Debians commandline package manager https://git.kalnischkies.de/apt/atom?h=1.1.exp11 2015-06-15T21:35:55Z 2015-06-15T21:35:55Z David Kalnischkies david@kalnischkies.de 2015-06-15T21:06:56Z urn:sha1:9d2a8a7388cf3b0bbbe92f6b0b30a533e1167f40 It shouldn't be too common, but sometimes people have multiple mirrors in the sources or otherwise repositories with the same content. Now that we gracefully can handle multiple requests to the same URI, we can also fold multiple requests with the same expected hashes into one. Note that this isn't trying to find oppertunities for merging, but just merges if it happens to encounter the oppertunity for it. This is most obvious in the new testcase actually as it needs to delay the action to give the acquire system enough time to figure out that they can be merged. 2015-06-15T21:35:55Z David Kalnischkies david@kalnischkies.de 2015-06-15T14:41:43Z urn:sha1:1eb1836f4b5397497bd34f0cf516e6e4e73117bf Again, consistency is the main sellingpoint here, but this way it is now also easier to explain that some files move through different stages and lines are printed for them hence multiple times: That is a bit hard to believe if the number is changing all the time, but now that it keeps consistent. 2015-05-18T20:15:06Z David Kalnischkies david@kalnischkies.de 2015-05-18T20:15:06Z urn:sha1:6bf93605fdb8e858d3f0a79a124c1d39f760094d Valid-Until protects us from long-living downgrade attacks, but not all repositories have it and an attacker could still use older but still valid files to downgrade us. While this makes it sounds like a security improvement now, its a bit theoretical at best as an attacker with capabilities to pull this off could just as well always keep us days (but in the valid period) behind and always knows which state we have, as we tell him with the If-Modified-Since header. This is also why this is 'silently' ignored and treated as an IMSHit rather than screamed at the user as this can at best be an annoyance for attackers. An error here would 'regularily' be encountered by users by out-of-sync mirrors serving a single run (e.g. load balancer) or in two consecutive runs on the other hand, so it would just help teaching people ignore it. That said, most of the code churn is caused by enforcing this additional requirement. Crisscross from InRelease to Release.gpg is e.g. very unlikely in practice, but if we would ignore it an attacker could sidestep it this way. 2015-04-18T23:13:10Z David Kalnischkies david@kalnischkies.de 2015-04-12T15:08:46Z urn:sha1:ba6b79bd0090077724fa1272ea4d3a31706fcd5a If we get a IMSHit for the Transaction-Manager (= the InRelease file or as its still supported fallback Release + Release.gpg combo) we can assume that every file we would queue based on this manager, but already have locally is current and hence would get an IMSHit, too. We therefore save us and the server the trouble and skip the queuing in this case. Beside speeding up repetative executions of 'apt-get update' this way we also avoid hitting hashsum errors if the indexes are in fact already updated, but the Release file isn't yet as it is the case on well behaving mirrors as Release files is updated last. The implementation is a bit harder than the theory makes it sound as we still have to keep reverifying the Release files (e.g. to detect now expired once to avoid an attacker being able to silently stale us) and have to handle cases in which the Release file hits, but some indexes aren't present (e.g. user added a new foreign architecture). 2014-11-08T13:33:25Z David Kalnischkies david@kalnischkies.de 2014-11-08T13:23:18Z urn:sha1:20801f613690b330c79b4f7a30dc3ff52b722468 Git-Dch: Ignore 2014-10-24T21:54:59Z David Kalnischkies david@kalnischkies.de 2014-10-23T14:54:00Z urn:sha1:23397c9d7d4d455461176600bb45c81185493504 It is a very simple hashstring, which is why it isn't contributing to the usability of a list of them, but it is also trivial to check and calculate, so it doesn't hurt checking it either as it can combined even with the simplest other hashes greatly complicate attacks on them as you suddenly need a same-size hash collision, which is usually a lot harder to achieve. 2014-10-20T08:37:46Z David Kalnischkies david@kalnischkies.de 2014-10-20T08:23:41Z urn:sha1:4fa34122cbe347d21b3a162ff2fa75dd2e73c3a8 Adds a new testwarning which tests for zero exit and the presents of a warning in the output, failing if either is not the case or if an error is found, too. This allows us to change testsuccess to accept only totally successful executions (= without warnings) which should help finding regressions. Git-Dch: Ignore 2014-10-20T08:37:46Z David Kalnischkies david@kalnischkies.de 2014-10-18T20:46:48Z urn:sha1:846bc058cb0c1bf7ce7c2fb30b9c277e96e9eaf7 Git-Dch: Ignore 2014-10-20T08:37:46Z David Kalnischkies david@kalnischkies.de 2014-10-18T18:00:25Z urn:sha1:ab25bf1f08ca605d3eb4c05619e8df495ccca30a Adds some infrastructure to run tests automatically for certain commands. The first command being 'apt-get update' (and 'apt update') which check for correct permission and owner of the files in lists/. Git-Dch: Ignore 2014-10-14T15:00:56Z Michael Vogt mvo@ubuntu.com 2014-10-14T15:00:56Z urn:sha1:d4f4bcf76bb2035b7df370a82b081384140b3083 Add a new configallowinsecurerepositories that controls the value of Acquire::AllowInsecureRepositories for the tests. Set it to "false" for most of the testsuite and only enable it where its really needed. We want to switch the default for this post-jessie.