packaging/ostree
1
0 Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
a6eb8bbcf6d0e0bbc5163dea1d41fff1706299d5
ostree/tests
T
History
Colin Walters 41ef2aeb38 pull: Do GPG verify commit objects when using deltas 
The fact that we weren't doing this is at best an oversight, and
for some deployment models a security vulnerability.  Having both
`gpg-verify` and `gpg-verify-summary` shows that we were intending
them to be orthogonal/independent.

Lately I've been advocating moving towards pinned TLS instead of
gpg-signed summaries, and if we follow that path, performing GPG
verification of commit objects even if using deltas is more important,
as it provides an at-rest verifiable authenticity and integrity
mechanism.

Content providers which are signing their summary files and/or using
TLS (particularly pinned TLS) for transport should treat this as a
nice-to-have.  However, for providers which are serving content over
plain HTTP and relying on GPG, this is a critical update.

Closes: https://github.com/ostreedev/ostree/issues/517

Closes: #589
Approved by: jlebon
2016-11-21 15:55:09 +00:00
..
gpg-verify-data
gpg: Regenerate test data for test-gpg-verify-result
2015-03-19 12:43:04 -04:00
gpghome
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
.gitignore
Update .gitignore
2015-08-26 12:16:29 -07:00
admin-test.sh
u-boot: Merge ostree's and systems uEnv.txt
2016-08-27 13:11:22 +00:00
archive-test.sh
tests: Use "bash strict mode"
2016-01-27 11:44:10 -05:00
basic-test.sh
ostree commit: Fix combining trees with multiple --tree=ref arguments
2016-11-17 14:45:55 +00:00
bootloader-entries-crosscheck.py
Introducing ostree-grub-generator
2016-04-04 14:19:35 +00:00
ci-build.sh
travis: run the test suite on various distributions
2016-08-05 23:58:19 +00:00
ci-Dockerfile.in
travis: run the test suite on various distributions
2016-08-05 23:58:19 +00:00
ci-install.sh
Final excision of libgsystem dependency
2016-08-09 15:36:09 +00:00
corrupt-repo-ref.js
corrupt-repo-ref.js: more aggressive file corruption
2014-10-22 20:02:06 +02:00
glib.supp
glib.supp: Suppress g_task -> thread leaks
2016-07-28 10:10:17 +00:00
grub2-entries-crosscheck.py
tests: Add a test script to cross-check loader config vs GRUB2
2015-05-28 14:21:30 -04:00
libostreetest.c
tests: Ensure mutable deployments from libostreetest
2016-06-27 20:20:21 +00:00
libostreetest.h
tests/test-pull-c: New test that runs through the pull API via C
2016-06-07 15:58:37 +00:00
libtest.sh
Force C.UTF-8 or C locale for tests
2016-10-29 18:12:42 +00:00
ostree-grub-generator
Introducing ostree-grub-generator
2016-04-04 14:19:35 +00:00
ostree.supp
tests: Modernize valgrind infrastructure
2016-06-09 21:10:35 +00:00
pre-endian-deltas-repo-big.tar.xz
deltas: Heuristically detect endianness for older deltas
2016-02-26 08:19:01 -05:00
pre-endian-deltas-repo-little.tar.xz
deltas: Heuristically detect endianness for older deltas
2016-02-26 08:19:01 -05:00
pull-test.sh
pull: Don't do deltas with --commit-metadata-only
2016-11-04 16:04:23 +00:00
readdir-rand.c
build: Fix libreaddir-rand to honor global CFLAGS
2016-06-17 14:43:44 +00:00
test-admin-deploy-2.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-admin-deploy-bootid-gc.sh
repo: Clean up staging directory for previous boot IDs
2016-05-02 18:44:44 +00:00
test-admin-deploy-clean.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-admin-deploy-etcmerge-cornercases.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-admin-deploy-grub2.sh
u-boot: Merge ostree's and systems uEnv.txt
2016-08-27 13:11:22 +00:00
test-admin-deploy-karg.sh
Filter bootloader supplied kernel cmdline options
2016-11-01 18:00:37 +00:00
test-admin-deploy-switch.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-admin-deploy-syslinux.sh
u-boot: Merge ostree's and systems uEnv.txt
2016-08-27 13:11:22 +00:00
test-admin-deploy-uboot.sh
u-boot: Merge ostree's and systems uEnv.txt
2016-08-27 13:11:22 +00:00
test-admin-instutil-set-kargs.sh
Filter bootloader supplied kernel cmdline options
2016-11-01 18:00:37 +00:00
test-admin-locking.sh
Probe for GNU parallel more accurately
2016-03-31 14:22:06 +00:00
test-admin-pull-deploy-commit.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-admin-upgrade-not-backwards.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-admin-upgrade-unconfigured.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-archivez.sh
libtest.sh: use G_TEST_SRCDIR, G_TEST_BUILDDIR to find resources
2016-03-31 18:54:13 +00:00
test-auto-summary.sh
tests: Remove extra $CMD_PREFIX from test-auto-summary.sh
2016-06-27 20:20:21 +00:00
test-basic-c.c
core: Add a function creating an archive-z2 content stream
2016-05-26 16:53:08 +00:00
test-basic-user.sh
various tests: skip if temp directory lacks xattr support
2016-03-31 14:22:06 +00:00
test-basic.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-bsdiff.c
Remove unnecessary #include "libgsystem.h"
2015-05-06 22:07:11 -04:00
test-checksum.c
static-delta: add some error handling
2016-09-09 19:06:11 +00:00
test-commit-sign.sh
lib: Add an API to GPG verify a commit given a remote
2016-11-17 11:33:41 +00:00
test-core.js
test-core.js: Add standard copyright header
2013-09-18 16:34:57 -04:00
test-corruption.sh
tests: Use "bash strict mode"
2016-01-27 11:44:10 -05:00
test-delta.sh
static-delta: add some error handling
2016-09-09 19:06:11 +00:00
test-demo-buildsystem.sh
tests: add missing ${CMD_PREFIX} before ostree
2016-04-07 12:25:24 +00:00
test-export.sh
ostree export: Add --prefix option
2016-04-19 12:28:06 +00:00
test-gpg-signed-commit.sh
libtest: add has_gpgme() helper function
2016-08-31 16:52:12 +00:00
test-gpg-verify-result.c
Final excision of libgsystem dependency
2016-08-09 15:36:09 +00:00
test-help.sh
tests: Use "bash strict mode"
2016-01-27 11:44:10 -05:00
test-keyfile-utils.c
Remove unnecessary #include "libgsystem.h"
2015-05-06 22:07:11 -04:00
test-libarchive-import.c
tests: Skip libarchive/selinux tests if in container without SELinux
2016-10-27 16:48:34 +00:00
test-libarchive.sh
tests/test-libarchive.sh: add more test
2016-05-06 14:44:55 +00:00
test-local-pull-depth.sh
tests: Use "bash strict mode"
2016-01-27 11:44:10 -05:00
test-local-pull.sh
tests: Test that local pulls do not use deltas
2016-08-10 10:54:46 +00:00
test-lzma.c
tests: fix LZMA test to really compress/decompress
2015-10-13 15:24:09 +02:00
test-mutable-tree.c
tree-wide: Remove unused variables detected by CLang
2016-10-27 17:02:01 +00:00
test-oldstyle-partial.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-ot-opt-utils.c
Remove unnecessary #include "libgsystem.h"
2015-05-06 22:07:11 -04:00
test-ot-tool-util.c
Remove unnecessary #include "libgsystem.h"
2015-05-06 22:07:11 -04:00
test-ot-unix-utils.c
Remove unnecessary #include "libgsystem.h"
2015-05-06 22:07:11 -04:00
test-parent.sh
test-parent: this test requires user xattrs
2016-04-25 20:46:11 +00:00
test-prune.sh
lib: Add an API to list only "our" objects, fix prune to use it
2016-08-25 20:01:37 +00:00
test-pull-archive-z.sh
libtest.sh: use G_TEST_SRCDIR, G_TEST_BUILDDIR to find resources
2016-03-31 18:54:13 +00:00
test-pull-c.c
tests/test-pull-c: New test that runs through the pull API via C
2016-06-07 15:58:37 +00:00
test-pull-commit-only.sh
tests: Use "bash strict mode"
2016-01-27 11:44:10 -05:00
test-pull-contenturl.sh
tests: add tests for contenturl and mirrorlist
2016-08-31 16:52:12 +00:00
test-pull-corruption.sh
tests: More TAP fixups
2016-03-03 18:00:54 -05:00
test-pull-depth.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-pull-large-metadata.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-pull-metalink.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-pull-mirror-summary.sh
libtest: add has_gpgme() helper function
2016-08-31 16:52:12 +00:00
test-pull-mirrorlist.sh
tests: add tests for contenturl and mirrorlist
2016-08-31 16:52:12 +00:00
test-pull-override-url.sh
tests: Add a test for ostree pull --url
2016-04-22 14:27:06 +00:00
test-pull-repeated.sh
tests: Add some test coverage of repeated pulls w/HTTP 500s
2016-07-08 18:38:11 +00:00
test-pull-resume.sh
tests: Use "bash strict mode"
2016-01-27 11:44:10 -05:00
test-pull-subpath.sh
Fix pruning of partial commits
2016-10-24 17:48:19 +00:00
test-pull-summary-sigs.sh
libtest: add has_gpgme() helper function
2016-08-31 16:52:12 +00:00
test-pull-untrusted.sh
test-pull-untrusted.sh: always corrupt a regular file, not a symlink
2016-03-31 14:22:06 +00:00
test-refs.sh
refs: resolve conflict between local/remote repos
2016-06-23 19:52:26 +00:00
test-remote-add.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-remote-cookies.sh
tests: Add test for the cookie jar handling
2016-11-05 17:34:09 +00:00
test-remote-gpg-import.sh
pull: Do GPG verify commit objects when using deltas
2016-11-21 15:55:09 +00:00
test-remote-headers.sh
pull: Add support for http-headers option
2016-11-16 10:04:22 +00:00
test-repo-checkout-subpath.sh
tests: Port to glib-tap.mk, make make check run all of the tests
2016-03-03 08:50:19 -05:00
test-reset-nonlinear.sh
tests: Use "bash strict mode"
2016-01-27 11:44:10 -05:00
test-rofiles-fuse.sh
test-rofiles-fuse: Actually check out via hardlinks
2016-08-16 21:22:28 +00:00
test-rollsum-cli.c
tests: rename test-rollsum to test-rollsum-cli
2015-08-24 11:07:36 +02:00
test-rollsum.c
tests: Add tests for rollsum
2015-08-25 09:27:56 -04:00
test-sizes.js
core: Add size information to commit metadata
2013-10-19 11:56:51 -04:00
test-switchroot.sh
ostree-prepare-root: Fix running with musl
2016-09-01 20:17:58 +00:00
test-symbols.sh
Rename test-abi to test-symbols, start verifying symbols are documented
2016-04-17 13:52:07 +00:00
test-sysroot-c.c
lib: Add ostree_sysroot_load_if_changed() API
2016-03-03 21:56:23 -05:00
test-sysroot.js
tests: Port sysroot.js away from libgsystem
2016-08-09 19:01:35 +00:00
test-varint.c
Remove unnecessary #include "libgsystem.h"
2015-05-06 22:07:11 -04:00
test-xattrs.sh
test-xattrs: sync how this is skipped with test-rofiles-fuse
2016-03-31 18:54:13 +00:00