summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* apk-tools-2.8.0v2.8.0Timo Teräs2017-10-061-1/+1
|
* libfetch: fix certificate host name checkTimo Teräs2017-10-061-1/+1
| | | | | OpenSSL allows passing zero-length to indicate "use strlen". LibreSSL requires using the real length always, so pass the length.
* libfetch: improve openssl/libressl compatibilityTimo Teräs2017-10-064-7/+436
| | | | | | X509_check_host() is introduced in libressl-2.5.0 and openssl-1.0.2 which are not yet universally available. Add support for building against the older versions.
* libfetch: improve ssl connectionsTimo Teräs2017-10-053-6/+111
| | | | | | | | | | | | loosely based on the freebsd implementation, implement https connection settings to override CA, and use client certificate. new files supported in /etc/apk/: ca.pem - if exists, it contains CAs acceptable for https (otherwise system wide CAs are used) crl.pem - if ca.pem is used, this is the (optional) CRL for it cert.pem - used as client authentication certificate (+ key) cert.key - used as client key (can be also inside cert.pem)
* libfetch: remove unwanted code conditionalsTimo Teräs2017-10-057-94/+7
|
* libfetch: fix ssl context leakTimo Teräs2017-10-051-0/+14
| | | | from freebsd
* build and use bundled libfetch nativelyTimo Teräs2017-10-0510-115/+61
|
* import libfetch-2.38 from NetBSDTimo Teräs2017-10-0513-0/+6630
| | | | | | | | | | | | | | | | | | | | ftp://ftp.fu-berlin.de/unix/NetBSD/packages/current-src/pkgsrc/net/libfetch/files libfetch comes (at least) in netbsd and freebsd flavors which differing functionality. Alpine and Arch package netbsd one, but it's not widely packaged across other distributions. We need NetBSD version as it does not use funopen(3) which is not supported in musl, and supports connection pooling. FreeBSD seems to be the orignal and better maintained version with support for SSL CAs, client certificate authentication, proxy authentication, and improved http redirect handling. So this imports NetBSD version, and future commits will pick up the needed improvements from FreeBSD tree. Incidentally, this also fixes #7857 and likes for good.
* package: remove package script after use (fixes #7974)Timo Teräs2017-10-041-6/+9
| | | | | this is a regression introduced in commit 349c61c9 ("add support for pre and post commit hooks")
* info: fix typo in helpDamiano Albani2017-09-271-1/+1
|
* commit: proper singular/plural for 'error(s)' in commit messageTimo Teräs2017-08-231-1/+2
| | | | based on github pull request #5
* fix comparison of unsigned expression < 0 is always falseDmitry Golovin2017-08-232-4/+7
| | | | found by clang
* make preprocessor arguments clang-compatibleDmitry Golovin2017-08-231-1/+1
|
* use labs istead of abs with long argumentDmitry Golovin2017-08-231-1/+1
|
* index: Only rewrite arch if no error is encounteredA. Wilcox2017-07-291-2/+2
|
* database: include POSIX header for ST_* definesA. Wilcox2017-07-291-0/+1
|
* travis: notify on IRCJakub Jirutka2017-07-251-0/+7
|
* tar: use standard header prefixTimo Teräs2017-06-261-1/+9
| | | | | | | APKs have been created with GNU tar so far, which uses the GNU extensions for long names. In order to increase portability support the standard header's 'prefix' portion in case the GNU extensions are not present.
* db: fix current directory instance caching in tar extractionTimo Teräs2017-06-261-1/+1
| | | | | | | Depending how the directory entries are ordered, the cached dir instance might not have been updated correctly. This has not been a problem as the entries have been ordered, but is now triggered on ppc.
* database: mark error on renameat failureA. Wilcox2017-06-261-2/+6
|
* travis: deploy tarballs with static binary to GH ReleasesJakub Jirutka2017-06-231-0/+19
| | | | | The main usage is for alpine-chroot-install and similar scripts, so it can depend on specific *persistent* version.
* travis: update alpine-chroot-install to 0.5.1Jakub Jirutka2017-06-231-2/+2
|
* io: make io vtables const struct, and add accessors for themTimo Teräs2017-06-2313-120/+195
| | | | | This reduces function pointers in heap, and unifies how the io functions are called.
* archive: validate reading of pax and gnu long filename extensionsTimo Teräs2017-06-231-14/+14
| | | | | | | Detect properly if the file stream gets an error during these read operations. Reported-by: Ariel Zelivansky from Twistlock
* archive: fix incorrect bounds checking for memory allocationTimo Teräs2017-06-231-2/+4
| | | | | | | | | | | The value from tar header is unsigned int; keep it casted to unsigned int and size_t instead of (signed) int, otherwise the comparisons fail to do their job properly. Additionally check entry.size against SSIZE_MAX so the rounding up later on is guaranteed to not overflow. Fixes CVE-2017-9669 and CVE-2017-9671. Reported-by: Ariel Zelivansky from Twistlock
* Revert "version: consider pkg-rX and pkg to be the same version"William Pitcock2017-06-231-5/+0
| | | | This reverts commit ee5ce7284aef8679fabcf728dd5bd5a17c965798.
* gitignore: exclude files generated by root-testsJakub Jirutka2017-06-111-0/+4
|
* test: modernize testing APKBUILDsJakub Jirutka2017-06-116-59/+54
|
* test: fix test4.sh, script failure is non-fatalJakub Jirutka2017-06-111-2/+2
| | | | This behaviour has been changed in: 7d5cd2c8a0052a7446515f90d3d0ea5cc2e93efe.
* test: fix running root-tests with QEMU user-mode emulationJakub Jirutka2017-06-111-1/+12
| | | | | Variable QEMU_EMULATOR is set by enter-chroot script from alpine-chroot-install.
* test: run test*.sh with set -xJakub Jirutka2017-06-111-1/+1
|
* test: fix test6.sh, vmlinuz and initramfs are not symlinksJakub Jirutka2017-06-111-2/+2
|
* test: fix test6.sh, replace linux-grsec w/ linux-vanilla, add alpine-keysJakub Jirutka2017-06-111-3/+3
|
* test: exit with non-zero status when some root-test failJakub Jirutka2017-06-111-3/+4
|
* test: print output log when test failJakub Jirutka2017-06-111-3/+6
|
* test: fix invalid SYSREPO with http://nl.a.oJakub Jirutka2017-06-111-1/+1
|
* test: fix target $(repos), APKINDEX is now generated by abuildJakub Jirutka2017-06-111-3/+0
|
* test: fix target $(repos), PKGDEST is no longer supportedJakub Jirutka2017-06-111-1/+1
|
* test: fix missing "arch" in testing APKBUILDsJakub Jirutka2017-06-116-0/+6
|
* travis: set up running tests on Travis CIJakub Jirutka2017-06-111-0/+27
|
* print: oh dear, i have reworked the progress bar againWilliam Pitcock2017-06-011-4/+15
| | | | | | | | | | | - rework the progress bar a little bit, basically removing the [ and ] to give a more modern aesthetic. - if utf-8 locale is enabled, use unicode codepoint 0x2588 instead of # to give the progress bar a nicer look. - if APK_PROGRESS_CHAR environment variable is defined, use the character defined there for the progress bar.
* apk_defines: implement mulmod()William Pitcock2017-06-011-0/+8
|
* index: fix unsatisfied dependencies warning (maybe vs may be)William Pitcock2017-05-281-1/+1
|
* manifest: fix up help entryWilliam Pitcock2017-05-281-4/+5
|
* version: add support for fuzzy version matchingWilliam Pitcock2017-05-275-9/+26
| | | | | This is useful for requirements such as: python3=~3.6, which would match python3-3.6.[0-9]. This implementation should in theory be backwards compatible with the implementation in Adelie.
* version: consider pkg-rX and pkg to be the same versionA. Wilcox2017-05-271-0/+5
|
* manifest: add file support as well as apkdb supportWilliam Pitcock2017-05-271-0/+55
|
* manifest: dump checksum type tooWilliam Pitcock2017-05-271-1/+5
|
* db: fix regression preventing remounting apk cache r/wTimo Teräs2017-05-251-1/+2
| | | | | Introduced in commit c0f2d88f342f4d185f3991f98b79ab61a03896e4. fstatfs is needed to inspect the mount flags.
* manifest: new applet which dumps checksums in sha1sum format for a packageWilliam Pitcock2017-05-202-1/+75
|