summaryrefslogtreecommitdiff
path: root/cmdline/apt-key
AgeCommit message (Collapse)Author
2013-10-22Merge branch 'debian/sid' into ubuntu/masterMichael Vogt
Conflicts: cmdline/apt-key configure.ac debian/apt.auto-removal.sh debian/changelog debian/control debian/rules po/apt-all.pot po/ar.po po/ast.po po/bg.po po/bs.po po/ca.po po/cs.po po/cy.po po/da.po po/de.po po/dz.po po/el.po po/es.po po/eu.po po/fi.po po/fr.po po/gl.po po/hu.po po/it.po po/ja.po po/km.po po/ko.po po/ku.po po/lt.po po/mr.po po/nb.po po/ne.po po/nl.po po/nn.po po/pl.po po/pt.po po/pt_BR.po po/ro.po po/ru.po po/sk.po po/sl.po po/sv.po po/th.po po/tl.po po/uk.po po/vi.po po/zh_CN.po po/zh_TW.po
2013-08-12let apt-key del work better with softlink and single key keyringsDavid Kalnischkies
Having fragement files means there is a good chance that there is one key per keyring, so deal with that as well as with setups in which keyrings are linked into trusted.gpg.d as we can't just modify those files (they might be in /usr for example).
2013-08-12make the keyring locations in apt-key configurableDavid Kalnischkies
Might come in handy for more than just a simple testcase.
2013-08-12do not double-slash paths in apt-keyDavid Kalnischkies
Closes: 665411
2013-08-12use a tmpfile for trustdb.gpg in apt-keyDavid Kalnischkies
for some "interesting" reason gpg decides that it needs to update its trustdb.gpg file in a --list-keys command even if right before gpg is asked to --check-trustdb. That wouldn't be as bad if it wouldn't modify the keyring being listed at that moment as well, which generates not only warnings which are not a problem for us, but as the keyring modified can be in /usr it modified files which aren't allowed to be modified. The suggested solution in the bugreport is running --check-trustdb unconditionally in an 'apt-key update' call, but this command will not be used in the future and this could still potentially bite us in net-update or adv calls. All of this just to keep a file around, which we do not need… The commit therefore switches to the use of a temporary created trusted.gpg file for everyone and asks gpg to not try to update the trustdb after its intial creation, which seems to avoid the problem altogether. It is using your also faked secring btw as calling the check-trustdb without a keyring is a lot slower … Closes: #687611 Thanks: Andreas Beckmann for the initial patch!
2013-08-12always use our own trustdb.gpg in apt-keyDavid Kalnischkies
APT doesn't care for the trustdb.gpg, but gnupg requires one even for the simplest commands, so we either use the one root has available in /etc or if we don't have access to it (as only root can read that file) we create a temporary directory to store a trustdb.gpg in it. We can't create just a temporary file as gpg requires the given trustdb.gpg file to be valid (if it exists), so we would have to remove the file before calling gnupg which would allow mktemp (and co) to hand exactly this filename out to another program (unlikely, but still).
2013-08-12add a not documented apt-key --fakeroot optionDavid Kalnischkies
Usually, most apt-key commands require root, so the script is checking for being run as root, but in your tests we use a non-root location, so we don't need to be root and therefore need an option to skip the check. Git-Dch: Ignore
2013-07-02merged debian/sid branch from git.debian.orgMichael Vogt
2013-05-22cmdline/apt-key: Accept nonexistent --keyring file with adv as wellJohan Kiviniemi
2013-05-22cmdline/apt-key: Create new keyrings with mode 0644 instead of 0600Johan Kiviniemi
2012-06-26merge previous security uploadMichael Vogt
2012-06-14add extra paranoia against subkey attacks (and a regression test), LP: ↵Michael Vogt
#1013128, thanks to jdstrand and mdeslaur and Geori Guinski
2012-06-11Merge version 0.9.6 from DebianSteve Langasek
2012-06-06* cmdline/apt-key:Michael Vogt
- do not hardcode /etc but use Dir::Etc instead
2011-11-10merged from lp:~mvo/apt/mvo (that has all the changes from ↵Michael Vogt
debian-experimental2) and resolved a bunch of conflicts
2011-10-05cmdline/apt-key: use MASTER instead of MASTER_KEYRING as the former is the ↵Michael Vogt
argument of the function
2011-10-05cmdline/apt-key: fix --check-sigs to ensure that the signature can verify ↵Michael Vogt
and also add master keyring to ensure that we can actually verify the signature
2011-10-05cmdline/apt-key: use --output instead of the the pipe and import, thanks to ↵Michael Vogt
mdeslaur and infinity for the code review
2011-10-05cmdline/apt-key: move ADDED into the right place, thanks to Marc DeslauriersMichael Vogt
2011-10-04export/import keys one-by-oneMichael Vogt
2011-10-04cmdline/apt-key: use --verify-sigs instead of --list-sigsMichael Vogt
2011-09-27fix apt-key net-update by erroring out if there are any duplicated keys in ↵Michael Vogt
master-keyring and add-keyring (see lp #857472) and add regression test
2011-09-22merge disable apt-key net-updateMichael Vogt
2011-08-23* cmdline/apt-key:David Kalnischkies
- if command is 'add' do not error out if the specified keyring doesn't exist, it will be created by gpg
2011-07-26merged from debian-sidMichael Vogt
2011-07-23you want to be nice and quote a filename just to be reminded by gpgDavid Kalnischkies
that it doesn't like that… remove superficial quoting to fix apt-key
2011-07-16* cmdline/apt-key:David Kalnischkies
- use a tmpfile instead of /etc/apt/secring.gpg (Closes: #632596) * debian/apt.postinst: - remove /etc/apt/secring.gpg if it is an empty file
2011-06-30merged from debian-sidMichael Vogt
2011-06-30* doc/makefile:Michael Vogt
- create doxygen directory to avoid depending on magic (Closes: #628799) * cmdline/apt-key: - explicitly state that net-update is not supported if no url is set - require to be root for add, rm, update and net-update - clarify update vs. net-update in different distros (Closes: #632043) * debian/apt.symbols: - forgot 'mips' in the list for all architecture dependent symbols - comment out gcc-4.5 specific symbols as gcc-4.6 is now default - the symbol for PrintStatus() is architecture dependent * apt-pkg/policy.cc: - do not segfault in pinning if a package with this name doesn't exist. Thanks to Ferdinand Thommes for the report! - Defaults is a vector of Pin not of PkgPin - ensure that only the first specific stanza for a package is used - save all stanzas which had no effect in Unmatched - allow package:architecure in Package:
2011-02-11merged from debian-sidMichael Vogt
2011-02-08[ Stefan Lippers-Hollmann ]Stefan Lippers-Hollmann
* cmdline/apt-key: - fix root test which prevented setting of trustdb-name which lets gpg fail if it adds/remove keys from trusted.gpg as it tries to open the (maybe) not existent /root/.gnupg
2011-02-08merged from the debian-sid branchMichael Vogt
2011-01-16* cmdline/apt-key:David Kalnischkies
- don't set trustdb-name as non-root so 'list' and 'finger' can be used without being root (Closes: #393005, #592107)
2010-11-22* cmdline/apt-key:Michael Vogt
- set timeout of wget for net-update to 90 seconds (thanks to \sh)
2010-09-07merged from the debian-sid branchMichael Vogt
2010-09-04* cmdline/apt-key:David Kalnischkies
- support also Dir::Etc::Trusted so that apt-key works in the same way as the library part which works with the trusted files
2010-07-29merged with the debian-experimental-ma branchMichael Vogt
2010-03-21* cmdline/apt-key:Julian Andres Klode
- Honor Apt::GPGV::TrustedKeyring (Closes: #316390)
2010-02-17merged from the mvo branchMichael Vogt
2010-01-08* French manpage translation updateMichael Vogt
* spot & fix various typos in all manpages * German manpage translation update * cmdline/apt-cache.cc: - remove translatable marker from the "%4i %s\n" string * buildlib/po4a_manpage.mak: - instruct debiandoc to build files with utf-8 encoding * buildlib/tools.m4: - fix some warning from the buildtools * apt-pkg/acquire-item.cc: - add configuration PDiffs::Limit-options to not download too many or too big patches (Closes: #554349) * debian/control: - let all packages depend on ${misc:Depends} * share/*-archive.gpg: - remove the horrible outdated files. We already depend on the keyring so we don't need to ship our own version * cmdline/apt-key: - errors out if wget is not installed (Closes: #545754) - add --keyring option as we have now possibly many * methods/gpgv.cc: - pass all keyrings (TrustedParts) to gpgv instead of using only one trusted.gpg keyring (Closes: #304846) * methods/https.cc: - finally merge the rest of the patchset from Arnaud Ebalard with the CRL and Issuers options, thanks! (Closes: #485963)
2009-09-24* cmdline/apt-key:Michael Vogt
- Emit a warning if removed keys keyring is missing and skip associated checks (LP: #218971)
2009-08-28* cmdline/apt-key:Loïc Minier
- Emit a warning if removed keys keyring is missing and skip associated checks (LP: #218971)
2008-11-24merged from debian-sidMichael Vogt
2008-10-31Added 'unset GREP_OPTIONS' to apt-key.Eugene V. Lyubimkin
2008-10-31Reverted 'bashisms' commit, it was wrong as $(...) is not a bashism.Eugene V. Lyubimkin
2008-10-29Fixed bashisms in apt-key.Eugene V. Lyubimkin
2008-10-03* Document apt-key finger and adv commands (thanks to Stefan Schmidt, ↵Luca Bruno
closes: #350575)
2008-05-05* added debian/README.sourceMichael Vogt
2008-04-08* cmdline/apt-key:Michael Vogt
- only check against master-keys in net-update to not break custom CDs (thanks to Colin Watson)
2008-04-08cmdline/apt-key: only use verify_against_master_keyring in net-update, not ↵Michael Vogt
in update. it does not add any security in update (see comment in the source for rational)
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-22 09:11:05 +0000