apt/test/integration/test-releasefile-verification, branch 2.9.16Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.162024-11-22T15:44:02Ztest: Ensure we test both gpgv-g10code and gpgv-sq2024-11-22T15:44:02ZJulian Andres Klodejulian.klode@canonical.com2024-11-22T15:20:05Zurn:sha1:e983d98c4fcd952ffcbc010b185455913c8af650test-releasefile-verification: Test empty/invalid signatures2024-11-22T15:44:02ZJulian Andres Klodejulian.klode@canonical.com2024-11-21T19:01:57Zurn:sha1:d2e34a441bad904798bf62fb850d4fb5b1b90656Accept BADSIG instead of EXPSIG for expired signatures2024-11-22T15:20:36ZJulian Andres Klodejulian.klode@canonical.com2024-11-21T17:51:10Zurn:sha1:222301d7a36a09db80a8832cd16db41f7946a9ea
Sequioa emits KEYEXPIRED + BADSIG instead of EXPSIG + VALIDSIG
test-releasefile-verification: Fix signature time2024-11-22T15:20:36ZJulian Andres Klodejulian.klode@canonical.com2024-11-21T17:49:28Zurn:sha1:27012a496a9da78f26e9e412a7118dbe00e5c1ec
The key was only generated in 2010 and only bound in 2016,
so we cannot have signatures from before then, so update
the key accordingly, and change the default expiry to 2017.
Rename 'weak digest algorithm' to 'weak algorithm'2024-02-28T17:22:01ZJulian Andres Klodejulian.klode@canonical.com2024-02-28T15:52:33Zurn:sha1:8a14c18c5b487139948dcb22abd37bffdd9cf5f4
This allows us to render public key algorithms as weak as well.
Give our test packages proper size information2021-06-10T14:38:09ZDavid Kalnischkiesdavid@kalnischkies.de2021-06-10T14:38:09Zurn:sha1:18140e1db1c386a8c6da004956ae8a96152de4d1
Temporary hacks should be temporary, especially if they hide bugs. After
fixing one in the previous commit this is just busy work to add download
information to the places which check that output.
Gbp-Dch: Ignore
Support multiple keyrings in sources.list Signed-By2018-09-11T11:16:11ZDavid Kalnischkiesdavid@kalnischkies.de2018-08-17T14:33:41Zurn:sha1:8375d5b58038fc026098dcccc3de87cd9d740334
A user can specify multiple fingerprints for a while now, so its seems
counter-intuitive to support only one keyring, especially if this isn't
really checked or enforced and while unlikely mixtures of both should
work properly, too, instead of a kinda random behaviour.
Support subkeys properly in Signed-By options2018-09-11T11:16:11ZDavid Kalnischkiesdavid@kalnischkies.de2018-08-17T09:59:45Zurn:sha1:ff8fa4ab4b80384a9240f0df63181f71077a8d83
If we limit a file to be signed by a certain key it should usually
accept also being signed by any of this keys subkeys instead of
requiring each subkey to be listed explicitly. If the later is really
wanted we support now also the same syntax as gpg does with appending an
exclamation mark at the end of the fingerprint to force no mapping.
fix various typos reported by spellintian2017-01-19T14:59:38ZDavid Kalnischkiesdavid@kalnischkies.de2017-01-19T14:14:19Zurn:sha1:93cff633a830e222693fc0f3d78e6e534d1126ee
Most of them in (old) code comments. The two instances of user visible
string changes the po files of the manpages are fixed up as well.
Gbp-Dch: Ignore
Reported-By: spellintian
show apt-key warnings in apt update2016-08-25T13:22:28ZDavid Kalnischkiesdavid@kalnischkies.de2016-08-25T13:22:28Zurn:sha1:29c590951f812d9e9c4f17706e34f2c3315fb1f6
In 105503b4b470c124bc0c271bd8a50e25ecbe9133 we got a warning implemented
for unreadable files which greatly improves the behavior of apt update
already as everything will work as long as we don't need the keys
included in these files. The behavior if they are needed is still
strange through as update will fail claiming missing keys and a manual
test (which the user will likely perform as root) will be successful.
Passing the new warning generated by apt-key through to apt is a bit
strange from an interface point of view, but basically duplicating the
warning code in multiple places doesn't feel right either. That means we
have no translation for the message through as apt-key has no i18n yet.
It also means that if the user has a bunch of sources each of them will
generate a warning for each unreadable file which could result in quite
a few duplicated warnings, but "too many" is better than none.
Closes: 834973