summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* don't try to parse all fields starting with HTTP as status-lineDavid Kalnischkies2017-07-262-1/+3
| | | | | It is highly unlikely to encounter fields which start with HTTP in practice, but we should really be a bit more restrictive here.
* don't move failed pdiff indexes out of partialDavid Kalnischkies2017-07-262-4/+31
| | | | | | | | | | | | | | | | | | | | | The comment says this is intended, but looking at the history reveals that the comment comes from a different era. Nowadays we don't really need it anymore (and even back then it was disputeable) as we haven't used that file for our update in the end and nothing really needs this file after the update. Triggered is this by 188f297a2af4c15cb1d502360d1e478644b5b810 which moves various error conditions forward including this code expecting the file to exist – but it doesn't need to as download could have failed. We could fix that by simple checking if the file exists and only stage it if it does, but instead we don't stage it and instead even rename it out of the way with our conventional FAILED name (if it exists). That restores support for partial mirrors (= in this case mirrors which don't ship pdiff files). Note that apt heals itself even if only such a mirror is used as the update is successful even if that error is shown. Closes: 869425
* don't try to rename failed pdiff patches twiceDavid Kalnischkies2017-07-261-2/+0
| | | | | | | | RenameOnError does the rename already, so the check for existence will always fail making this some completely harmles but also completely pointless two lines of code we are better of removing. Gbp-Dch: Ignore
* support compressed extended_states file for bug triageDavid Kalnischkies2017-07-261-4/+4
| | | | | | This file isn't compressed by default, but it might be compressed by a bugreporter and uncompressing it is extra work apt could do just as well on the fly as needed just like it does for the dpkg/status file.
* ignore SIGPIPE in dump solver if forwardingDavid Kalnischkies2017-07-261-7/+7
| | | | | | | | | | | | Our test-external-dependency-solver-protocol test sometimes fails on the immediately 'crashing' solver exit1withoutmsg with the message that it got SIGPIPE from the solver. That isn't really possible as the solver produces no output, but on inspection its not this solver getting the signal but the wrapping provided by the dump-solver as the wrapped solver instantly exits. Simply ignoring the signal helps in perhaps extracting the last words of another solver (as this one has none), but at the very least we get the exit code of the wrapped solver we interested in as output.
* remove reference to a-t-debtorrent in descriptionDavid Kalnischkies2017-07-261-2/+2
| | | | | | | debtorrent and its helper apt-transport-debtorrent were removed from Debian in 2013 based on the bugreports #730459 and #731281. As they aren't available, we shouldn't make references to them anymore. a-t-tor is picked as replacement for the example.
* Gracefully terminate process when stopping apt-daily-upgradeBalint Reczey2017-07-261-0/+2
| | | | | | | | | | | The main process is guessed by systemd. This prevents killing dpkg run by unattended-upgrades in the middle of installing packages and ensures graceful shutdown. The timeout of 900 seconds after which apt-daily-upgrade.service is killed is in sync with unattended-upgrades's timer. LP: #1690980
* Fix memory leak in C++-thread-local _error implementationJulian Andres Klode2017-07-201-2/+2
| | | | | | | We can't allocate a pointer here, it would not get released - use an object instead. Gbp-Dch: ignore
* Use C++11 threading support instead of pthreadJulian Andres Klode2017-07-204-34/+4
| | | | This makes the code easier to read.
* Merge pull request Debian/apt#44 from willismonroe/patch-1Julian Andres Klode2017-07-1745-45/+45
|\ | | | | | | | | | | Minor grammar fix [jak@d.o: Fixed up po/]
| * Minor grammar fixM. Willis Monroe2017-06-221-1/+1
| | | | | | Modified the wording of an error message when a repository no longer has a release file.
* | Switch from /org to /srv in example apt-ftparchive configurationPaul Wise2017-07-121-4/+4
| | | | | | | | /org has been obsoleted by /srv for many years on debian.org hosts.
* | Fix some more crashes when APT::Periodic options are set to alwaysPaul Wise2017-07-121-7/+16
| | | | | | | | Gbp-Dch: ignore
* | Support seconds, minutes, hours and days for APT::Periodic intervalsPaul Wise2017-07-121-2/+14
| |
* | Support zero delay for the various APT::Periodic activitiesPaul Wise2017-07-121-0/+6
| | | | | | | | | | | | | | | | | | | | [squashed:] apt.systemd.daily: check_stamp: check for 'always' before numerical values Prevents a crash when the configuration actually uses 'always': apt.systemd.daily: 402: [: Illegal number: always
* | Merge branch 'misc/include-cleanup'Julian Andres Klode2017-07-12221-1039/+988
|\ \ | | | | | | | | | This should make it easier to read includes.
| * | cacheiterators: Warn about direct include and don't include pkgcache.hJulian Andres Klode2017-07-122-2/+5
| | | | | | | | | | | | | | | | | | This adds a warning so existing working code will still work (as it includes pkgcache.h first anyway), but it will know that it's not right to include this file directly.
| * | Reformat and sort all includes with clang-formatJulian Andres Klode2017-07-12215-981/+983
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This makes it easier to see which headers includes what. The changes were done by running git grep -l '#\s*include' \ | grep -E '.(cc|h)$' \ | xargs sed -i -E 's/(^\s*)#(\s*)include/\1#\2 include/' To modify all include lines by adding a space, and then running ./git-clang-format.sh.
| * | methods/aptmethod.h: Add missing fileutl.h includeJulian Andres Klode2017-07-121-0/+1
| | |
| * | Drop cacheiterators.h includeJulian Andres Klode2017-07-1257-57/+0
| | | | | | | | | | | | | | | Including cacheiterators.h before pkgcache.h fails because pkgcache.h depends on cacheiterators.h.
* | | Update gitignore with new filesJulian Andres Klode2017-07-121-0/+5
|/ /
* | Handle supported components with slashes in sources.listApollon Oikonomopoulos2017-07-122-7/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commit d7c92411dc1f4c6be098d1425f9c1c075e0c2154 parses the Components section of (In)Release and attempts to detect the distribution's supported components. While doing so, it handles component names with slashes in a special manner, assuming that the actual component is only the part after the final slash. This is done to handle security.debian.org, which usually appears in sources.list as follows: deb http://s.d.o/debian-security stretch/updates main contrib non-free while the actual release file has: Codename: stretch Components: updates/main updates/contrib updates/non-free While this special handing on APTs part indeed works for debian-security, it emits spurious warnings on repositories that actually use slashes in the component names *and* appear so in sources.list. We fix this by adding both component versions (whole and final part) to the SupportedComponents array. Closes: #868127
* | fix various typos reported by codespell & spellintianDavid Kalnischkies2017-07-0817-17/+17
| | | | | | | | | | Reported-By: codespell & spellintian Gbp-Dch: Ignore
* | Italian manpage translation updateBeatrice Torracca2017-07-081-238/+213
| | | | | | | | Closes: 858877
* | don't expect more downloads from failed transactionsDavid Kalnischkies2017-07-071-0/+2
| | | | | | | | | | | | | | Progress only shows if we have an idea of how much files we will acquire, but if a transaction fails before we have got an idea we ended up never showing progress even through we know that a failed transaction will not download additional files.
* | zh_CN.po: update Simplified Chinese programs translationZhou Mo2017-07-041-19/+16
| |
* | Release 1.5~beta11.5_beta1Julian Andres Klode2017-07-0357-122/+128
| |
* | Russian translation updateАлексей Шилин2017-07-031-16/+17
| |
* | Stop bragging about old speeds in http.cc commentsJulian Andres Klode2017-07-031-8/+0
| | | | | | | | | | | | That's just ridiculous these days. Gbp-Dch: ignore
* | formatter: support running from subdirectoriesDavid Kalnischkies2017-07-031-0/+1
| | | | | | | | Gbp-Dch: Ignore
* | don't set ip addresses as server names for SNIDavid Kalnischkies2017-07-031-2/+12
| | | | | | | | | | | | | | | | | | It is kinda unlikely that apt will ever encounter a certificate for an IP and a user actually using it, but the API documentation for gnutls_server_name_set explicitly says that "IPv4 or IPv6 addresses are not permitted to be set by this function.", so we should follow it. [jak@d.o: Slightly rebased]
* | Swap file descriptors before the handshakeJulian Andres Klode2017-07-031-2/+4
| | | | | | | | | | | | | | | | | | | | This makes more sense. If the handshake failed midway, we still should run the gnutls bye stuff. The thinking here is to only set the fd after the session setup, as we do not modify it before, so if it fails in session setup, you retain a usable file descriptor. Gbp-Dch: ignore
* | Do not error out, only warn if ca certificates are not availableJulian Andres Klode2017-07-031-5/+5
| | | | | | | | This probably makes more sense if Verify-Peer is set to off.
* | tls: Add more details to error messages, and detect more errorsJulian Andres Klode2017-07-031-9/+11
| | | | | | | | | | This should make it easier to figure out what was going on.
* | travis/docker: Various improvementsJulian Andres Klode2017-07-022-3/+4
| | | | | | | | | | | | | | | | | | | | | | - Use a tmpfs for /tmp - not really a benefit here, except for travis as it's writing less now. - Use the fastly CDN - about twice as fast as ftp.de, and seems more stable than cloudfront - Run apt-get clean to keep container smaller - should not be needed really, but let's just do it. Gbp-Dch: ignore
* | Ignore download order in test-apt-update-failure-propagationJulian Andres Klode2017-07-011-17/+2
| | | | | | | | This caused spurious test failures.
* | http: A response with Content-Length: 0 has no contentJulian Andres Klode2017-07-011-1/+4
| | | | | | | | | | | | APT considered any response with a Content-Length to have a body, even if the value of the header was 0. A 0 length body however, is equal to no body.
* | Make Verify-Host and Verify-Peer independent againJulian Andres Klode2017-07-011-2/+2
| | | | | | | | | | We can actually just pass null as a hostname, so let's just do that when Verify-Host is set to false.
* | Upload 1.5~alpha4 to experimental1.5_alpha4Julian Andres Klode2017-06-305-6/+22
| |
* | shippable: Run tests in parallelJulian Andres Klode2017-06-301-2/+2
| | | | | | | | Gbp-Dch: ignore
* | CMake: Do not allow FORCE_CURL=ON with WITH_CURL=OFFJulian Andres Klode2017-06-301-1/+4
| | | | | | | | | | | | | | This makes no sense. We need both entries in the cache, as we check FORCE_CURL in the test suite. Gbp-Dch: ignore
* | TLS support: Error out on unsupported curl optionsJulian Andres Klode2017-06-301-2/+4
| | | | | | | | | | Silently ignoring the options might be a security issue, so produce an error instead.
* | Improve closing the TLS connectionJulian Andres Klode2017-06-301-3/+3
| | | | | | | | | | | | | | | | | | | | If gnutls_session_bye() exited with an error, we never closed the underlying file descriptor, causing the method to think the connection was still open. This caused problems especially in test-partial-file-support where we checked that a "complete" file and an incomplete file work. The first GET returns a 416 with Connection: close, and the next GET request then accidentally reads the body of the 416 as the header for its own request.
* | Switch to 'http' as the default https methodJulian Andres Klode2017-06-3011-15/+39
| | | | | | | | | | The old curl based method is still available as 'curl', 'curl+http', and 'curl+https'.
* | travis: Switch to DockerJulian Andres Klode2017-06-302-26/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This runs parallel builds on docker, based on debian:testing docker images, with ccache enabled and parallel running of the test suite (ccache supports coverage builds these days, and parallel testing just needs unbuffer to handle the stty stuff) This is a huge step up from building on a mix of trusty, wily, and xenial. Most importantly, coverage now correctly detects partial covered lines instead of just reporting almost all of them as fully covered. We use ftp.de.debian.org as deb.debian.org backed by Amazon 503s too often. Gbp-Dch: ignore
* | Allow http(s) and socks5h for http and https in proxy auto detectJulian Andres Klode2017-06-301-1/+16
| | | | | | | | This makes it possible to write sensible auto detect scripts.
* | http: Add support for https:// proxiesJulian Andres Klode2017-06-301-3/+8
| | | | | | | | | | | | HTTPS proxies just require unwrapping the TLS layer at the proxy connection, that's easy, and of course sending proxy-specific headers that are sent on "http" proxies.
* | http: Add support for CONNECT proxying to HTTPS locationsJulian Andres Klode2017-06-303-1/+132
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Proxying HTTPS traffic requires the proxy providing the CONNECT method. This implements the client side of it, although it is a bit hacky. HTTP connect is a normal HTTP CONNECT request, followed by a normal HTTP response, just that the body of the response is the TCP stream of the target host. We use a special wrapper in case there are data bytes in the header packets - in that case, the bytes are stored in a buffer and the buffer will be drained first, afterwards the connection continues directly with the TCP stream (with one more vcall). Also: Do not send full URI to https destinations when proxying, as we are directly interfacing with the destination data stream.
* | Allow running the TLS stack on any lower connectionJulian Andres Klode2017-06-301-1/+19
| | | | | | | | | | This is especially needed if we use an HTTPS proxy to CONNECT to an HTTPS URI, as we run TLS-inside-TLS then.
* | Reset failure reason when connection was successfulJulian Andres Klode2017-06-302-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | When APT was trying multiple addresses, any later error somewhere else would be reported with ConnectionRefused or ConnectionTimedOut as the FailReason because that was set by early connect attempts. This causes APT to handle the failures differently, leading to some weirdly breaking test cases (like the changed one). Add debugging to the previously failing test case so we can find out when something goes wrong there again.
generated by cgit v1.2.3-70-g09d2 (git 2.46.0) at 2024-11-05 05:36:44 +0000