summaryrefslogtreecommitdiff
path: root/test
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | Print warning for unauthenticated repositoriesMichael Vogt2014-09-261-0/+30
| | | | | |
| * | | | | make pdiff transactional (but at the cost of a CopyFile()Michael Vogt2014-09-231-0/+1
| | | | | |
| * | | | | cleanup, fix test-apt-update-unauth as the behavior of apt changedMichael Vogt2014-09-231-5/+23
| | | | | |
| * | | | | Merge remote-tracking branch 'debian/debian/experimental' into feature/acq-transMichael Vogt2014-09-232-3/+4
| |\ \ \ \ \
| * \ \ \ \ \ Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-2314-20/+242
| |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h methods/copy.cc test/integration/test-hashsum-verification
| * \ \ \ \ \ \ Merge remote-tracking branch 'upstream/debian/experimental' into ↵Michael Vogt2014-09-059-30/+2668
| |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | feature/acq-trans
| * | | | | | | | all tests passMichael Vogt2014-08-242-8/+6
| | | | | | | | |
| * | | | | | | | add ims check verifyMichael Vogt2014-08-021-0/+3
| | | | | | | | |
| * | | | | | | | make i-m-s work againMichael Vogt2014-08-011-0/+22
| | | | | | | | |
| * | | | | | | | add gzip test and todoMichael Vogt2014-08-012-2/+14
| | | | | | | | |
| * | | | | | | | make errors more consistentMichael Vogt2014-08-011-13/+3
| | | | | | | | |
| * | | | | | | | check hashes of compressed files as wellMichael Vogt2014-08-011-12/+17
| | | | | | | | |
| * | | | | | | | fix transactionid passingMichael Vogt2014-08-011-1/+0
| | | | | | | | |
| * | | | | | | | mve MetaKey into pkgAcqBaseIndexMichael Vogt2014-08-011-1/+3
| | | | | | | | |
| * | | | | | | | fail early (again) on gpg sig failuresMichael Vogt2014-07-311-6/+5
| | | | | | | | |
| * | | | | | | | ensure InRelease->Release is transactional as wellMichael Vogt2014-07-311-0/+18
| | | | | | | | |
| * | | | | | | | make test_unauthenticated_to_invalid_inrelease workMichael Vogt2014-07-311-4/+5
| | | | | | | | |
| * | | | | | | | Rework TransactionID stuffMichael Vogt2014-07-311-0/+180
| | | | | | | | |
| * | | | | | | | Download Release first, then Release.gpgMichael Vogt2014-07-211-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The old way of handling this was that pkgAcqMetaIndex was responsible to check/move both Release and Release.gpg in place. This breaks the assumption of the transaction that each pkgAcquire::Item has a single File that its responsible for.
| * | | | | | | | add pkgAcquire::TransactionHasError()Michael Vogt2014-07-211-0/+23
| | | | | | | | |
* | | | | | | | | make expected-size a maximum-size check as this is what we want at this pointMichael Vogt2014-10-071-0/+7
| | | | | | | | |
* | | | | | | | | fix test-cve-2013-1051-InRelease-parsing (fails now in the method)Michael Vogt2014-10-071-1/+1
| | | | | | | | |
* | | | | | | | | make http size check workMichael Vogt2014-10-0672-351/+3907
|\ \ \ \ \ \ \ \ \ | | |_|_|_|_|_|/ / | |/| | | | | | |
| * | | | | | | | ensure world-readability for trusted.gpg in postinstDavid Kalnischkies2014-10-021-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-key creates trusted.gpg if it needs it with 644 nowadays, but before it ensured this, it was gpg creating it, which gives it by default 600. Not a problem as long as our gpgv is run as root, but now that we drop privileges we have to ensure that we can also read trusted.gpg files created by earlier apt-key versions. Closes: 647001
| * | | | | | | | support parsing of all hashes for pdiffDavid Kalnischkies2014-09-301-6/+42
| | |_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The fileformat of a pdiff index stores currently only SHA1 hashes. With this change, we look for all other hashes we support as well and take what we get, so that we can work after the release of jessie to get right of SHA1 if we want to. Note that the completely patched file is and was checked against the hashes collected from the Release file, so this transition isn't mission critical.
| * | | | | | | Test if TMPDIR is a directory in apt-key and if not unset itMichael Vogt2014-09-291-0/+1
| | |_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | This prevents a failure in mktemp -d - it will blindly trust TMPDIR and not use something else if the dir is not there.
| * | | | | | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-293-125/+136
| |\ \ \ \ \ \ | | | |_|_|_|/ | | |/| | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc
| | * | | | | rewrite compressed indexes test to check with all compressorsDavid Kalnischkies2014-09-253-122/+135
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
| | * | | | | generalize Acquire::GzipIndexMichael Vogt2014-09-212-12/+10
| | | | | | |
| * | | | | | allow options between command and -- on commandlineDavid Kalnischkies2014-09-282-2/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This used to work before we implemented a stricter commandline parser and e.g. the dd-schroot-cmd command constructs commandlines like this. Reported-By: Helmut Grohne
| * | | | | | cleanup partial directory of lists in apt-get cleanDavid Kalnischkies2014-09-271-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not really the intended usecase for apt-get clean, but users expect it to help them in recovery and it can't really hurt as this directory should be empty if everything was fine and proper anyway. Closes: #762889
| * | | | | | allow fetcher setup without directory creationDavid Kalnischkies2014-09-273-9/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-get download and changelog as well as apt-helper reuse the acquire system for their own proposes without requiring the directories the fetcher wants to create, which is a problem if you run them as non-root and the directories do not exist as it greets you with: E: Archives directory /var/cache/apt/archives/partial is missing. - Acquire (13: Permission denied) Closes: 762898
| * | | | | | add gnupg and gnupg2 as test-dependencyDavid Kalnischkies2014-09-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt can work with both, so it has an or-dependency on them, but the tests want to play with both of them. Git-Dch: Ignore
| * | | | | | ensure apt-key del handles 16-byte key idsJames McCoy2014-09-271-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The original patch does not apply against the rewritten apt-key, but an additional test doesn't hurt. Closes: 754436
| * | | | | | add --readonly option for apt-key advDavid Kalnischkies2014-09-271-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some advanced commands can be executed without the keyring being modified like --verify, so this adds an option to disable the mergeback and uses it for our gpg calling code. Git-Dch: Ignore
| * | | | | | use only one --keyring in gpg interactionsDavid Kalnischkies2014-09-271-18/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were down to at most two keyrings before, but gnupg upstream plans dropping support for multiple keyrings in the longrun, so with a single keyring we hope to be future proof – and 'apt-key adv' isn't a problem anymore as every change to the keys is merged back, so we have now the same behavior as before, but support an unlimited amount of trusted.gpg.d keyrings.
| * | | | | | add --secret-keyring option for apt-keyDavid Kalnischkies2014-09-271-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some advanced usecases it might be handy to specify the secret keyring to be used (e.g. as it is used in the testcases), but specifying it via a normal option for gnupg might not be available forever: http://lists.gnupg.org/pipermail/gnupg-users/2013-August/047180.html Git-Dch: Ignore
| * | | | | | allow to specify fingerprints in 'apt-key del'David Kalnischkies2014-09-272-1/+9
| | | | | | |
| * | | | | | add a test for apt-key export{,all}David Kalnischkies2014-09-271-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Git-Dch: Ignore
| * | | | | | use apt-key to wrap gpg calls in testcasesDavid Kalnischkies2014-09-271-31/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | beside testing apt-key a bit it also avoids duplicating gpghome setup code in apt-key and the test framework Git-Dch: Ignore
| * | | | | | support gnupg2 as drop-in replacement for gnupgDavid Kalnischkies2014-09-271-83/+108
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If both are available APT will still prefer gpg over gpg2 as it is a bit more lightweight, but it shouldn't be a problem to use one or the other (at least at the moment, who knows what will happen in the future).
| * | | | | | use apt-key adv (+ gnupg) instead of gpgv for verifyDavid Kalnischkies2014-09-274-2/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | apt-key does the keyring merge as we need it, so we just call it instead of reimplementing it to do the merging before gpgv. This means we don't use gpgv anymore (we never depended on it explicitly - bad style), but it also means that the message in apt-cdrom add is a bit less friendly as it says loudly "untrusted key", but for a one-time command its okay.
| * | | | | | fix progress output for (dist-)upgrade calculationDavid Kalnischkies2014-09-2723-0/+42
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously, we had a start and a done of the calculation printed by higher-level code, but this got intermixed by progress reporting from an external solver or the output of autoremove code… The higherlevel code is now only responsible for instantiating a progress object of its choosing (if it wants progress after all) and the rest will be handled by the upgrade code. Either it is used to show the progress of the external solver or the internal solver will give some hints about its overall progress. The later isn't really a proper progress as it will jump forward after each substep, but that is at least a bit better than before without any progress indication. Fixes also the 'strange' non-display of this progress line in -q=1, while all others are shown, which is reflected by all testcase changes.
| * | | | | fix testsMichael Vogt2014-09-232-3/+4
| | |_|_|/ | |/| | |
| * | | | Merge branch 'debian/sid' into debian/experimentalMichael Vogt2014-09-2314-16/+246
| |\| | | | | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: apt-pkg/acquire-item.cc apt-pkg/acquire-item.h apt-pkg/cachefilter.h configure.ac debian/changelog
| | * | relax grep to support newer curl output formatDavid Kalnischkies2014-09-201-1/+6
| | | | | | | | | | | | | | | | Git-Dch: Ignore
| | * | Fix regression when copy: is used for a relative pathMichael Vogt2014-09-191-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When we do a ReverifyAfterIMS() we use the copy: method to verify the hashes again. If the user uses -o Dir=./something/relative this fails because we use the URI class in copy.cc that strips away the leading relative part. By not using URI this is fixed. Closes: #762160
| | * | test/integration/test-apt-update-file: improve testMichael Vogt2014-09-192-0/+17
| | | |
| | * | improve test for commit daff4aMichael Vogt2014-09-171-0/+7
| | | |
| | * | Fix regression for file:/// uris from CVE-2014-0487Michael Vogt2014-09-171-0/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not run ReverifyAfterIMS() for local file URIs as this will causes apt to mess around in the file:/// uri space. This is wrong in itself, but it will also cause a incorrect verification failure when the archive and the lists directory are on different partitions as rename().