apt/methods, branch 1.5_alpha2

http: Only use system CA store if CaInfo is not set

2017-06-29T14:12:40Z

It turns out that curl only sets the system trust store if the CaInfo option is not set, so let's do the same here.

Improve error message if system CA store is empty

2017-06-29T10:54:30Z

Tell the user to install ca-certificates. Closes: #866377

use port from SRV record instead of initial port

2017-06-28T23:23:59Z

An SRV record includes a portnumber to use with the host given, but apt was ignoring the portnumber and instead used either the port given by the user for the initial host or the default port for the service. In practice the service usually runs on another host on the default port, so it tends to work as intended and even if not and apt can't get a connection there it will gracefully fallback to contacting the initial host with the right port, so its a user invisible bug most of the time.

support tor+https being handled by http

2017-06-28T20:26:56Z

The apt-transport-tor package operates via simple symlinks which can result in 'http' being called as 'tor+https', so it must pick up the right configuration pieces and trigger https support also in plus names.

Introduce Acquire::AllowTLS to turn off TLS support

2017-06-28T15:34:51Z

As requested by Henrique de Moraes Holschuh, here comes an option to disable TLS support. If the option is set to false, the internal TLS layer is disabled.

Fix https->http redirect issues

2017-06-28T13:52:38Z

Gbp-Dch: ignore

methods: http: Drain pending data before selecting

2017-06-28T13:52:38Z

GnuTLS can already have data pending in its buffers, we need to to drain that first otherwise select() might block indefinitely. Gbp-Dch: ignore

Allow building without curl

2017-06-28T13:52:38Z

This makes testing easier and prepares us for the transition.

methods: Add HTTPS support to http method, using GnuTLS

2017-06-28T13:52:38Z

The http method will eventually replace the curl-based https method, but for now, this is an opt-in experiment that can be enabled by setting Dir::Bin::Methods::https to "http". Known issues: - We do not support HTTPS proxies yet - We do not support proxying HTTPS connections yet (CONNECT) - IssuerCert and SslForceVersion are unsupported Gbp-Dch: Full

methods: connect: Switch from int fds to new MethodFd

2017-06-28T13:52:38Z

Use std::unique_ptr everywhere we used an integer-based file descriptor before. This allows us to implement stuff like TLS support easily. Gbp-Dch: ignore