apt/methods, branch 1.5_alpha1

Introduce Acquire::AllowTLS to turn off TLS support

2017-06-28T15:34:51Z

As requested by Henrique de Moraes Holschuh, here comes an option to disable TLS support. If the option is set to false, the internal TLS layer is disabled.

Fix https->http redirect issues

2017-06-28T13:52:38Z

Gbp-Dch: ignore

methods: http: Drain pending data before selecting

2017-06-28T13:52:38Z

GnuTLS can already have data pending in its buffers, we need to to drain that first otherwise select() might block indefinitely. Gbp-Dch: ignore

Allow building without curl

2017-06-28T13:52:38Z

This makes testing easier and prepares us for the transition.

methods: Add HTTPS support to http method, using GnuTLS

2017-06-28T13:52:38Z

The http method will eventually replace the curl-based https method, but for now, this is an opt-in experiment that can be enabled by setting Dir::Bin::Methods::https to "http". Known issues: - We do not support HTTPS proxies yet - We do not support proxying HTTPS connections yet (CONNECT) - IssuerCert and SslForceVersion are unsupported Gbp-Dch: Full

methods: connect: Switch from int fds to new MethodFd

2017-06-28T13:52:38Z

Use std::unique_ptr everywhere we used an integer-based file descriptor before. This allows us to implement stuff like TLS support easily. Gbp-Dch: ignore

methods: connect: Change PkgAcqMethod to aptMethod

2017-06-28T13:52:38Z

This will allow us to access ConfigFind() and stuff which makes it possible for us to implement TLS support. Gbp-Dch: ignore

deal with 3xx httpcodes as required by HTTP/1.1 spec

2017-06-26T21:31:15Z

An unknown code should be handled the same as the x00 code of this group, but for redirections we used to treat 300 (and a few others) as an error while unknown codes were considered redirections. Instead we check now explicitly for the redirection codes we support for redirecting (and add the 308 defined in RFC 7538) to avoid future problems if new 3xx codes are added expecting certain behaviours. Potentially strange would have been e.g. "305 Use Proxy" sending a Location for the proxy to use – which wouldn't have worked and resulted in an error anyhow, but probably confused users in the process.

avoid changing directory in mirror method

2017-06-26T21:31:15Z

Annotate intended switch fall through in https

2017-06-26T21:31:15Z

Reported-By: gcc-7 Gbp-Dch: Ignore