summaryrefslogtreecommitdiff
path: root/methods
AgeCommit message (Expand)Author
2017-10-26Print syscall number and arch to stderr when trapped by seccompJulian Andres Klode
2017-10-25Only warn about seccomp() EINVAL (normal) and EFAULT (qemu) errorsJulian Andres Klode
2017-10-25methods: Enable additional syscalls (SYSV IPC) in fakerootJulian Andres Klode
2017-10-23CMake: methods: Cleanup link libraries, use OBJECT librariesJulian Andres Klode
2017-10-23seccomp: Conditionalize statx() whitelistingJulian Andres Klode
2017-10-23seccomp: Add missing syscalls for ppc64el, i386, and othersJulian Andres Klode
2017-10-22Sandbox methods with seccomp-BPF; except cdrom, gpgv, rshJulian Andres Klode
2017-10-22methods/basehttp.cc: Remove proxy autodetect debugging codeJulian Andres Klode
2017-10-22methods/mirror: Enable sandboxing and other aptMethod featuresJulian Andres Klode
2017-10-22Run Proxy-Auto-Detect script from main processJulian Andres Klode
2017-09-26proper error reporting for v3 onion servicesDavid Kalnischkies
2017-09-24Drop curl method and apt-transport-https packageJulian Andres Klode
2017-07-26allow the auth.conf to be root:root ownedDavid Kalnischkies
2017-07-26lookup login info for proxies in auth.confDavid Kalnischkies
2017-07-26reimplement and document auth.confDavid Kalnischkies
2017-07-26fail early in http if server answer is too small as wellDavid Kalnischkies
2017-07-26fail earlier if server answers with too much dataDavid Kalnischkies
2017-07-26don't try to parse all fields starting with HTTP as status-lineDavid Kalnischkies
2017-07-12Reformat and sort all includes with clang-formatJulian Andres Klode
2017-07-12methods/aptmethod.h: Add missing fileutl.h includeJulian Andres Klode
2017-07-03Stop bragging about old speeds in http.cc commentsJulian Andres Klode
2017-07-03don't set ip addresses as server names for SNIDavid Kalnischkies
2017-07-03Swap file descriptors before the handshakeJulian Andres Klode
2017-07-03Do not error out, only warn if ca certificates are not availableJulian Andres Klode
2017-07-03tls: Add more details to error messages, and detect more errorsJulian Andres Klode
2017-07-01http: A response with Content-Length: 0 has no contentJulian Andres Klode
2017-07-01Make Verify-Host and Verify-Peer independent againJulian Andres Klode
2017-06-30TLS support: Error out on unsupported curl optionsJulian Andres Klode
2017-06-30Improve closing the TLS connectionJulian Andres Klode
2017-06-30Switch to 'http' as the default https methodJulian Andres Klode
2017-06-30http: Add support for https:// proxiesJulian Andres Klode
2017-06-30http: Add support for CONNECT proxying to HTTPS locationsJulian Andres Klode
2017-06-30Allow running the TLS stack on any lower connectionJulian Andres Klode
2017-06-30Reset failure reason when connection was successfulJulian Andres Klode
2017-06-30Don't read CaInfo if not specified (missing else)Julian Andres Klode
2017-06-29http: Only use system CA store if CaInfo is not setJulian Andres Klode
2017-06-29Improve error message if system CA store is emptyJulian Andres Klode
2017-06-29use port from SRV record instead of initial portDavid Kalnischkies
2017-06-28support tor+https being handled by httpDavid Kalnischkies
2017-06-28Introduce Acquire::AllowTLS to turn off TLS supportJulian Andres Klode
2017-06-28Fix https->http redirect issuesDavid Kalnischkies
2017-06-28methods: http: Drain pending data before selectingJulian Andres Klode
2017-06-28Allow building without curlJulian Andres Klode
2017-06-28methods: Add HTTPS support to http method, using GnuTLSJulian Andres Klode
2017-06-28methods: connect: Switch from int fds to new MethodFdJulian Andres Klode
2017-06-28methods: connect: Change PkgAcqMethod to aptMethodJulian Andres Klode
2017-06-26deal with 3xx httpcodes as required by HTTP/1.1 specDavid Kalnischkies
2017-06-26avoid changing directory in mirror methodDavid Kalnischkies
2017-06-26Annotate intended switch fall through in httpsDavid Kalnischkies
2017-01-24basehttp: Only read Content-Range on 416 and 206 responsesJulian Andres Klode