<feed xmlns='http://www.w3.org/2005/Atom'>
<title>makepnd.git/scripts/libmakepkg/integrity, branch makepnd</title>
<subtitle>makepnd-ng
</subtitle>
<id>https://git.cloudef.pw/makepnd.git/atom?h=makepnd</id>
<link rel='self' href='https://git.cloudef.pw/makepnd.git/atom?h=makepnd'/>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/'/>
<updated>2017-07-06T03:21:42Z</updated>
<entry>
<title>libmakepkg: Fix improperly spelled local variable declaration</title>
<updated>2017-07-06T03:21:42Z</updated>
<author>
<name>Eli Schwartz</name>
<email>eschwartz93@gmail.com</email>
</author>
<published>2017-07-06T03:14:14Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=b14ff6603809019f8f92f1650872cb93a110e67e'/>
<id>urn:sha1:b14ff6603809019f8f92f1650872cb93a110e67e</id>
<content type='text'>
Signed-off-by: Eli Schwartz &lt;eschwartz93@gmail.com&gt;
Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
<entry>
<title>libmakepkg/integrity: Fix error message not sent to stderr</title>
<updated>2017-07-06T02:55:45Z</updated>
<author>
<name>Eli Schwartz</name>
<email>eschwartz93@gmail.com</email>
</author>
<published>2017-07-04T03:13:23Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=d4193d43cf5346b3a8cfc97a4fc354111df34081'/>
<id>urn:sha1:d4193d43cf5346b3a8cfc97a4fc354111df34081</id>
<content type='text'>
Signed-off-by: Eli Schwartz &lt;eschwartz93@gmail.com&gt;
Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
<entry>
<title>makepkg: create signature files outside of fakeroot</title>
<updated>2017-05-08T08:53:53Z</updated>
<author>
<name>Allan McRae</name>
<email>allan@archlinux.org</email>
</author>
<published>2017-04-17T08:30:05Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=c6b04c04653ba9933fe978829148312e412a9ea7'/>
<id>urn:sha1:c6b04c04653ba9933fe978829148312e412a9ea7</id>
<content type='text'>
With recent version of gpg, signing within fakeroot works on the first
invocation, but fails on later runs.  Sign all packages outside of fakeroot
to avoid this issue.

Fixes FS#49946.

Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
<entry>
<title>makepkg: Verify git signatures</title>
<updated>2017-01-04T03:59:15Z</updated>
<author>
<name>Eli Schwartz</name>
<email>eschwartz93@gmail.com</email>
</author>
<published>2017-01-03T20:10:18Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=eaa82b4d0775252856a4e54a6f2a9ea191cf0b8f'/>
<id>urn:sha1:eaa82b4d0775252856a4e54a6f2a9ea191cf0b8f</id>
<content type='text'>
A git repository is marked as signed if it contains the query "signed"
as defined by https://tools.ietf.org/html/rfc3986

Adds two utility functions in util/source.sh.in to extract fragments and
queries, and modifies source/git.sh.in to use them.

Signed-off-by: Eli Schwartz &lt;eschwartz93@gmail.com&gt;
Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
<entry>
<title>libmakepkg/integrity: Verify file signatures in a separate function</title>
<updated>2017-01-04T03:59:15Z</updated>
<author>
<name>Eli Schwartz</name>
<email>eschwartz93@gmail.com</email>
</author>
<published>2017-01-03T20:10:17Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=42e7020281d3ae260e1e9693495f527b7f476625'/>
<id>urn:sha1:42e7020281d3ae260e1e9693495f527b7f476625</id>
<content type='text'>
This makes it easier to add signature verification for new protos.

Signed-off-by: Eli Schwartz &lt;eschwartz93@gmail.com&gt;
Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
<entry>
<title>Update copyright years</title>
<updated>2017-01-04T03:59:14Z</updated>
<author>
<name>Allan McRae</name>
<email>allan@archlinux.org</email>
</author>
<published>2017-01-01T07:52:18Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=1a2d5bee3bc8841f81db7a4d6b2d41a2363b93d6'/>
<id>urn:sha1:1a2d5bee3bc8841f81db7a4d6b2d41a2363b93d6</id>
<content type='text'>
Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
<entry>
<title>Use coreutils binaries for checking/generating checksums</title>
<updated>2016-10-22T10:50:55Z</updated>
<author>
<name>Allan McRae</name>
<email>allan@archlinux.org</email>
</author>
<published>2016-10-11T13:04:25Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=577701250d645d1fc1a505cde34aedbeb3208ea5'/>
<id>urn:sha1:577701250d645d1fc1a505cde34aedbeb3208ea5</id>
<content type='text'>
If pacman is build against a crypto library other than openssl, it makes no
sense to require makepkg to use it.

The only currently considered alternative to openssl is nettle, which has no
binary for base64 encode/decode. This means that we could replace the hashing
cacluations with nettle-hash, but would require base64 from coreutils.

Given makepkg already relies heavily on coreutils, we might as well use all
the coreutils hashing binaries too.

This patch also improves the checking of required binaries for hashing
operations.

Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
<entry>
<title>libmakepkg: extract functions for integrity checking</title>
<updated>2016-05-18T05:45:56Z</updated>
<author>
<name>Ashley Whetter</name>
<email>ashley@awhetter.co.uk</email>
</author>
<published>2016-05-08T16:28:28Z</published>
<link rel='alternate' type='text/html' href='https://git.cloudef.pw/makepnd.git/commit/?id=4f114f38178aeaffcc571aa42e2f930ca916f79d'/>
<id>urn:sha1:4f114f38178aeaffcc571aa42e2f930ca916f79d</id>
<content type='text'>
Signed-off-by: Ashley Whetter &lt;ashley@awhetter.co.uk&gt;
Signed-off-by: Allan McRae &lt;allan@archlinux.org&gt;
</content>
</entry>
</feed>
