apt/methods, branch mainDebians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=main2024-04-09T17:59:52ZRevert "Temporarily downgrade key assertions to "soon worthless""2024-04-09T17:59:52ZJulian Andres Klodejulian.klode@canonical.com2024-04-09T17:56:26Zurn:sha1:81c65f7e86b8f16eaaa91d9c205a594b0ebde159
We temporarily downgraded the errors to warnings to give the
launchpad PPAs time to be fixed, but warnings are not safe:
Untrusted keys could be hiding on your system, but just not
used at the moment. Hence revert this so we get the errors we
want.
This reverts commit 66998ed3d299bede651ad40368bdb270f5f5b0f9.
LP: #2060721
Gbp-Dch: full
Support building without gnutls2024-03-03T07:23:51ZSteve Langaseksteve.langasek@canonical.com2024-03-03T07:10:14Zurn:sha1:9044806c2adc6118399349c70a6c5746cedcc374
Once in a generation, it may be necessary to bootstrap apt in an
environment where gnutls is not yet available. This makes gnutls
support in apt optional.
You may also want a configure flag to force gnutls to be required from
outside the buildsystem (e.g. debian/rules).
Temporarily downgrade key assertions to "soon worthless"2024-02-28T17:22:01ZJulian Andres Klodejulian.klode@canonical.com2024-02-28T16:04:05Zurn:sha1:66998ed3d299bede651ad40368bdb270f5f5b0f9
This will only issue warnings instead of errors while we continue
cleaning up our repositories.
Rename 'weak digest algorithm' to 'weak algorithm'2024-02-28T17:22:01ZJulian Andres Klodejulian.klode@canonical.com2024-02-28T15:52:33Zurn:sha1:8a14c18c5b487139948dcb22abd37bffdd9cf5f4
This allows us to render public key algorithms as weak as well.
Implement gpgv --assert-pubkey-algo=>=rsa2048,ed25519,ed4482024-02-28T17:22:01ZJulian Andres Klodejulian.klode@canonical.com2024-02-28T14:14:43Zurn:sha1:50e3fee26ae843a812b1c9ec8531946931773fd3
The assertion can be overriden using apt::key::assert-pubkey-algo,
the default is the most opinionated one.
This will inform the user during apt-cdrom add as we do not
pass --quiet to user, so adjust test case.
Add a simple test case for it to test-method-gpgv.
LP: #2055193
gpgv: Add a reason to worthless signers2024-02-28T17:21:01ZJulian Andres Klodejulian.klode@canonical.com2024-02-28T13:49:48Zurn:sha1:60d653634f889abe09c0f4d88f2559eab9202635gpgv: Surface [GNUPG:] ERROR and [GNUPG:] WARNING status messages2024-02-28T17:21:01ZJulian Andres Klodejulian.klode@canonical.com2024-01-18T17:35:35Zurn:sha1:066121ac4de3f1e07e203583a2c5d00a0289f84aModernize standard library includes2024-02-20T12:49:04ZJulian Andres Klodejulian.klode@canonical.com2024-02-20T12:43:08Zurn:sha1:40a75722c43ae24cb9a99d6730a3b25b65819c49
This was automated with sed and git-clang-format, and then I had to
fix up the top of policy.cc by hand as git-clang-format accidentally
indented it by two spaces.
methods: store: Use APT_BUFFER_SIZE (64k) instead of 4k buffers2023-08-30T13:05:34ZJulian Andres Klodejulian.klode@canonical.com2023-08-30T13:05:34Zurn:sha1:52dd18670bf7d22ecf234141d3c7b7b9f67c6fa3We do not believe rsh was supposed to exclude GPL-32023-03-06T11:19:23ZJulian Andres Klodejulian.klode@canonical.com2023-03-06T10:38:06Zurn:sha1:e99c5cbfd1754b5705c57db22e32b8d8ec03b5b3