summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2022-09-17Support --require-secure-hashes in verifyMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-17Do not verify Manifests when calling update_entry_for_path()Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-17Fix handling --no-require-secure-hashesMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-17Fix linting failuresMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-17Fix update w/ require_secure_hashes to require at least one hashMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-17Support requiring a secure hash when verifyingMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-17Support controlling secure hashes req in CLI updateMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-16Support defaulting secure_hashes to top-level Manifest signingMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-16Support requiring secure hashes in ManifestRecursiveLoaderMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-16Support rejecting insecure hashes when updatingMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-14Fix ValueError on unsupported hashes in broken Python versionsMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-14Add github CI workflowMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-13Fix linter failureMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-13tox: Disable testing pgpy, it's broken upstreamMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-13Fix handling entries without a checksumMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-13Revert "Fix tests not to rely on entries without checksum"Michał Górny
Thinking about it more, GLEP 74 does not explicitly forbid entries without a single checksum, so neither should we. Reverts: 6e48fd1c908b902329d873ddd9d3c91294fbd148 Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-13Fix tests not to rely on entries without checksumMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-13cli: Print top-level Manifest pathMichał Górny
Closes: https://github.com/projg2/gemato/issues/20 Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-09-13Handle unknown hashes gracefully when verifyingMichał Górny
Closes: https://github.com/projg2/gemato/issues/19 Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-02-11Switch to flitMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2022-02-11tox.ini: Update envlistMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2021-04-23benchmark: Improve outputMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-10-01Bump to 16.2Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-10-01openpgp: Fix handling connection errors in WKD refreshMichał Górny
Bug: https://bugs.gentoo.org/745771 Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-10test_openpgp: Fix race conditions in mocked system env cleanupMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-08Bump to 16.1Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-08test_recursiveloader: Attempt to fix misordered Manifest testsMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-08openpgp: Reduce unnecessary recoding in get_wkd_url()Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-08openpgp: Handle non-utf8 UIDs gracefullyMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-08openpgp: Streamline GPG error handling, and handle malformed utf8Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-08test_compression: Decode test string as ASCIIMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-08openpgp: Fix bytes-to-str warnings by using !r (repr)Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-07test_openpgp: Fix ResourceWarning (cleaning up tmpdir)Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-06Add a partial experimental PGPy-based OpenPGP providerMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-06test_openpgp: Add more tests for importing key combosMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-06Bump to 16.0Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-06openpgp: Move get_wkd_url() to global scopeMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-06openpgp: Rename GPG-based environments to *GPGEnvironmentMichał Górny
Rename the GPG-based OpenPGP support implementations to SystemGPGEnvironment and IsolatedGPGEnvironment. OpenPGPEnvironment and OpenPGPSystemEnvironment remain as aliases to the currently preferred implementations. Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05Replace IOError/OSError whenever possibleMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05Do not call signal.strsignal() when not available (py<3.8)Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05Add gpg-wrap commandMichał Górny
Closes: https://github.com/mgorny/gemato/issues/18 Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05openpgp: Verify key validity for signaturesMichał Górny
Require keys to have at least minimal validity for signature verification to be successful. Appropriately mark imported keys ultimately trusted/valid by default. Closes: https://github.com/mgorny/gemato/issues/17 Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05openpgp: Move listing keys to a separate methodMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05test_openpgp: Test using UID with no e-mail addressMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05Bump to 15.3Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05test_recursiveloader: Cache tmp_paths for read-only layoutsMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05compression: Fix compatibility with py<3.8 exceptionsMichał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05tox.ini: Require pytest>=5Michał Górny
Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05Handle invalid compressed files when collecting ManifestsMichał Górny
Fix load_unregistered_manifests() not to crash on 'Manifest*' files that do not contain valid compressed data. Instead, treat them as unknown files, similarly how Manifests with invalid data are handled. Signed-off-by: Michał Górny <mgorny@gentoo.org>
2020-09-05Fix wrongly determining uncompressed sizeMichał Górny
Flush the file after writing to ensure that .buffer.tell() gives non-zero value. This fixes a number of cases of Manifests not being compressed. It also pointed out a major mistake in profile tests. Signed-off-by: Michał Górny <mgorny@gentoo.org>
generated by cgit v1.2.3 (git 2.46.0) at 2025-09-20 21:56:09 +0000