Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-10-01 | fix test-apt-update-nofallback test | Michael Vogt | |
2014-10-01 | Use Acquire::Allow{InsecureRepositories,DowngradeToInsecureRepositories} | Michael Vogt | |
The configuration key Acquire::AllowInsecureRepositories controls if apt allows loading of unsigned repositories at all. The configuration Acquire::AllowDowngradeToInsecureRepositories controls if a signed repository can ever become unsigned. This should really never be needed but we provide it to avoid having to mess around in /var/lib/apt/lists if there is a use-case for this (which I can't think of right now). | |||
2014-09-26 | Do not allow going from authenticated to unauthenticated repo | Michael Vogt | |
Also rework the way we load the Release file, so it only after Release.gpg verified the Release file. The rational is that we never want to load untrusted data into our parsers. Only stuff verified with gpg or by its hashes get loaded. To load untrusted data you now need to use apt-get update --allow-unauthenticated. |