'license'.

* gnu/packages/libusb.scm (hidapi)[license]: Actually call
'non-copyleft'.

doc: Mention elpa.gnu.org package signatures.

* doc/guix.texi (Invoking guix import): Document elpa.gnu.org
signatures.

gnu: Add vifm.

* gnu/packages/vim.scm (vifm): New variable.

gnu: libxslt: Fix CVE-2016-4738.

* gnu/packages/patches/libxslt-CVE-2016-4738.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/xml.scm (libxslt)[replacement]: New field.
(libxslt/fixed): New variable.

gnu: postgresql: Update to 9.5.5.

* gnu/packages/databases.scm (postgresql): Update to 9.5.5.
[home-page]: Use https.

gnu: mariadb: Update to 10.1.19.

* gnu/packages/databases.scm (mariadb): Update to 10.1.19.

gnu: Add pam-krb5 service.

* doc/guix.texi (Kerberos Services): New node.
* gnu/services/kerberos.scm: New file.
* gnu/local.mk: Add it.

gnu: Add faust-2.

* gnu/packages/audio.scm (faust-2): New variable.

gnu: Add LLVM variant with RTTI support.

* gnu/packages/llvm.scm (llvm-with-rtti): New variable.

gnu: python-tempest-lib: Update to 1.0.0.

* gnu/packages/openstack.scm (python-tempest-lib): Update to 1.0.0.
[home-page]: Use HTTPS.

gnu: python-os-testr: Update to 0.8.0.

* gnu/packages/openstack.scm (python-os-testr, python2-os-testr): Update
to 0.8.0.
[home-page]: Use HTTPS.

gnu: python-jsonschema: Correct inputs.

* gnu/packages/python.scm (python-jsonschema)[inputs]: Remove
python-setuptools. Move python-vcversioner to ...
[native-inputs]: ... here.
* gnu/packages/python.scm (python2-jsonschema)[inputs]: Move
python2-functools32 to ...
[propagated-inputs]: ... here.
[native-inputs]: Add python2-setuptools.

gnu: libgit2: Update to 0.24.3 [fixes CVE-2016-{8568,8569}].

* gnu/packages/version-control.scm (libgit2): Update to 0.24.3.

gnu: python-cryptography, python-cryptography-vectors: Update to 1.5.3.

* gnu/packages/python.scm (python-cryptography, python2-cryptography):
Update to 1.5.3.
[native-inputs]: Add python-pytz. Change python-pytest to python-pytest-2.9.2.
(python-cryptography-vectors, python2-cryptography-vectors): Update to 1.5.3.

gnu: Add python-pytest-2.9.2.

* gnu/packages/python.scm (python-pytest-2.9.2): New variable.

gnu: mupdf: Fix CVE-2016-{7504,7505,7506,7563,7564,9017,9136} in bundled mujs.

* gnu/packages/patches/mupdf-CVE-2016-7504.patch,
gnu/packages/patches/mupdf-CVE-2016-7505.patch
gnu/packages/patches/mupdf-CVE-2016-7506.patch
gnu/packages/patches/mupdf-CVE-2016-7563.patch
gnu/packages/patches/mupdf-CVE-2016-7564.patch
gnu/packages/patches/mupdf-CVE-2016-9017.patch
gnu/packages/patches/mupdf-CVE-2016-9136.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/pdf.scm (mupdf)[source]: Use them.

system: Use grub from bootloader configuration.

* gnu/system/grub.scm (gnu): Export grub-configuration-grub.
* guix/scripts/system.scm (perform-action): Use it.
(define-module): Don't import (gnu packages grub).

Co-authored-by: Danny Milosavljevic <dannym@scratchpost.org>

gnu: Add plantuml.

* gnu/packages/uml.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.

Signed-off-by: Roel Janssen <roel@gnu.org>

guix download: Add '--no-check-certificate' option.

* guix/download.scm (download-to-store): Add #:verify-certificate?
parameter and honor it.
* guix/scripts/download.scm (%default-options): Add
'verify-certificate?' key.
(show-help, %options): Add '--no-check-certificate'.
(guix-download): Pass #:verify-certificate to 'download-to-store'.
* doc/guix.texi (Invoking guix download): Document it.