src/etc/pkg, branch main FreeBSD source tree Move pkg/FreeBSD.conf to usr.sbin/pkg/ 2018-07-31T16:42:03+00:00 Brad Davis brd@FreeBSD.org 2018-07-31T16:42:03+00:00 5836319ae6f19d7804848f6ea0d46e1b810ddf58 Approved by: bapt (mentor) Differential Revision: https://reviews.freebsd.org/D16491 
Approved by:	bapt (mentor)
Differential Revision:	https://reviews.freebsd.org/D16491
Give hint on how to disable the default repository. 2014-03-30T15:24:17+00:00 Bryan Drewery bdrewery@FreeBSD.org 2014-03-30T15:24:17+00:00 f9374f07245a525f6fe0f516f17d204f7f74fabc Discussed with: bapt MFC after: instantly (preparing EN) 
Discussed with:	bapt
MFC after:	instantly (preparing EN)
Enabled should be a boolean, not a string 2013-11-16T15:54:46+00:00 Baptiste Daroussin bapt@FreeBSD.org 2013-11-16T15:54:46+00:00 63af4435d97dfaaf910eb8d18eb14988e2c93bbe MFC after: 2 days 
MFC after:	2 days
Use proper capitalization for FreeBSD.org 2013-11-05T02:22:04+00:00 Bryan Drewery bdrewery@FreeBSD.org 2013-11-05T02:22:04+00:00 cecc0167918b9dd768288bae00c6ca3f6753446a Approved by: bapt MFC after: 2 days 
Approved by:	bapt
MFC after:	2 days
Enable fingerprint checking as the currently known 2013-11-05T02:20:49+00:00 Bryan Drewery bdrewery@FreeBSD.org 2013-11-05T02:20:49+00:00 5ca9b3ca8eb574df9d70f2a5b782fb6d49b05282 fingerprint has an uploaded signature on all mirrors. Approved by: bapt MFC after: 2 days 
fingerprint has an uploaded signature on all mirrors.

Approved by:	bapt
MFC after:	2 days
Move /etc/keys to /usr/share/keys where users are less likely to modify them. 2013-10-29T15:07:54+00:00 Bryan Drewery bdrewery@FreeBSD.org 2013-10-29T15:07:54+00:00 8d20be1e22095c27faf8fe8b2f0d089739cc742e Requested by: secteam (cperciva, des) Approved by: bapt 
Requested by:	secteam (cperciva, des)
Approved by:	bapt
Disable fingerprint checking for now as the pkg repository mirrors will 2013-10-26T14:19:57+00:00 Bryan Drewery bdrewery@FreeBSD.org 2013-10-26T14:19:57+00:00 914d05f14e1e8b76ea41db3c526f436f86c586b5 not receive the signature until later this week. Approved by: bapt 
not receive the signature until later this week.

Approved by:	bapt
Support checking signature for pkg bootstrap. 2013-10-26T03:43:02+00:00 Bryan Drewery bdrewery@FreeBSD.org 2013-10-26T03:43:02+00:00 f12db248e7103a02ef63683a5d3054a5d88e9a5d If the pkg.conf is configured with SIGNATURE_TYPE: FINGERPRINTS, and FINGERPRINTS: /etc/keys/pkg then a pkg.sig file is fetched along with pkg.txz. The signature contains the signature provided by the signing server, and the public key. The .sig is the exact output from the signing server in the following format: SIGNATURE <openssl signed> CERT <rsa public key> END The signature is verified with the following logic: - If the .sig file is missing, it fails. - If the .sig doesn't validate, it fails. - If the public key in the .sig is not in the known trusted fingerprints, it fails. - If the public key is in the revoked key list, it fails. Approved by: bapt MFC after: 2 days Discussed by: bapt with des, jonathan, gavin 
If the pkg.conf is configured with SIGNATURE_TYPE: FINGERPRINTS,
and FINGERPRINTS: /etc/keys/pkg then a pkg.sig file is fetched along
with pkg.txz. The signature contains the signature provided by the
signing server, and the public key. The .sig is the exact output
from the signing server in the following format:

  SIGNATURE
  <openssl signed>
  CERT
  <rsa public key>
  END

The signature is verified with the following logic:

 - If the .sig file is missing, it fails.
 - If the .sig doesn't validate, it fails.
 - If the public key in the .sig is not in the known trusted fingerprints,
   it fails.
 - If the public key is in the revoked key list, it fails.

Approved by:	bapt
MFC after:	2 days
Discussed by:	bapt with des, jonathan, gavin
Add support for reading configuration files from /etc/pkg. 2013-10-26T03:31:05+00:00 Bryan Drewery bdrewery@FreeBSD.org 2013-10-26T03:31:05+00:00 bc5e9ac08d8771b98cbde59775ec2dc776fb1ed0 For now only /etc/pkg/FreeBSD.conf is supported. Its style is: Repo: { URL: "...", MIRROR_TYPE: "...", ... } The configuration will be read from /usr/local/etc/pkg.conf if exists, otherwise /etc/pkg/FreeBSD.conf Approved by: bapt MFC after: 2 days 
For now only /etc/pkg/FreeBSD.conf is supported. Its style is:

Repo: {
   URL: "...",
   MIRROR_TYPE: "...",
   ...
}

The configuration will be read from /usr/local/etc/pkg.conf if exists,
otherwise /etc/pkg/FreeBSD.conf

Approved by:	bapt
MFC after: 	2 days