Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-01-22 | openpgp: Add a function to verify detached signature | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-22 | openpgp: Allow verifying a subset of signatures | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-22 | test_openpgp: Add more tests for the multi-signature case | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-22 | openpgp: Store all verification results in OpenPGPSignatureData | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-21 | openpgp: Initial support for multiple signatures | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-21 | test_openpgp: Workaround pyflakes' failures | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-21 | test_openpgp: Put common part of Manifest into a var | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-21 | tests: Move the combined keys to keydata | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2023-01-21 | tests.keydata: Add __main__ that prints keydata | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-26 | Modernize via pyupgrade | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Include full path in ManifestNoSupportedHashes exception | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Fix a corner case when open() fails w/ NXIO/OPNOTSUPP on reg file | Michał Górny | |
Closes: https://github.com/projg2/gemato/issues/21 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Support --require-secure-hashes in verify | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Do not verify Manifests when calling update_entry_for_path() | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Fix handling --no-require-secure-hashes | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Fix linting failures | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Fix update w/ require_secure_hashes to require at least one hash | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Support requiring a secure hash when verifying | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-17 | Support controlling secure hashes req in CLI update | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-16 | Support defaulting secure_hashes to top-level Manifest signing | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-16 | Support requiring secure hashes in ManifestRecursiveLoader | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-16 | Support rejecting insecure hashes when updating | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-13 | Fix linter failure | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-13 | Revert "Fix tests not to rely on entries without checksum" | Michał Górny | |
Thinking about it more, GLEP 74 does not explicitly forbid entries without a single checksum, so neither should we. Reverts: 6e48fd1c908b902329d873ddd9d3c91294fbd148 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-13 | Fix tests not to rely on entries without checksum | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2022-09-13 | Handle unknown hashes gracefully when verifying | Michał Górny | |
Closes: https://github.com/projg2/gemato/issues/19 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-10-01 | openpgp: Fix handling connection errors in WKD refresh | Michał Górny | |
Bug: https://bugs.gentoo.org/745771 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-10 | test_openpgp: Fix race conditions in mocked system env cleanup | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-08 | test_recursiveloader: Attempt to fix misordered Manifest tests | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-08 | openpgp: Handle non-utf8 UIDs gracefully | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-08 | test_compression: Decode test string as ASCII | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-07 | test_openpgp: Fix ResourceWarning (cleaning up tmpdir) | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | Add a partial experimental PGPy-based OpenPGP provider | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | test_openpgp: Add more tests for importing key combos | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | openpgp: Move get_wkd_url() to global scope | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-06 | openpgp: Rename GPG-based environments to *GPGEnvironment | Michał Górny | |
Rename the GPG-based OpenPGP support implementations to SystemGPGEnvironment and IsolatedGPGEnvironment. OpenPGPEnvironment and OpenPGPSystemEnvironment remain as aliases to the currently preferred implementations. Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | Replace IOError/OSError whenever possible | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | Do not call signal.strsignal() when not available (py<3.8) | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | Add gpg-wrap command | Michał Górny | |
Closes: https://github.com/mgorny/gemato/issues/18 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | openpgp: Verify key validity for signatures | Michał Górny | |
Require keys to have at least minimal validity for signature verification to be successful. Appropriately mark imported keys ultimately trusted/valid by default. Closes: https://github.com/mgorny/gemato/issues/17 Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | openpgp: Move listing keys to a separate method | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | test_openpgp: Test using UID with no e-mail address | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | test_recursiveloader: Cache tmp_paths for read-only layouts | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | Handle invalid compressed files when collecting Manifests | Michał Górny | |
Fix load_unregistered_manifests() not to crash on 'Manifest*' files that do not contain valid compressed data. Instead, treat them as unknown files, similarly how Manifests with invalid data are handled. Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | Fix wrongly determining uncompressed size | Michał Górny | |
Flush the file after writing to ensure that .buffer.tell() gives non-zero value. This fixes a number of cases of Manifests not being compressed. It also pointed out a major mistake in profile tests. Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | tests: Port test_recursiveloader to pytest | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-09-05 | tests: Mark module-scope test dirs read-only | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-31 | tests: Port test_profile to pytest | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-30 | tests: Use module-scope fixtures whenever possible | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> | |||
2020-08-30 | test_openpgp: Fix system env tests to respect GNUPG | Michał Górny | |
Signed-off-by: Michał Górny <mgorny@gentoo.org> |