| Commit message (Expand) | Author | Age | Files | Lines |
* | seccomp: Allow clock_nanosleep() and nanosleep() syscalls | Julian Andres Klode | 2017-10-27 | 1 | -0/+2 |
* | Drop unused gzip, lzma, bzip2, and xz symlinks of store | Julian Andres Klode | 2017-10-26 | 1 | -1/+1 |
* | seccomp: Allow ipc() for fakeroot, and allow sysinfo() for sort | Julian Andres Klode | 2017-10-26 | 1 | -0/+2 |
* | Print syscall number and arch to stderr when trapped by seccomp | Julian Andres Klode | 2017-10-26 | 1 | -0/+33 |
* | Only warn about seccomp() EINVAL (normal) and EFAULT (qemu) errors | Julian Andres Klode | 2017-10-25 | 1 | -3/+5 |
* | methods: Enable additional syscalls (SYSV IPC) in fakeroot | Julian Andres Klode | 2017-10-25 | 1 | -0/+10 |
* | CMake: methods: Cleanup link libraries, use OBJECT libraries | Julian Andres Klode | 2017-10-23 | 1 | -17/+14 |
* | seccomp: Conditionalize statx() whitelisting | Julian Andres Klode | 2017-10-23 | 1 | -0/+2 |
* | seccomp: Add missing syscalls for ppc64el, i386, and others | Julian Andres Klode | 2017-10-23 | 1 | -0/+11 |
* | Sandbox methods with seccomp-BPF; except cdrom, gpgv, rsh | Julian Andres Klode | 2017-10-22 | 8 | -19/+240 |
* | methods/basehttp.cc: Remove proxy autodetect debugging code | Julian Andres Klode | 2017-10-22 | 1 | -2/+0 |
* | methods/mirror: Enable sandboxing and other aptMethod features | Julian Andres Klode | 2017-10-22 | 1 | -1/+1 |
* | Run Proxy-Auto-Detect script from main process | Julian Andres Klode | 2017-10-22 | 2 | -1/+10 |
* | proper error reporting for v3 onion services | David Kalnischkies | 2017-09-26 | 1 | -3/+3 |
* | Drop curl method and apt-transport-https package | Julian Andres Klode | 2017-09-24 | 3 | -655/+1 |
* | allow the auth.conf to be root:root owned | David Kalnischkies | 2017-07-26 | 7 | -27/+47 |
* | lookup login info for proxies in auth.conf | David Kalnischkies | 2017-07-26 | 1 | -1/+1 |
* | reimplement and document auth.conf | David Kalnischkies | 2017-07-26 | 6 | -8/+25 |
* | fail early in http if server answer is too small as well | David Kalnischkies | 2017-07-26 | 4 | -6/+37 |
* | fail earlier if server answers with too much data | David Kalnischkies | 2017-07-26 | 3 | -7/+17 |
* | don't try to parse all fields starting with HTTP as status-line | David Kalnischkies | 2017-07-26 | 1 | -1/+1 |
* | Reformat and sort all includes with clang-format | Julian Andres Klode | 2017-07-12 | 21 | -96/+95 |
* | methods/aptmethod.h: Add missing fileutl.h include | Julian Andres Klode | 2017-07-12 | 1 | -0/+1 |
* | Stop bragging about old speeds in http.cc comments | Julian Andres Klode | 2017-07-03 | 1 | -8/+0 |
* | don't set ip addresses as server names for SNI | David Kalnischkies | 2017-07-03 | 1 | -2/+12 |
* | Swap file descriptors before the handshake | Julian Andres Klode | 2017-07-03 | 1 | -2/+4 |
* | Do not error out, only warn if ca certificates are not available | Julian Andres Klode | 2017-07-03 | 1 | -5/+5 |
* | tls: Add more details to error messages, and detect more errors | Julian Andres Klode | 2017-07-03 | 1 | -9/+11 |
* | http: A response with Content-Length: 0 has no content | Julian Andres Klode | 2017-07-01 | 1 | -1/+4 |
* | Make Verify-Host and Verify-Peer independent again | Julian Andres Klode | 2017-07-01 | 1 | -2/+2 |
* | TLS support: Error out on unsupported curl options | Julian Andres Klode | 2017-06-30 | 1 | -2/+4 |
* | Improve closing the TLS connection | Julian Andres Klode | 2017-06-30 | 1 | -3/+3 |
* | Switch to 'http' as the default https method | Julian Andres Klode | 2017-06-30 | 3 | -6/+13 |
* | http: Add support for https:// proxies | Julian Andres Klode | 2017-06-30 | 1 | -3/+8 |
* | http: Add support for CONNECT proxying to HTTPS locations | Julian Andres Klode | 2017-06-30 | 2 | -1/+131 |
* | Allow running the TLS stack on any lower connection | Julian Andres Klode | 2017-06-30 | 1 | -1/+19 |
* | Reset failure reason when connection was successful | Julian Andres Klode | 2017-06-30 | 1 | -1/+3 |
* | Don't read CaInfo if not specified (missing else) | Julian Andres Klode | 2017-06-30 | 1 | -0/+1 |
* | http: Only use system CA store if CaInfo is not set | Julian Andres Klode | 2017-06-29 | 1 | -7/+10 |
* | Improve error message if system CA store is empty | Julian Andres Klode | 2017-06-29 | 1 | -1/+4 |
* | use port from SRV record instead of initial port | David Kalnischkies | 2017-06-29 | 1 | -1/+5 |
* | support tor+https being handled by http | David Kalnischkies | 2017-06-28 | 1 | -3/+10 |
* | Introduce Acquire::AllowTLS to turn off TLS support | Julian Andres Klode | 2017-06-28 | 1 | -0/+3 |
* | Fix https->http redirect issues | David Kalnischkies | 2017-06-28 | 1 | -1/+1 |
* | methods: http: Drain pending data before selecting | Julian Andres Klode | 2017-06-28 | 3 | -1/+20 |
* | Allow building without curl | Julian Andres Klode | 2017-06-28 | 1 | -3/+14 |
* | methods: Add HTTPS support to http method, using GnuTLS | Julian Andres Klode | 2017-06-28 | 4 | -181/+379 |
* | methods: connect: Switch from int fds to new MethodFd | Julian Andres Klode | 2017-06-28 | 6 | -72/+126 |
* | methods: connect: Change PkgAcqMethod to aptMethod | Julian Andres Klode | 2017-06-28 | 4 | -12/+14 |
* | deal with 3xx httpcodes as required by HTTP/1.1 spec | David Kalnischkies | 2017-06-26 | 1 | -12/+12 |