<feed xmlns='http://www.w3.org/2005/Atom'>
<title>src/usr.sbin/pkg, branch releng/10.3</title>
<subtitle>FreeBSD source tree</subtitle>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/'/>
<entry>
<title>MFC: r287580</title>
<updated>2015-09-15T05:56:16+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-09-15T05:56:16+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=dee417ed90b4b5dfff5dad50f101b68f8da078f4'/>
<id>dee417ed90b4b5dfff5dad50f101b68f8da078f4</id>
<content type='text'>
Remove extra debug that crept in
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove extra debug that crept in
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r287579</title>
<updated>2015-09-15T05:46:55+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-09-15T05:46:55+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=3757c1d0062b4cdf0e5142677ffb64fae7f423e5'/>
<id>3757c1d0062b4cdf0e5142677ffb64fae7f423e5</id>
<content type='text'>
Implement pubkey support for the bootstrap

Note that to not interfer with finger print it expects a signature on pkg itself
which is named pkg.txz.pubkeysign

To genrate it:
echo -n "$(sha256 -q pkg.txz)" | openssl dgst -sha256 -sign /thekey \
    -binary -out ./pkg.txz.pubkeysig

Note the "echo -n" which prevent signing the '\n' one would get otherwise

PR:		202622
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Implement pubkey support for the bootstrap

Note that to not interfer with finger print it expects a signature on pkg itself
which is named pkg.txz.pubkeysign

To genrate it:
echo -n "$(sha256 -q pkg.txz)" | openssl dgst -sha256 -sign /thekey \
    -binary -out ./pkg.txz.pubkeysig

Note the "echo -n" which prevent signing the '\n' one would get otherwise

PR:		202622
</pre>
</div>
</content>
</entry>
<entry>
<title>Instant-MFC r286933:</title>
<updated>2015-08-19T18:32:36+00:00</updated>
<author>
<name>Xin LI</name>
<email>delphij@FreeBSD.org</email>
</author>
<published>2015-08-19T18:32:36+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=705b06ac663a86e9a9fac7d549a9b53d5fedefde'/>
<id>705b06ac663a86e9a9fac7d549a9b53d5fedefde</id>
<content type='text'>
Issue warning and refuse to proceed further if the configured
repository signature_type is unsupported by bootstrap pkg(7).

Previously, when signature_type specified an unsupported method,
the bootstrap pkg(7) would proceed like when signature_type is
"none".  MITM attackers may be able to use this vulnerability and
bypass validation and install their own versions of pkg(8).

At this time, only fingerprint and none are supported by the
bootstrap pkg(7).

FreeBSD's official pkg(8) repository uses the fingerprint method
and is therefore unaffected.

Errata candidate.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Issue warning and refuse to proceed further if the configured
repository signature_type is unsupported by bootstrap pkg(7).

Previously, when signature_type specified an unsupported method,
the bootstrap pkg(7) would proceed like when signature_type is
"none".  MITM attackers may be able to use this vulnerability and
bypass validation and install their own versions of pkg(8).

At this time, only fingerprint and none are supported by the
bootstrap pkg(7).

FreeBSD's official pkg(8) repository uses the fingerprint method
and is therefore unaffected.

Errata candidate.
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r281039</title>
<updated>2015-05-30T21:49:18+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-05-30T21:49:18+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=a8649faf05e8569efb0a007f2f7094791af610f6'/>
<id>a8649faf05e8569efb0a007f2f7094791af610f6</id>
<content type='text'>
Allow fetching pkg(8) even if servers/proxies are not passing Content-length
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Allow fetching pkg(8) even if servers/proxies are not passing Content-length
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r273778 (by nwhitehorn)</title>
<updated>2015-05-30T21:47:25+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-05-30T21:47:25+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=81494c11e0031ab21dfee44687782d282d4a0ce7'/>
<id>81494c11e0031ab21dfee44687782d282d4a0ce7</id>
<content type='text'>
Remove spurious libelf dependency.

Submitted by:	pluknet
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove spurious libelf dependency.

Submitted by:	pluknet
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r273754 (by nwhitehorn)</title>
<updated>2015-05-30T21:45:46+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-05-30T21:45:46+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=965977ef7f4bdfb23814a45eeb0e2db3becfecf2'/>
<id>965977ef7f4bdfb23814a45eeb0e2db3becfecf2</id>
<content type='text'>
Use pkg-1.4-style platform identifiers based on MACHINE_ARCH (e.g.
FreeBSD:11:amd64 instead of freebsd:11:x86:64) when bootstrapping pkg.
Thanks to portmgr for providing symlinks so both styles work.

Reviewed by:	bapt
MFC after:	3 weeks
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Use pkg-1.4-style platform identifiers based on MACHINE_ARCH (e.g.
FreeBSD:11:amd64 instead of freebsd:11:x86:64) when bootstrapping pkg.
Thanks to portmgr for providing symlinks so both styles work.

Reviewed by:	bapt
MFC after:	3 weeks
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r259773, r259774, r259775</title>
<updated>2015-05-30T21:32:02+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-05-30T21:32:02+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=c80dc9e50a1809d1551372a534933448bcafb6e1'/>
<id>c80dc9e50a1809d1551372a534933448bcafb6e1</id>
<content type='text'>
Do not print a question in non-interractive mode but explain why boostrapping
has failed and how to allow it to happen

Reported by:	jmmv
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Do not print a question in non-interractive mode but explain why boostrapping
has failed and how to allow it to happen

Reported by:	jmmv
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r258226</title>
<updated>2015-05-30T21:28:55+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-05-30T21:28:55+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=0e270e2bed7a37471ac4482af69bcdf45bfb1361'/>
<id>0e270e2bed7a37471ac4482af69bcdf45bfb1361</id>
<content type='text'>
argc is now used
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
argc is now used
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r258020 (by bdrewery)</title>
<updated>2015-05-30T21:25:32+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-05-30T21:25:32+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=ee1b7a8f865d88857f06b91ae4d940016e85a2cf'/>
<id>ee1b7a8f865d88857f06b91ae4d940016e85a2cf</id>
<content type='text'>
Remove useless checks for NULL pointer before free(3)

Reported by:		eadler
Approved by:		eadler
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove useless checks for NULL pointer before free(3)

Reported by:		eadler
Approved by:		eadler
</pre>
</div>
</content>
</entry>
<entry>
<title>MFC: r257701 (by bdrewery)</title>
<updated>2015-05-30T21:23:41+00:00</updated>
<author>
<name>Baptiste Daroussin</name>
<email>bapt@FreeBSD.org</email>
</author>
<published>2015-05-30T21:23:41+00:00</published>
<link rel='alternate' type='text/html' href='http://cgit.freebsd.org/src/commit/?id=0ca581abbf56785a17f41a041474242f6ad9b33e'/>
<id>0ca581abbf56785a17f41a041474242f6ad9b33e</id>
<content type='text'>
Remove condition which can never be true as the previous loop
is never exited while remote == NULL.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Remove condition which can never be true as the previous loop
is never exited while remote == NULL.
</pre>
</div>
</content>
</entry>
</feed>
