apt - [no description]

Age	Commit message (Collapse)	Author	Files	Lines
2014-10-20	test if TMPDIR is accessible before using	David Kalnischkies	1	-2/+6
	Private temporary directories as created by e.g. libpam-tmpdir are nice, but they are also very effective in preventing our priviledge dropping to work as TMPDIR will be set to a directory only root has access to, so working with it as _apt will fail. We circumvent this by extending our check for a usable TMPDIR setting by checking access rights. Closes: 765951
2014-09-29	Test if TMPDIR is a directory in apt-key and if not unset it	Michael Vogt	1	-0/+3
	This prevents a failure in mktemp -d - it will blindly trust TMPDIR and not use something else if the dir is not there.
2014-09-27	add and use 'apt-key verify' which prefers gpgv over gpg	David Kalnischkies	1	-0/+8
	gnupg/gnupg2 can do verify just fine of course, so we don't need to use gpgv here, but it is what we always used in the past, so there might be scripts expecting a certain output and more importantly the output of apt-cdrom contains messages from gpg and even with all the settings we activate to prevent it, it still shows (in some versions) a quiet scary: "gpg: WARNING: Using untrusted key!" message. Keeping the use of gpgv is the simplest way to prevent it. We are increasing also the "Breaks: apt" version from libapt as it requires a newer apt-key than might be installed in partial upgrades.
2014-09-27	miscellaneous small cleanups in apt-key	David Kalnischkies	1	-17/+7
	Git-Dch: Ignore
2014-09-27	add --readonly option for apt-key adv	David Kalnischkies	1	-5/+4
	Some advanced commands can be executed without the keyring being modified like --verify, so this adds an option to disable the mergeback and uses it for our gpg calling code. Git-Dch: Ignore
2014-09-27	use only one --keyring in gpg interactions	David Kalnischkies	1	-28/+77
	We were down to at most two keyrings before, but gnupg upstream plans dropping support for multiple keyrings in the longrun, so with a single keyring we hope to be future proof – and 'apt-key adv' isn't a problem anymore as every change to the keys is merged back, so we have now the same behavior as before, but support an unlimited amount of trusted.gpg.d keyrings.
2014-09-27	add --secret-keyring option for apt-key	David Kalnischkies	1	-0/+11
	For some advanced usecases it might be handy to specify the secret keyring to be used (e.g. as it is used in the testcases), but specifying it via a normal option for gnupg might not be available forever: http://lists.gnupg.org/pipermail/gnupg-users/2013-August/047180.html Git-Dch: Ignore
2014-09-27	allow to specify fingerprints in 'apt-key del'	David Kalnischkies	1	-4/+17

2014-09-27	add a test for apt-key export{,all}	David Kalnischkies	1	-2/+2
	Git-Dch: Ignore
2014-09-27	respect --keyring also in merged keyring commands	David Kalnischkies	1	-8/+10
	Git-Dch: Ignore
2014-09-27	support gnupg2 as drop-in replacement for gnupg	David Kalnischkies	1	-4/+13
	If both are available APT will still prefer gpg over gpg2 as it is a bit more lightweight, but it shouldn't be a problem to use one or the other (at least at the moment, who knows what will happen in the future).
2014-09-27	delay gnupg setup in apt-key until it is needed	David Kalnischkies	1	-22/+22
	'apt-key help' and incorrect usage do not need a functioning gnupg setup, as well as we shouldn't try to setup gnupg before we actually test if it is available (and print a message if it is not).
2014-09-27	merge fragment keyrings in apt-key to avoid hitting gpg limits	David Kalnischkies	1	-57/+77
	gnupg has a hardlimit of 40 (at the moment) keyrings per invocation, which can be exceeded with (many) repositories. That is rather misfortune as the longrun goal was to drop gnupg dependency at some point in the future, but this can now be considered missed and dropped. It also means that 'apt-key adv' commands might not have the behaviour one would expect it to have as it mainly operates on a big temporary keyring, so commands modifying keys will break. Doing this was never a good idea anyway through, so lets just hope nothing break too badly. Closes: 733028
2014-09-27	refactor key removal code to reuse it in next step	David Kalnischkies	1	-48/+55
	Git-Dch: Ignore
2014-09-27	set a primary-keyring only if we have access to it	David Kalnischkies	1	-1/+3

2014-09-27	support (multiple) arguments properly in apt-key	David Kalnischkies	1	-27/+27

2014-09-27	only create new trusted.gpg if directory is writeable	David Kalnischkies	1	-23/+14

2014-09-27	all errors should be printed to stderr	David Kalnischkies	1	-5/+5
	Git-Dch: Ignore
2014-09-27	add a (hidden) --quiet option for apt-key	David Kalnischkies	1	-4/+10

2014-09-27	remove leftover debug output from multikey softlink	David Kalnischkies	1	-1/+0
	Git-Dch: Ignore
2014-02-22	Fix typos in documentation (codespell)	Michael Vogt	1	-2/+2

2014-01-16	use gpg --homedir instead of explicit file placement	David Kalnischkies	1	-13/+14
	Avoids that gpg gets the idea it could use files from the user which weren't overridden specifically like secret keyring and trustdb as before.
2013-12-19	fix apt-key net-update test to use the buildin webserver	Michael Vogt	1	-1/+1

2013-12-13	make apt-key net-update actually testable	Michael Vogt	1	-6/+13

2013-12-01	generate apt-key script with vendor info about keys	David Kalnischkies	1	-0/+354
	The apt-key script uses quiet a few keyring files for operation which are specific to the distribution it is build on and is hence one of the most patched parts – even if it is not that often used anymore now that a fragment directory for trusted.gpg exists.