summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | | | | | Merge remote-tracking branch 'mvo/feature/acq-trans' into debian/experimentalMichael Vogt2014-10-0845-1156/+2068
|\ \ \ \ \ \ \ \ \ | | |_|_|/ / / / / | |/| | | | | | |
| * | | | | | | | fix http-pipeline-messup testcaseDavid Kalnischkies2014-10-081-8/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The test generates failures if the created deb files have the same size, so we try a little harder to avoid having the same size for them. Git-Dch: Ignore
| * | | | | | | | do not show IP in output of testcasesDavid Kalnischkies2014-10-072-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On travis-ci connect.cc detects a rotation, triggering it store the IP which is later appended to the error message, which is all nice and great if we deal with a real server, but in the testcases it just triggers failures as strings do not match. Git-Dch: Ignore
| * | | | | | | | don't show ErrorText for Ign by defaultDavid Kalnischkies2014-10-072-2/+7
| | |_|/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some distributions (or repositories) do not have as much "Ign-discipline" as I would like to, so that could be pretty distracting for our users if enabled by default. It is handy for testcases though. Git-Dch: Ignore
| * | | | | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-10-0739-536/+901
| |\ \ \ \ \ \ \ | | | |/ / / / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc
| * | | | | | | UpperCase some functions for consistencyMichael Vogt2014-10-071-25/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | changeOwnerAndPermissionOfFile->ChangeOwnerAndPermissionOfFile preparePartialFile->GetPartialFileName preparePartialFileFromURI->GetPartialFileNameFromURI Git-Dch: ignore
| * | | | | | | display errortext for all Err as well as Ign logsDavid Kalnischkies2014-10-078-101/+108
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | consistently using Item::Failed in all specializec classes helps setting up some information bits otherwise unset, so some errors had an empty reason as an error. Ign is upgraded to display the error message we ignored to further help in understanding what happens.
| * | | | | | | use _apt:root only for partial directoriesDavid Kalnischkies2014-10-077-79/+137
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Using a different user for calling methods is intended to protect us from methods running amok (via remotely exploited bugs) by limiting what can be done by them. By using root:root for the final directories and just have the files in partial writeable by the methods we enhance this in sofar as a method can't modify already verified data in its parent directory anymore. As a side effect, this also clears most of the problems you could have if the final directories are shared without user-sharing or if these directories disappear as they are now again root owned and only the partial directories contain _apt owned files (usually none if apt isn't running) and the directory itself is autocreated with the right permissions.
| * | | | | | | ensure partial dirs are 0700 and owned by _apt:rootDavid Kalnischkies2014-10-078-55/+81
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reworks the API involved in creating and setting up the fetcher to be a bit more pleasent to look at and work with as e.g. an empty string for no lock isn't very nice. With the lock we can also stop creating all our partial directories "just in case". This way we can also be a bit more aggressive with the partial directory itself as with a lock, we know we will gone need it.
| * | | | | | | fixup foldmarkers in acquire-item.ccDavid Kalnischkies2014-10-071-91/+51
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
| * | | | | | | fix warningsMichael Vogt2014-10-061-3/+3
| | | | | | | |
| * | | | | | | rename StopAuthentication -> CheckStopAuthentication and make it protectedMichael Vogt2014-10-062-9/+11
| | | | | | | |
| * | | | | | | fix testMichael Vogt2014-10-061-2/+1
| | | | | | | |
| * | | | | | | rename AuthDone() -> CheckAuthDone()Michael Vogt2014-10-062-6/+4
| | | | | | | |
| * | | | | | | cleanup pkgAcq*::Failed()Michael Vogt2014-10-063-73/+55
| | | | | | | |
| * | | | | | | add missing TransactionStageCopy() in pkgAcqDiffIndex::Done()Michael Vogt2014-10-061-12/+5
| | | | | | | |
| * | | | | | | Rework pkgAcqMeta{Index,Sig,ClearSig}::Done() for readabilityMichael Vogt2014-10-063-213/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move common code out but do not use subclassing for ::Done to make it easier to understand what each class is doing when its done
| * | | | | | | fix incorrect docstrings for ↵Michael Vogt2014-10-061-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | AcqMetaBase::TransactionStageRemoval/AcqMetaBase::TransactionStageCopy
| * | | | | | | add new "SetActiveSubprocess()Michael Vogt2014-10-062-46/+25
| | | | | | | |
| * | | | | | | update testMichael Vogt2014-10-061-3/+7
| | | | | | | |
| * | | | | | | really do not download Release if InRelease does not verifyMichael Vogt2014-10-031-20/+24
| | | | | | | |
| * | | | | | | cleanup around pkgAcqMetaSig and improved testsMichael Vogt2014-10-023-52/+76
| | | | | | | |
| * | | | | | | add a bunch of docstrings etcMichael Vogt2014-10-022-14/+40
| | | | | | | |
| * | | | | | | fix crashMichael Vogt2014-10-022-11/+14
| | | | | | | |
| * | | | | | | donkults fixesMichael Vogt2014-10-023-41/+38
| | | | | | | |
| * | | | | | | Cleanup pkgAcqIndexMichael Vogt2014-10-022-135/+171
| | | | | | | |
| * | | | | | | refactor and add pkgAcqIndex::ValidateFile()Michael Vogt2014-10-012-25/+39
| | | | | | | |
| * | | | | | | fix leftover files from Acquire::GzipIndexMichael Vogt2014-10-012-8/+23
| | | | | | | |
| * | | | | | | hack around test-apt-update-unauth failureMichael Vogt2014-10-012-6/+24
| | | | | | | |
| * | | | | | | fix test-apt-update-nofallback testMichael Vogt2014-10-011-1/+5
| | | | | | | |
| * | | | | | | update test/integration/test-releasefile-verificationMichael Vogt2014-10-012-10/+21
| | | | | | | |
| * | | | | | | Use Acquire::Allow{InsecureRepositories,DowngradeToInsecureRepositories}Michael Vogt2014-10-0115-24/+65
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The configuration key Acquire::AllowInsecureRepositories controls if apt allows loading of unsigned repositories at all. The configuration Acquire::AllowDowngradeToInsecureRepositories controls if a signed repository can ever become unsigned. This should really never be needed but we provide it to avoid having to mess around in /var/lib/apt/lists if there is a use-case for this (which I can't think of right now).
| * | | | | | | add verify for the .diff/Index download and add FIXME for ↵Michael Vogt2014-10-011-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pkgAcqIndexDiffs/pkgAcqMergeDiffs
| * | | | | | | cleanupMichael Vogt2014-09-292-31/+54
| | | | | | | |
| * | | | | | | Merge remote-tracking branch 'debian/debian/experimental' into feature/acq-transMichael Vogt2014-09-292-0/+4
| |\ \ \ \ \ \ \
| * | | | | | | | more test fixesMichael Vogt2014-09-292-4/+8
| | | | | | | | |
| * | | | | | | | fix DestFile extMichael Vogt2014-09-291-1/+1
| | | | | | | | |
| * | | | | | | | test fixesMichael Vogt2014-09-294-3/+8
| | | | | | | | |
| * | | | | | | | refactorMichael Vogt2014-09-292-37/+33
| | | | | | | | |
| * | | | | | | | Adjust DestFile in ReverifyAfterIMS() to not include compr ExtensionMichael Vogt2014-09-292-1/+8
| | | | | | | | |
| * | | | | | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-29147-2606/+2623
| |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/gpgv.cc
| * | | | | | | | | test fixesMichael Vogt2014-09-268-36/+46
| | | | | | | | | |
| * | | | | | | | | Do not allow going from authenticated to unauthenticated repoMichael Vogt2014-09-263-86/+348
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also rework the way we load the Release file, so it only after Release.gpg verified the Release file. The rational is that we never want to load untrusted data into our parsers. Only stuff verified with gpg or by its hashes get loaded. To load untrusted data you now need to use apt-get update --allow-unauthenticated.
| * | | | | | | | | Print warning for unauthenticated repositoriesMichael Vogt2014-09-262-0/+34
| | | | | | | | | |
| * | | | | | | | | Do not download Packages/Sources files on I-M-S hit of the Release fileMichael Vogt2014-09-261-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With this branch we know that the data in the lists directory is always what the release file says, so if the Release file is unchanged, then there is no need to queue the download of the other indexfiles as they will be unchanged too (or broken :)
| * | | | | | | | | Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-2514-8/+159
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans
| * | | | | | | | | | make pdiff transactional (but at the cost of a CopyFile()Michael Vogt2014-09-233-31/+79
| | | | | | | | | | |
| * | | | | | | | | | cleanup, fix test-apt-update-unauth as the behavior of apt changedMichael Vogt2014-09-233-12/+29
| | | | | | | | | | |
| * | | | | | | | | | cleanupMichael Vogt2014-09-232-22/+13
| | | | | | | | | | |
| * | | | | | | | | | fix one broken testMichael Vogt2014-09-231-4/+3
| | | | | | | | | | |