Age | Commit message (Collapse) | Author | |
---|---|---|---|
2022-09-17 | Support --require-secure-hashes in verify | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Fix handling --no-require-secure-hashes | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Fix linting failures | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Fix update w/ require_secure_hashes to require at least one hash | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Support controlling secure hashes req in CLI update | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-16 | Support defaulting secure_hashes to top-level Manifest signing | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-13 | Revert "Fix tests not to rely on entries without checksum" | Michał Górny | |
Thinking about it more, GLEP 74 does not explicitly forbid entries without a single checksum, so neither should we. Reverts: 6e48fd1c908b902329d873ddd9d3c91294fbd148 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-13 | Fix tests not to rely on entries without checksum | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-10-01 | openpgp: Fix handling connection errors in WKD refresh | Michał Górny | |
Bug: https://bugs.gentoo.org/745771 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-10 | test_openpgp: Fix race conditions in mocked system env cleanup | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-08 | openpgp: Handle non-utf8 UIDs gracefully | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-07 | test_openpgp: Fix ResourceWarning (cleaning up tmpdir) | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | Add a partial experimental PGPy-based OpenPGP provider | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | test_openpgp: Add more tests for importing key combos | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | openpgp: Move get_wkd_url() to global scope | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | openpgp: Rename GPG-based environments to *GPGEnvironment | Michał Górny | |
Rename the GPG-based OpenPGP support implementations to SystemGPGEnvironment and IsolatedGPGEnvironment. OpenPGPEnvironment and OpenPGPSystemEnvironment remain as aliases to the currently preferred implementations. Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | Do not call signal.strsignal() when not available (py<3.8) | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | Add gpg-wrap command | Michał Górny | |
Closes: https://github.com/mgorny/gemato/issues/18 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | openpgp: Verify key validity for signatures | Michał Górny | |
Require keys to have at least minimal validity for signature verification to be successful. Appropriately mark imported keys ultimately trusted/valid by default. Closes: https://github.com/mgorny/gemato/issues/17 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | openpgp: Move listing keys to a separate method | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | test_openpgp: Test using UID with no e-mail address | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-30 | tests: Use module-scope fixtures whenever possible | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-30 | test_openpgp: Fix system env tests to respect GNUPG | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-29 | tests: Test OpenPGPSystemEnvironment as well | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-27 | tests: Extend OpenPGP un-expiration tests | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-27 | Import names directly, fix coding style issues | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-27 | Add tests for keys lacking signatures | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-26 | tests: Properly skip test_openpgp.py::test_cli when no gpg | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-26 | tests: Rewrite test_openpgp in pure pytest | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-25 | openpgp: Reimplement WKD support via requests | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-25 | openpgp: Introduce a helper method to get WKD URL | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-25 | tests: Add tests for unexpiring keys | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-25 | tests: Test for trivial cases of key forging | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-25 | tests: Add a test for subkey-signature | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-25 | tests: Store key data in split binary form | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2018-07-25 | tests: Add half-mocked tests for WKD-based refresh | Michał Górny | |
2018-07-25 | tests: Add tests for keyserver-based refreshing | Michał Górny | |
2018-02-02 | openpgp: Fix handling OpenPGPNoImplementation in tests | Michał Górny | |
2018-02-01 | openpgp: Use assertion for home-after-close() | Michał Górny | |
2018-02-01 | openpgp: Replace RuntimeError with dedicated for import/refresh errors | Michał Górny | |
2018-02-01 | openpgp: Add tests for expired signature | Michał Górny | |
2018-01-24 | openpgp: Fix GnuPG use to report UTC timestamps | Michał Górny | |
2018-01-24 | Expose Manifest signature data in Manifest classes | Michał Górny | |
2018-01-24 | openpgp: Return basic signature data when verifying signatures | Michał Górny | |
2018-01-19 | Refresh OpenPGP keys before verification | Michał Górny | |
Always refresh OpenPGP keys before starting the verification process. This ensures that the key has not been revoked, and also reduces the risk of using an expired key. | |||
2018-01-16 | openpgp: Reject signatures made with expired & revoked keys | Michał Górny | |
2017-11-08 | Remove support for OPTIONAL entries | Michał Górny | |
2017-10-28 | test_openpgp: Remove duplicate key loading | Michał Górny | |
2017-10-28 | test_openpgp: Fix cleanup on exception | Michał Górny | |
2017-10-28 | recursiveloader: Provide more fine-grained control over signing | Michał Górny | |