apt/methods/http.cc, branch 1.3Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=1.32016-08-16T16:49:37Zdon't sent Range requests if we know its not accepted2016-08-16T16:49:37ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-11T16:24:35Zurn:sha1:d94b1d80d8326334d17f6a43061368e783b8e0aa
If the server told us in a previous request that it isn't supporting
Ranges with bytes via an Accept-Ranges header missing bytes, we don't
try to formulate requests using Ranges.
reorganize server-states resetting in http/https2016-08-16T16:49:37ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-11T14:59:13Zurn:sha1:ebdb6f1810a20ac240b5b2192dc2e6532ff149d2
We keep various information bits about the server around, some only
effecting the currently handled file (like sizes) while others
should be persistent (like pipeline detections). http used to reset all
file-related manually, which is a bit silly if we already have a Reset()
method – which does reset all through –, so extending it with a
parameter for reuse and calling it from https too (as this was
previously resetting by just creating a new state struct – it uses no
value of the persistent state-keeping yet as it supports no pipelining).
Gbp-Dch: Ignore
http: auto-configure for local Tor proxy if called as 'tor'2016-08-10T23:34:39ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-06T20:54:31Zurn:sha1:0568d325ad8660a9966d552634aa17c90ed22516
With apts http transport supporting socks5h proxies and all the work
in terms of configuration of methods based on the name it is called with
it becomes surprisingly easy to implement Tor support equally (and
perhaps even a bit exceeding) what is available currently in
apt-transport-tor.
How this will turn out to be handled packaging wise we will see in
https://lists.debian.org/deity/2016/08/msg00012.html , but until this is
resolved we can add the needed support without actively enabling it for
now, so that this can be tested better.
implement socks5h proxy support for http method2016-08-10T21:19:44ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-04T06:45:38Zurn:sha1:61db48241f2d46697a291bfedaf398a1ca9a70e3
Socks support is a requested feature in sofar that the internet is
actually believing Acquire::socks::Proxy would exist. It doesn't and
this commit isn't adding it as that isn't how our configuration works,
but it allows Acquire::http::Proxy="socks5h://…". The HTTPS method was
changed already to support socks proxies (all versions) via curl. This
commit implements only SOCKS5 (RFC1928) with no auth or pass&user auth
(RFC1929), but not GSSAPI which is required by the RFC. The 'h' in the
protocol name further indicates that DNS resolution is delegated to the
socks proxy rather than performed locally.
The implementation works and was tested with Tor as socks proxy for
which implementing socks5h only can actually be considered a feature.
Closes: 744934
implement generic config fallback for methods2016-08-10T21:19:44ZDavid Kalnischkiesdavid@kalnischkies.de2016-07-31T16:05:56Zurn:sha1:30060442025824c491f58887ca7369f3c572fa57
The https method implemented for a long while now a hardcoded fallback
to the same options in http, which, while it works, is rather inflexible
if we want to allow the methods to use another name to change their
behavior slightly, like apt-transport-tor does to https – most of the
diff being s#https#tor#g which then fails to do the full circle
fallthrough tor -> https -> http for https sources. With this config
infrastructure this could be implemented now.
use the same redirection handling for http and https2016-08-10T21:19:44ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-02T12:49:58Zurn:sha1:4bba5a88d0f6afde4414b586b64c48a4851d5324
cURL which backs our https implementation can handle redirects on its
own, but by dealing with them on our own we gain finer control over which
redirections will be performed (we don't like https → http) and by whom
so that redirections to other hosts correctly spawn a new https method
dealing with these instead of letting the current one deal with it.
detect redirection loops in acquire instead of workers2016-08-10T21:19:44ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-02T20:44:50Zurn:sha1:57401c48fadc0c78733a67294f9cc20a57e527c9
Having the detection handled in specific (http) workers means that a
redirection loop over different hostnames isn't detected. Its also not a
good idea have this implement in each method independently even if it
would work
fail on unsupported http/https proxy settings2016-08-10T21:19:44ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-03T19:17:26Zurn:sha1:ece81b7517b1af6f86aff733498f6c11d5aa814f
Closes: #623443
prevent C++ locale number formatting in text APIs (try 2)2016-07-30T08:14:47ZDavid Kalnischkiesdavid@kalnischkies.de2016-07-30T07:57:50Zurn:sha1:7303e11ff28f920a6277c159aa46f80c007350bb
Followup of b58e2c7c56b1416a343e81f9f80cb1f02c128e25.
Still a regression of sorts of 8b79c94af7f7cf2e5e5342294bc6e5a908cacabf.
Closes: 832044
avoid 416 response teardown binding to null pointer2016-07-05T18:44:45ZDavid Kalnischkiesdavid@kalnischkies.de2016-07-05T11:07:29Zurn:sha1:4460551841d909d3ee9c1de00156ed3cdf8b1665
methods/http.cc:640:13: runtime error: reference binding to null pointer
of type 'struct FileFd'
This reference is never used in the cases it has a nullptr, so the
practical difference is non-existent, but its a bug still.
Reported-By: gcc -fsanitize=undefined