apt/apt-pkg/contrib/gpgv.cc, branch 2.9.13Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.132024-11-12T19:36:22Zapt-pkg/contrib/gpgv.cc: APT::StringView -> std::string_view2024-11-12T19:36:22Zнабnabijaczleweli@nabijaczleweli.xyz2024-11-12T16:59:16Zurn:sha1:36998f582e211f745799ddc2a8bc286541e56689dpkgpm: lift out CopyIndented() and make_unique_*() for FILEs; use getline() for reading lines instead of 1k buffer2024-11-12T12:46:17Zнабnabijaczleweli@nabijaczleweli.xyz2024-11-11T15:17:35Zurn:sha1:9f81a8dd0ee585a360ae0ae7786959630a8d0be0Turn unique_ptr<decltype(fclose and free)> into real deleter types (warnings now, UB in C++20)2024-11-12T12:46:06Zнабnabijaczleweli@nabijaczleweli.xyz2024-11-12T12:28:04Zurn:sha1:78e503bc1d79bc4fc29bc9cbe1dfb68ae4d16acfgpgv: Add IsAssertedPubKeyAlgo() function2024-07-15T17:17:20ZJulian Andres Klodejulian.klode@canonical.com2024-07-15T16:42:54Zurn:sha1:29dd6c45bc2579d012ac78ba3100a2485c78ff1d
This checks whether a public key algorithm is asserted.
Modernize standard library includes2024-02-20T12:49:04ZJulian Andres Klodejulian.klode@canonical.com2024-02-20T12:43:08Zurn:sha1:40a75722c43ae24cb9a99d6730a3b25b65819c49
This was automated with sed and git-clang-format, and then I had to
fix up the top of policy.cc by hand as git-clang-format accidentally
indented it by two spaces.
Replace PrintStatus with SendMessage usage2021-02-04T10:00:00ZDavid Kalnischkiesdavid@kalnischkies.de2020-06-28T18:52:09Zurn:sha1:96dc40b19623621a9cc2c5541fb3adbbceb553b1
varg API is a nightmare as the symbols seems different on ever other
arch, but more importantly SendMessage does a few checks on the content
of the message and it is all outputted via C++ iostreams and not mixed
in FILE* which is handy for overriding the streams.
Fully deprecate apt-key, schedule removal for Q2/20222020-05-06T10:33:39ZJulian Andres Klodejulian.klode@canonical.com2020-05-06T10:33:39Zurn:sha1:ee284d5917d09649b68ff1632d44e892f290c52f
People are still using apt-key add and friends, despite that not
being guaranteed to work. Let's tell them to stop doing so.
We might still want a list command at a future point, but this
needs deciding, and a blanket ban atm seems like a sensible step
until we figured that out.
Add explicit message for unsupported binary signature2019-03-03T20:52:40ZDavid Kalnischkiesdavid@kalnischkies.de2019-03-03T18:41:42Zurn:sha1:3e3638dc9389591cfd30baa6c41d85c31127402a
Verifying the content of Release.gpg made us fail on binary signatures
which were never officially supported (apt-secure manpage only documents
only the generation of ASCII armored), but silently accepted by gpgv as
we passed it on unchecked before.
The binary format is complex and is itself split into old and new
formats so adding support for this would not only add lots of code but
also a good opportunity for bugs and dubious benefit.
Reporting this issue explicitly should help repository creators figure
out the problem faster than the default NODATA message hinting at
captive portals.
Given that the binary format has no file magic or any other clear and
simple indication that this is a detached signature we guess based on
the first two bits only – and by that only supporting the "old" binary
format which seems to be the only one generated by gnupg in this case.
References: e2965b0b6bdd68ffcad0e06d11755412a7e16e50
Closes: #921685
gpgv: Use buffered writes for splitting clearsigned files2019-02-04T13:43:16ZJulian Andres Klodejulian.klode@canonical.com2019-02-04T13:43:16Zurn:sha1:cde5ee8fe527d3d672775909d27110d11c393774
This is safe here, as the code ensures that the file is flushed
before it is being used. The next series should probably make
GetTempFile() buffer writes by default.
Avoid boolean flags by splitting writeTo functions2019-02-01T13:02:08ZDavid Kalnischkiesdavid@kalnischkies.de2019-02-01T13:02:08Zurn:sha1:fd438818d2518901396d6835f845b0b90c3a82fa
Suggested-By: Julian Andres Klode
Gbp-Dch: Ignore