042879f417
index: fully process archive when reading index for signature check
...
can't cancel an index reading or we lose signature checking.
2009-07-23 11:41:10 +03:00
a388f4bfa6
index: more informative error message
...
when failed to load an existing index.
2009-07-23 11:35:40 +03:00
90aaa28a95
apk: add --purge option ( fixes #61 )
...
and do not remove modified configuration files unless --purge is
specified.
2009-07-22 21:34:25 +03:00
83ae16feb8
audit: add --system option
...
to check system files for changes.
2009-07-22 21:28:39 +03:00
79f43861e6
signing: verify and generate identity
...
fixes verification of non-repository packages while installing
them. this is final thing needed for full signing support
(fixes #46 ).
2009-07-22 21:04:54 +03:00
718ef3079e
add: fixes to installing non-repository package
...
make sure cache is enabled on non-permanent rootfs setups.
some optimizations and fixes too.
2009-07-22 20:47:21 +03:00
9b77c053e8
pkg: cleanup the signing code
...
smaller callback and less cases to check. also reintroduce the
oneshot digest flag, hopefully correct this time.
2009-07-22 19:56:13 +03:00
9b63730d84
state: fix previous commit to show OK when everything is ok
2009-07-22 16:19:12 +03:00
9dc60e8d1c
state: commit fdb changes even on error
...
we might have done already something.
2009-07-22 16:11:21 +03:00
5375efac1a
apk: allow-untrusted option
...
to not make hard error of untrusted or missing signatures
2009-07-22 16:06:34 +03:00
23582a0ec5
db: honour clean-protected flag again
2009-07-22 16:00:14 +03:00
93f0b3524c
various: more informative error messages
2009-07-22 14:56:27 +03:00
0a7991f70d
various: misc fixes
...
- error codes for verification failure types
- fix some fdb corruption on file migration
- combine some dependency parsing code
- fix versioned dependencies
2009-07-22 14:24:19 +03:00
0dadc27ce1
db: fix protected directory handling
...
do not overwrite untracked files.
2009-07-22 12:00:56 +03:00
680a301511
various: installation fixes
...
- extract everything as .apk-new and overwrite only after data
has been checksummed
- url construction fixes (to work with simple http servers)
- end of gunzip stream fixed
- remove oneshot digesting flag for now as it's usage was broken
2009-07-22 11:36:55 +03:00
772e4aa26a
various: fix installation of new style apks
2009-07-21 18:25:22 +03:00
2345548e45
index: read also new style index files
2009-07-21 17:59:08 +03:00
812483515a
pkg: fix indexing of multi-part apks
2009-07-21 17:37:44 +03:00
75802cb07d
db: increase hash sizes a bit
2009-07-21 14:26:06 +03:00
1339b14365
db: don't run pre-install until control data is verified
...
to make sure the scripts have not been altered.
2009-07-21 14:06:35 +03:00
84e3786e05
db: fixes to package checksumming while installing it
2009-07-21 13:49:35 +03:00
be8b59dbe1
gzip: fix finalization of compressed output
...
the unflushed data when closing file can be several thousand kiloes,
loop until all is written out.
2009-07-20 15:20:37 +03:00
89d1abe4e6
db: write errors about repository update ( fixes #70 )
2009-07-20 11:41:45 +03:00
eca9c22205
db: signed index loading (ref #46 )
...
prefer index in the new format as signed .tar.gz.
2009-07-20 11:13:03 +03:00
99be653f14
pkg: filenames with '/' cannot be control data
2009-07-20 08:56:53 +03:00
e30834fdcb
digest: use oneshot context flag where approriate
...
speeds up digest calculation on some cases.
2009-07-17 15:56:09 +03:00
0942832325
index: fix output file permissions, verify signed index (ref #46 )
2009-07-17 14:29:02 +03:00
65be7ade1d
pkg: remove debug prints
2009-07-17 14:09:52 +03:00
d694025b91
pkg: fix index generation
...
that got broke during verify implementation.
2009-07-17 14:06:43 +03:00
3f4f9e9957
verify: new applet (ref #46 )
...
an utility to check package signature and integrity.
2009-07-17 13:07:52 +03:00
50fed1063e
pkg: .PKGINFO field for data checksum is 'datahash'
...
in future we might add datahashalg to specify the algorithm used.
2009-07-16 15:32:21 +03:00
251656734d
archive: use the abuild-tar mangled checksum if available
...
to speed up apk installation avoid calculating checksums.
2009-07-16 15:27:00 +03:00
6b471bb614
various: new style index generation
...
change the index generation to do old index, or the new style index
where package identity is sha1 of control block and it's contained
within an .tar.gz to allow signing in future.
2009-07-16 15:16:05 +03:00
0f6d96a4f5
gzip: always autoclose the inner stream
2009-07-16 13:47:26 +03:00
6715a0ba12
pkg: remove support for the deprecated .INSTALL script
2009-07-16 08:52:22 +03:00
623bc9c5a8
index: reuse existing index ( fixes #25 )
...
replace the old 'delete' option, with 'index'. the idea is that
one can provide existing index files to take cached meta-data of
the package from (assumes package has not been modified if index is
newer, and package size has not changed).
this way one always gives the list of .apk files to include in
the new index, and the old index is used only as "cache".
2009-07-15 16:47:43 +03:00
ba76c5f48a
cache: make cache cleaning work again properly
2009-07-15 15:59:06 +03:00
a7c5fda40a
blob: base64 encoding and decoding
...
and prefer sha1 checksums to be stored in base64 encoded format.
2009-07-15 14:48:57 +03:00
bfabf8f8d9
pkg: fix package scanner to read whole archive
...
otherwise we don't get chechksum anymore after the changes to
support partial gzip checksumming.
2009-07-15 08:38:30 +03:00
981bc118f8
db: live with sha1 and md5
...
this also convers scripts file to a tar archive.
2009-07-14 19:14:05 +03:00
e9eaedff50
db: remove debug print
...
was left there unintentionally while debugging stuff.
2009-07-14 17:44:31 +03:00
e98d8253b9
blob: add some likelyness to help compiler optimizations
2009-07-14 14:08:15 +03:00
8d1eeb58e4
blob: some helpers to replace snprintf
...
snprintf is dog slow. make the blob stuff have some helper functions
so we can use them in code paths that are executed often.
2009-07-14 13:27:21 +03:00
ab37bd0b0c
db: speed up fdb creation
...
avoid recalculating hashes, and store the lengths of names, so
we can optimize some operations.
2009-07-14 11:55:08 +03:00
e00f5ea74a
build: optimize with -O2 by default
...
also make the array code more explicit to have gcc optimizer happy.
2009-07-14 11:01:03 +03:00
f1985b03bd
hash: allow caching of hash value
2009-07-14 10:47:20 +03:00
4562f44f9b
bstream: make tokenizable and load index using bstream
...
some fixes on index reading code too.
2009-07-14 09:33:47 +03:00
e69b81f525
io: move csumming away from bstream to gunzip
...
in future we want to checksum on gzip boundary basis, not the
full file.
2009-07-13 20:37:03 +03:00
6b3444ed38
apk-tools-2.0_pre14
2009-07-13 14:38:30 +03:00
b30024d2bd
openssl: register engines, and use oneshot digest when possible
...
to actually get hardware acceleration if available.
2009-07-13 14:28:52 +03:00
Timo Teras