shaba/ostree
1
0
Fork 0
mirror of https://github.com/ostreedev/ostree.git synced 2024-12-22 17:35:55 +03:00
Code Issues Projects Releases Wiki Activity
a6eb8bbcf6
ostree/tests
History
Colin Walters 41ef2aeb38 pull: Do GPG verify commit objects when using deltas 
The fact that we weren't doing this is at best an oversight, and
for some deployment models a security vulnerability.  Having both
`gpg-verify` and `gpg-verify-summary` shows that we were intending
them to be orthogonal/independent.

Lately I've been advocating moving towards pinned TLS instead of
gpg-signed summaries, and if we follow that path, performing GPG
verification of commit objects even if using deltas is more important,
as it provides an at-rest verifiable authenticity and integrity
mechanism.

Content providers which are signing their summary files and/or using
TLS (particularly pinned TLS) for transport should treat this as a
nice-to-have.  However, for providers which are serving content over
plain HTTP and relying on GPG, this is a critical update.

Closes: https://github.com/ostreedev/ostree/issues/517

Closes: #589
Approved by: jlebon
2016-11-21 15:55:09 +00:00
..
gpg-verify-data gpg: Regenerate test data for test-gpg-verify-result 2015-03-19 12:43:04 -04:00
gpghome tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
.gitignore Update .gitignore 2015-08-26 12:16:29 -07:00
admin-test.sh u-boot: Merge ostree's and systems uEnv.txt 2016-08-27 13:11:22 +00:00
archive-test.sh tests: Use "bash strict mode" 2016-01-27 11:44:10 -05:00
basic-test.sh ostree commit: Fix combining trees with multiple --tree=ref arguments 2016-11-17 14:45:55 +00:00
bootloader-entries-crosscheck.py Introducing ostree-grub-generator 2016-04-04 14:19:35 +00:00
ci-build.sh travis: run the test suite on various distributions 2016-08-05 23:58:19 +00:00
ci-Dockerfile.in travis: run the test suite on various distributions 2016-08-05 23:58:19 +00:00
ci-install.sh Final excision of libgsystem dependency 2016-08-09 15:36:09 +00:00
corrupt-repo-ref.js corrupt-repo-ref.js: more aggressive file corruption 2014-10-22 20:02:06 +02:00
glib.supp glib.supp: Suppress g_task -> thread leaks 2016-07-28 10:10:17 +00:00
grub2-entries-crosscheck.py tests: Add a test script to cross-check loader config vs GRUB2 2015-05-28 14:21:30 -04:00
libostreetest.c tests: Ensure mutable deployments from libostreetest 2016-06-27 20:20:21 +00:00
libostreetest.h tests/test-pull-c: New test that runs through the pull API via C 2016-06-07 15:58:37 +00:00
libtest.sh Force C.UTF-8 or C locale for tests 2016-10-29 18:12:42 +00:00
ostree-grub-generator Introducing ostree-grub-generator 2016-04-04 14:19:35 +00:00
ostree.supp tests: Modernize valgrind infrastructure 2016-06-09 21:10:35 +00:00
pre-endian-deltas-repo-big.tar.xz deltas: Heuristically detect endianness for older deltas 2016-02-26 08:19:01 -05:00
pre-endian-deltas-repo-little.tar.xz deltas: Heuristically detect endianness for older deltas 2016-02-26 08:19:01 -05:00
pull-test.sh pull: Don't do deltas with --commit-metadata-only 2016-11-04 16:04:23 +00:00
readdir-rand.c build: Fix libreaddir-rand to honor global CFLAGS 2016-06-17 14:43:44 +00:00
test-admin-deploy-2.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-admin-deploy-bootid-gc.sh repo: Clean up staging directory for previous boot IDs 2016-05-02 18:44:44 +00:00
test-admin-deploy-clean.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-admin-deploy-etcmerge-cornercases.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-admin-deploy-grub2.sh u-boot: Merge ostree's and systems uEnv.txt 2016-08-27 13:11:22 +00:00
test-admin-deploy-karg.sh Filter bootloader supplied kernel cmdline options 2016-11-01 18:00:37 +00:00
test-admin-deploy-switch.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-admin-deploy-syslinux.sh u-boot: Merge ostree's and systems uEnv.txt 2016-08-27 13:11:22 +00:00
test-admin-deploy-uboot.sh u-boot: Merge ostree's and systems uEnv.txt 2016-08-27 13:11:22 +00:00
test-admin-instutil-set-kargs.sh Filter bootloader supplied kernel cmdline options 2016-11-01 18:00:37 +00:00
test-admin-locking.sh Probe for GNU parallel more accurately 2016-03-31 14:22:06 +00:00
test-admin-pull-deploy-commit.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-admin-upgrade-not-backwards.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-admin-upgrade-unconfigured.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-archivez.sh libtest.sh: use G_TEST_SRCDIR, G_TEST_BUILDDIR to find resources 2016-03-31 18:54:13 +00:00
test-auto-summary.sh tests: Remove extra $CMD_PREFIX from test-auto-summary.sh 2016-06-27 20:20:21 +00:00
test-basic-c.c core: Add a function creating an archive-z2 content stream 2016-05-26 16:53:08 +00:00
test-basic-user.sh various tests: skip if temp directory lacks xattr support 2016-03-31 14:22:06 +00:00
test-basic.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-bsdiff.c Remove unnecessary #include "libgsystem.h" 2015-05-06 22:07:11 -04:00
test-checksum.c static-delta: add some error handling 2016-09-09 19:06:11 +00:00
test-commit-sign.sh lib: Add an API to GPG verify a commit given a remote 2016-11-17 11:33:41 +00:00
test-core.js test-core.js: Add standard copyright header 2013-09-18 16:34:57 -04:00
test-corruption.sh tests: Use "bash strict mode" 2016-01-27 11:44:10 -05:00
test-delta.sh static-delta: add some error handling 2016-09-09 19:06:11 +00:00
test-demo-buildsystem.sh tests: add missing ${CMD_PREFIX} before ostree 2016-04-07 12:25:24 +00:00
test-export.sh ostree export: Add --prefix option 2016-04-19 12:28:06 +00:00
test-gpg-signed-commit.sh libtest: add has_gpgme() helper function 2016-08-31 16:52:12 +00:00
test-gpg-verify-result.c Final excision of libgsystem dependency 2016-08-09 15:36:09 +00:00
test-help.sh tests: Use "bash strict mode" 2016-01-27 11:44:10 -05:00
test-keyfile-utils.c Remove unnecessary #include "libgsystem.h" 2015-05-06 22:07:11 -04:00
test-libarchive-import.c tests: Skip libarchive/selinux tests if in container without SELinux 2016-10-27 16:48:34 +00:00
test-libarchive.sh tests/test-libarchive.sh: add more test 2016-05-06 14:44:55 +00:00
test-local-pull-depth.sh tests: Use "bash strict mode" 2016-01-27 11:44:10 -05:00
test-local-pull.sh tests: Test that local pulls do not use deltas 2016-08-10 10:54:46 +00:00
test-lzma.c tests: fix LZMA test to really compress/decompress 2015-10-13 15:24:09 +02:00
test-mutable-tree.c tree-wide: Remove unused variables detected by CLang 2016-10-27 17:02:01 +00:00
test-oldstyle-partial.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-ot-opt-utils.c Remove unnecessary #include "libgsystem.h" 2015-05-06 22:07:11 -04:00
test-ot-tool-util.c Remove unnecessary #include "libgsystem.h" 2015-05-06 22:07:11 -04:00
test-ot-unix-utils.c Remove unnecessary #include "libgsystem.h" 2015-05-06 22:07:11 -04:00
test-parent.sh test-parent: this test requires user xattrs 2016-04-25 20:46:11 +00:00
test-prune.sh lib: Add an API to list only "our" objects, fix prune to use it 2016-08-25 20:01:37 +00:00
test-pull-archive-z.sh libtest.sh: use G_TEST_SRCDIR, G_TEST_BUILDDIR to find resources 2016-03-31 18:54:13 +00:00
test-pull-c.c tests/test-pull-c: New test that runs through the pull API via C 2016-06-07 15:58:37 +00:00
test-pull-commit-only.sh tests: Use "bash strict mode" 2016-01-27 11:44:10 -05:00
test-pull-contenturl.sh tests: add tests for contenturl and mirrorlist 2016-08-31 16:52:12 +00:00
test-pull-corruption.sh tests: More TAP fixups 2016-03-03 18:00:54 -05:00
test-pull-depth.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-pull-large-metadata.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-pull-metalink.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-pull-mirror-summary.sh libtest: add has_gpgme() helper function 2016-08-31 16:52:12 +00:00
test-pull-mirrorlist.sh tests: add tests for contenturl and mirrorlist 2016-08-31 16:52:12 +00:00
test-pull-override-url.sh tests: Add a test for ostree pull --url 2016-04-22 14:27:06 +00:00
test-pull-repeated.sh tests: Add some test coverage of repeated pulls w/HTTP 500s 2016-07-08 18:38:11 +00:00
test-pull-resume.sh tests: Use "bash strict mode" 2016-01-27 11:44:10 -05:00
test-pull-subpath.sh Fix pruning of partial commits 2016-10-24 17:48:19 +00:00
test-pull-summary-sigs.sh libtest: add has_gpgme() helper function 2016-08-31 16:52:12 +00:00
test-pull-untrusted.sh test-pull-untrusted.sh: always corrupt a regular file, not a symlink 2016-03-31 14:22:06 +00:00
test-refs.sh refs: resolve conflict between local/remote repos 2016-06-23 19:52:26 +00:00
test-remote-add.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-remote-cookies.sh tests: Add test for the cookie jar handling 2016-11-05 17:34:09 +00:00
test-remote-gpg-import.sh pull: Do GPG verify commit objects when using deltas 2016-11-21 15:55:09 +00:00
test-remote-headers.sh pull: Add support for http-headers option 2016-11-16 10:04:22 +00:00
test-repo-checkout-subpath.sh tests: Port to glib-tap.mk, make make check run all of the tests 2016-03-03 08:50:19 -05:00
test-reset-nonlinear.sh tests: Use "bash strict mode" 2016-01-27 11:44:10 -05:00
test-rofiles-fuse.sh test-rofiles-fuse: Actually check out via hardlinks 2016-08-16 21:22:28 +00:00
test-rollsum-cli.c tests: rename test-rollsum to test-rollsum-cli 2015-08-24 11:07:36 +02:00
test-rollsum.c tests: Add tests for rollsum 2015-08-25 09:27:56 -04:00
test-sizes.js core: Add size information to commit metadata 2013-10-19 11:56:51 -04:00
test-switchroot.sh ostree-prepare-root: Fix running with musl 2016-09-01 20:17:58 +00:00
test-symbols.sh Rename test-abi to test-symbols, start verifying symbols are documented 2016-04-17 13:52:07 +00:00
test-sysroot-c.c lib: Add ostree_sysroot_load_if_changed() API 2016-03-03 21:56:23 -05:00
test-sysroot.js tests: Port sysroot.js away from libgsystem 2016-08-09 19:01:35 +00:00
test-varint.c Remove unnecessary #include "libgsystem.h" 2015-05-06 22:07:11 -04:00
test-xattrs.sh test-xattrs: sync how this is skipped with test-rofiles-fuse 2016-03-31 18:54:13 +00:00