summaryrefslogtreecommitdiff
path: root/methods
AgeCommit message (Expand)AuthorFilesLines
2017-10-26seccomp: Allow ipc() for fakeroot, and allow sysinfo() for sortJulian Andres Klode1-0/+2
2017-10-26Print syscall number and arch to stderr when trapped by seccompJulian Andres Klode1-0/+33
2017-10-25Only warn about seccomp() EINVAL (normal) and EFAULT (qemu) errorsJulian Andres Klode1-3/+5
2017-10-25methods: Enable additional syscalls (SYSV IPC) in fakerootJulian Andres Klode1-0/+10
2017-10-23CMake: methods: Cleanup link libraries, use OBJECT librariesJulian Andres Klode1-17/+14
2017-10-23seccomp: Conditionalize statx() whitelistingJulian Andres Klode1-0/+2
2017-10-23seccomp: Add missing syscalls for ppc64el, i386, and othersJulian Andres Klode1-0/+11
2017-10-22Sandbox methods with seccomp-BPF; except cdrom, gpgv, rshJulian Andres Klode8-19/+240
2017-10-22methods/basehttp.cc: Remove proxy autodetect debugging codeJulian Andres Klode1-2/+0
2017-10-22methods/mirror: Enable sandboxing and other aptMethod featuresJulian Andres Klode1-1/+1
2017-10-22Run Proxy-Auto-Detect script from main processJulian Andres Klode2-1/+10
2017-09-26proper error reporting for v3 onion servicesDavid Kalnischkies1-3/+3
2017-09-24Drop curl method and apt-transport-https packageJulian Andres Klode3-655/+1
2017-07-26allow the auth.conf to be root:root ownedDavid Kalnischkies7-27/+47
2017-07-26lookup login info for proxies in auth.confDavid Kalnischkies1-1/+1
2017-07-26reimplement and document auth.confDavid Kalnischkies6-8/+25
2017-07-26fail early in http if server answer is too small as wellDavid Kalnischkies4-6/+37
2017-07-26fail earlier if server answers with too much dataDavid Kalnischkies3-7/+17
2017-07-26don't try to parse all fields starting with HTTP as status-lineDavid Kalnischkies1-1/+1
2017-07-12Reformat and sort all includes with clang-formatJulian Andres Klode21-96/+95
2017-07-12methods/aptmethod.h: Add missing fileutl.h includeJulian Andres Klode1-0/+1
2017-07-03Stop bragging about old speeds in http.cc commentsJulian Andres Klode1-8/+0
2017-07-03don't set ip addresses as server names for SNIDavid Kalnischkies1-2/+12
2017-07-03Swap file descriptors before the handshakeJulian Andres Klode1-2/+4
2017-07-03Do not error out, only warn if ca certificates are not availableJulian Andres Klode1-5/+5
2017-07-03tls: Add more details to error messages, and detect more errorsJulian Andres Klode1-9/+11
2017-07-01http: A response with Content-Length: 0 has no contentJulian Andres Klode1-1/+4
2017-07-01Make Verify-Host and Verify-Peer independent againJulian Andres Klode1-2/+2
2017-06-30TLS support: Error out on unsupported curl optionsJulian Andres Klode1-2/+4
2017-06-30Improve closing the TLS connectionJulian Andres Klode1-3/+3
2017-06-30Switch to 'http' as the default https methodJulian Andres Klode3-6/+13
2017-06-30http: Add support for https:// proxiesJulian Andres Klode1-3/+8
2017-06-30http: Add support for CONNECT proxying to HTTPS locationsJulian Andres Klode2-1/+131
2017-06-30Allow running the TLS stack on any lower connectionJulian Andres Klode1-1/+19
2017-06-30Reset failure reason when connection was successfulJulian Andres Klode1-1/+3
2017-06-30Don't read CaInfo if not specified (missing else)Julian Andres Klode1-0/+1
2017-06-29http: Only use system CA store if CaInfo is not setJulian Andres Klode1-7/+10
2017-06-29Improve error message if system CA store is emptyJulian Andres Klode1-1/+4
2017-06-29use port from SRV record instead of initial portDavid Kalnischkies1-1/+5
2017-06-28support tor+https being handled by httpDavid Kalnischkies1-3/+10
2017-06-28Introduce Acquire::AllowTLS to turn off TLS supportJulian Andres Klode1-0/+3
2017-06-28Fix https->http redirect issuesDavid Kalnischkies1-1/+1
2017-06-28methods: http: Drain pending data before selectingJulian Andres Klode3-1/+20
2017-06-28Allow building without curlJulian Andres Klode1-3/+14
2017-06-28methods: Add HTTPS support to http method, using GnuTLSJulian Andres Klode4-181/+379
2017-06-28methods: connect: Switch from int fds to new MethodFdJulian Andres Klode6-72/+126
2017-06-28methods: connect: Change PkgAcqMethod to aptMethodJulian Andres Klode4-12/+14
2017-06-26deal with 3xx httpcodes as required by HTTP/1.1 specDavid Kalnischkies1-12/+12
2017-06-26avoid changing directory in mirror methodDavid Kalnischkies1-17/+13
2017-06-26Annotate intended switch fall through in httpsDavid Kalnischkies1-0/+1