summaryrefslogtreecommitdiff
path: root/methods/gpgv.cc
AgeCommit message (Expand)Author
2019-12-26Revert "Treat SHA1 as Weak rather than untrusted. Add hardcoded exceptions fo...Sam Bingner
2019-12-26Treat SHA1 as Weak rather than untrusted. Add hardcoded exceptions for Modmyi...CoolStar
2019-01-22Communicate back which key(s) were used for signingDavid Kalnischkies
2019-01-22Refactor internal Signers information storage in gpgvDavid Kalnischkies
2018-09-11Support multiple keyrings in sources.list Signed-ByDavid Kalnischkies
2018-09-11Support subkeys properly in Signed-By optionsDavid Kalnischkies
2018-08-19Report (soon) worthless keys if gpg uses fpr for GOODSIGDavid Kalnischkies
2017-07-12Reformat and sort all includes with clang-formatJulian Andres Klode
2017-01-19fix various typos reported by spellintianDavid Kalnischkies
2016-11-25gpgv: Untrust SHA1, RIPE-MD/160, but allow downgrading to weakJulian Andres Klode
2016-11-24report apt-key errors via status-fd messagesDavid Kalnischkies
2016-09-01support long keyid and fingerprint in gpgv's GOODSIGDavid Kalnischkies
2016-08-25show apt-key warnings in apt updateDavid Kalnischkies
2016-08-10implement generic config fallback for methodsDavid Kalnischkies
2016-05-28use std::locale::global instead of setlocaleDavid Kalnischkies
2016-05-08gpgv: show always webportal error on NODATADavid Kalnischkies
2016-05-01support multiple fingerprints in signed-byDavid Kalnischkies
2016-05-01gpgv: cleanup statusfd parsing a bitDavid Kalnischkies
2016-05-01don't show NO_PUBKEY warning if repo is signed by another keyDavid Kalnischkies
2016-05-01gpgv: handle expired sig as worthlessDavid Kalnischkies
2016-05-01gpgv: use EXPKEYSIG instead of KEYEXPIREDDavid Kalnischkies
2016-03-28Allow lowering trust level of a hash via configJulian Andres Klode
2016-03-22handle gpgv's weak-digests ERRSIGDavid Kalnischkies
2016-03-21properly check for "all good sigs are weak"David Kalnischkies
2016-03-16Make the weak signature message less ambigiousJulian Andres Klode
2016-03-16methods/gpgv: Rewrite error handling and messageJulian Andres Klode
2016-03-15methods/gpgv: Warn about SHA1 (and RIPEMD-160)Julian Andres Klode
2016-03-15methods/gpgv: Correctly handle weak signatures with multiple keysJulian Andres Klode
2016-03-14methods/gpgv: Reject weak digest algorithmsJulian Andres Klode
2016-03-14Revert "Handle ERRSIG in the gpgv method like BADSIG"Julian Andres Klode
2016-03-14Handle ERRSIG in the gpgv method like BADSIGJulian Andres Klode
2015-11-05allow acquire method specific options via Binary scopeDavid Kalnischkies
2015-08-10add c++11 override marker to overridden methodsDavid Kalnischkies
2015-08-10implement Signed-By without using gpg for verificationDavid Kalnischkies
2015-08-10implement Signed-By option for sources.listDavid Kalnischkies
2014-11-09use getline() instead of rolling our ownDavid Kalnischkies
2014-10-13Fix backward compatiblity of the new pkgAcquireMethod::DropPrivsOrDie()Michael Vogt
2014-09-29Merge remote-tracking branch 'upstream/debian/experimental' into feature/acq-...Michael Vogt
2014-09-27correct the error messages to refer to apt-key instead of gpgvDavid Kalnischkies
2014-09-25Merge remote-tracking branch 'upstream/debian/experimental' into feature/acq-...Michael Vogt
2014-09-24methods: Fail if we cannot drop privilegesJulian Andres Klode
2014-09-24Drop Privileges to "Debian-apt" in most acquire methodsMichael Vogt
2014-07-21Download Release first, then Release.gpgMichael Vogt
2014-03-13cleanup headers and especially #includes everywhereDavid Kalnischkies
2014-01-30fix various style/performance warnings in rredDavid Kalnischkies
2013-07-25add missing "free(buffer) for allocated bufferMichael Vogt
2013-06-20trigger NODATA error for invalid InRelease filesDavid Kalnischkies
2013-03-15* apt-pkg/contrib/gpgv.cc:David Kalnischkies
2013-03-15* apt-pkg/indexcopy.cc:David Kalnischkies
2012-01-20fix a few esoteric cppcheck errors/warnings/infosDavid Kalnischkies