summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | hack around test-apt-update-unauth failureMichael Vogt2014-10-012-6/+24
| | | | |
| * | | | fix test-apt-update-nofallback testMichael Vogt2014-10-011-1/+5
| | | | |
| * | | | update test/integration/test-releasefile-verificationMichael Vogt2014-10-012-10/+21
| | | | |
| * | | | Use Acquire::Allow{InsecureRepositories,DowngradeToInsecureRepositories}Michael Vogt2014-10-0115-24/+65
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The configuration key Acquire::AllowInsecureRepositories controls if apt allows loading of unsigned repositories at all. The configuration Acquire::AllowDowngradeToInsecureRepositories controls if a signed repository can ever become unsigned. This should really never be needed but we provide it to avoid having to mess around in /var/lib/apt/lists if there is a use-case for this (which I can't think of right now).
| * | | | add verify for the .diff/Index download and add FIXME for ↵Michael Vogt2014-10-011-0/+19
| | | | | | | | | | | | | | | | | | | | pkgAcqIndexDiffs/pkgAcqMergeDiffs
| * | | | cleanupMichael Vogt2014-09-292-31/+54
| | | | |
| * | | | Merge remote-tracking branch 'debian/debian/experimental' into feature/acq-transMichael Vogt2014-09-292-0/+4
| |\ \ \ \
| * | | | | more test fixesMichael Vogt2014-09-292-4/+8
| | | | | |
| * | | | | fix DestFile extMichael Vogt2014-09-291-1/+1
| | | | | |
| * | | | | test fixesMichael Vogt2014-09-294-3/+8
| | | | | |
| * | | | | refactorMichael Vogt2014-09-292-37/+33
| | | | | |
| * | | | | Adjust DestFile in ReverifyAfterIMS() to not include compr ExtensionMichael Vogt2014-09-292-1/+8
| | | | | |
| * | | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-29147-2606/+2623
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/gpgv.cc
| * | | | | | test fixesMichael Vogt2014-09-268-36/+46
| | | | | | |
| * | | | | | Do not allow going from authenticated to unauthenticated repoMichael Vogt2014-09-263-86/+348
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also rework the way we load the Release file, so it only after Release.gpg verified the Release file. The rational is that we never want to load untrusted data into our parsers. Only stuff verified with gpg or by its hashes get loaded. To load untrusted data you now need to use apt-get update --allow-unauthenticated.
| * | | | | | Print warning for unauthenticated repositoriesMichael Vogt2014-09-262-0/+34
| | | | | | |
| * | | | | | Do not download Packages/Sources files on I-M-S hit of the Release fileMichael Vogt2014-09-261-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With this branch we know that the data in the lists directory is always what the release file says, so if the Release file is unchanged, then there is no need to queue the download of the other indexfiles as they will be unchanged too (or broken :)
| * | | | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-2514-8/+159
| |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans
| * | | | | | | make pdiff transactional (but at the cost of a CopyFile()Michael Vogt2014-09-233-31/+79
| | | | | | | |
| * | | | | | | cleanup, fix test-apt-update-unauth as the behavior of apt changedMichael Vogt2014-09-233-12/+29
| | | | | | | |
| * | | | | | | cleanupMichael Vogt2014-09-232-22/+13
| | | | | | | |
| * | | | | | | fix one broken testMichael Vogt2014-09-231-4/+3
| | | | | | | |
| * | | | | | | Merge remote-tracking branch 'debian/debian/experimental' into feature/acq-transMichael Vogt2014-09-232-3/+4
| |\ \ \ \ \ \ \
| * \ \ \ \ \ \ \ Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-2386-51838/+55715
| |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/copy.cc test/integration/test-hashsum-verification
| * | | | | | | | | fix gcc warningsMichael Vogt2014-09-172-9/+8
| | | | | | | | | |
| * | | | | | | | | use pkgAcqMetaBase as the transactionManagerMichael Vogt2014-09-175-148/+146
| | | | | | | | | |
| * | | | | | | | | add a bunch of dpointersMichael Vogt2014-09-161-0/+30
| | | | | | | | | |
| * | | | | | | | | remove pkgAcqSubIndexMichael Vogt2014-09-162-176/+1
| | | | | | | | | |
| * | | | | | | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-05109-88813/+90495
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans
| * | | | | | | | | | add shared code into pkgAcqMetaSigBase::GenerateAuthWarning()Michael Vogt2014-08-252-54/+65
| | | | | | | | | | |
| * | | | | | | | | | all tests passMichael Vogt2014-08-243-16/+40
| | | | | | | | | | |
| * | | | | | | | | | make the test-pdiff-usage code work againMichael Vogt2014-08-241-0/+11
| | | | | | | | | | |
| * | | | | | | | | | make compressed-indexes test pass againMichael Vogt2014-08-242-27/+43
| | | | | | | | | | |
| * | | | | | | | | | cleanupMichael Vogt2014-08-241-14/+9
| | | | | | | | | | |
| * | | | | | | | | | really move clearsign check into pkgAcqMetaClearSig::Done()Michael Vogt2014-08-022-7/+16
| | | | | | | | | | |
| * | | | | | | | | | add ims check verifyMichael Vogt2014-08-023-9/+52
| | | | | | | | | | |
| * | | | | | | | | | move clearsign check into pkgAcqMetaClearSig::Failed()Michael Vogt2014-08-021-12/+11
| | | | | | | | | | |
| * | | | | | | | | | make i-m-s work againMichael Vogt2014-08-012-4/+29
| | | | | | | | | | |
| * | | | | | | | | | add gzip test and todoMichael Vogt2014-08-012-2/+14
| | | | | | | | | | |
| * | | | | | | | | | make errors more consistentMichael Vogt2014-08-012-15/+6
| | | | | | | | | | |
| * | | | | | | | | | check hashes of compressed files as wellMichael Vogt2014-08-012-12/+31
| | | | | | | | | | |
| * | | | | | | | | | fix transactionid passingMichael Vogt2014-08-012-2/+1
| | | | | | | | | | |
| * | | | | | | | | | mve MetaKey into pkgAcqBaseIndexMichael Vogt2014-08-013-2/+6
| | | | | | | | | | |
| * | | | | | | | | | fail early (again) on gpg sig failuresMichael Vogt2014-07-313-40/+20
| | | | | | | | | | |
| * | | | | | | | | | ensure InRelease->Release is transactional as wellMichael Vogt2014-07-312-2/+21
| | | | | | | | | | |
| * | | | | | | | | | make test_unauthenticated_to_invalid_inrelease workMichael Vogt2014-07-311-4/+5
| | | | | | | | | | |
| * | | | | | | | | | make test_inreleae_to_release_reverts_all workMichael Vogt2014-07-311-5/+11
| | | | | | | | | | |
| * | | | | | | | | | Rework TransactionID stuffMichael Vogt2014-07-315-78/+305
| | | | | | | | | | |
| * | | | | | | | | | WIP cleanup pkgAcqMetaSigMichael Vogt2014-07-223-83/+42
| | | | | | | | | | |
| * | | | | | | | | | Download Release first, then Release.gpgMichael Vogt2014-07-215-68/+79
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old way of handling this was that pkgAcqMetaIndex was responsible to check/move both Release and Release.gpg in place. This breaks the assumption of the transaction that each pkgAcquire::Item has a single File that its responsible for.