Skip to main content
aboutsummaryrefslogtreecommitdiffstats
path: root/bundles/org.eclipse.equinox.p2.artifact.repository/META-INF
AgeCommit message (Collapse)AuthorFilesLines
2022-01-15Bug 578024 - Improve the TrustCertificateDialogEd Merks1-1/+1
Provide support for computing the verified certifications of all known keys and use this to display the web-of-trust information in the trust certificate dialog. Also support "Copy Fingerprint" for PGP keys in the certificate chain viewer. Change-Id: I2039b585911def54cf888d91ab5bc6ee8606ddb2 Signed-off-by: Ed Merks <ed.merks@gmail.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/189634 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-11-29Bug 577193 - Support addition/removal of trusted PGP keysI20211129-1800Mickael Istria1-2/+2
Change-Id: I429645e308d805a4511828dfab18f7864fc01e1f Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/187562 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-09-09Version bump for 4.22 streamAlexander Kurtakov1-1/+1
Needed by https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/155046 Change-Id: I18c2afb91fe9a209050d829ba37332e4ae174add Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/185253 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-06-15Bug 572816 - p2 strategy to trust PGP signaturesMickael Istria1-2/+2
This makes users declare whether PGP keys are trusted or not at installation, and to skip installation if one artifact has no signature/signer being trusted. * Propagate the pgp.signatures on local artifact description, so it's usable for CheckTrust * Add support in the Trust model for PGP keys * Add (limited) support for PGP approval in TrustCertificationDialog * Skip installation is PGP Keys are not trusted (similarly to certificates). Current limitations: * Dialog doesn't show whether a subset of PGP Keys is sufficient to complete installation (eg 1 artifact may have mulitple signature, only 1 is necessary to be approved for installation to complete, dialog doesn't show that and gives impression all keys need to be approved) * The dialog doesn't give any form of hint about how to decide whether to trust a key or net (eg check PGP key registries and so on); but it's also the case for certificates apparently... Change-Id: I65f698c7412027fedefc28ddfaa344caa6bfecdc # Conflicts: # bundles/org.eclipse.equinox.p2.ui/src/org/eclipse/equinox/internal/p2/ui/dialogs/TrustCertificateDialog.java Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/179275 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-04-18Revert "Revert "Bug 570907 - A processingStep to verify PGP signaturesMickael Istria1-0/+9
in artifact"" This reverts commit 6b5269b19fefdfc34c819212c5fe6c0f838e349f. This adds the necessary bouncycastle bundles to the p2 feature Change-Id: I4b5f8f761e4e683d35fef2ea0ce00bc3d3b34fa2 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/179465 Tested-by: Mickael Istria <mistria@redhat.com> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-04-18Revert "Bug 570907 - A processingStep to verify PGP signatures in artifact"I20210417-2330Sravan Kumar Lakkimsetti1-9/+0
This reverts commit d92c82f87cef36cc6840b14b6d8e85be55f9f335. Reason for revert: Build failure in I20210417-1800 Change-Id: Ieeb68052b0d9aa73f564d8eeb7f97f33bda6b6e8 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/179035 Tested-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com> Reviewed-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com>
2021-04-16Bug 570907 - A processingStep to verify PGP signatures in artifactI20210416-1800Mickael Istria1-0/+9
metadata Change-Id: I2300bce7861e59f5851c81a5b0204da9bfa111d0 Signed-off-by: Mickael Istria <mistria@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/175851 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-03-15Bug 571923 - Move p2 to Java 11 BREEI20210315-2050Alexander Kurtakov1-1/+1
Convert more bundles. Change-Id: I976ed48dbdcf6584ad0790853443299d56ec5e69 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2021-01-29Bug 570766 - Allow mapper in artifacts.xml to use all artifact propertieI20210129-1800Mickael Istria1-2/+2
Change-Id: I03ae5eb64791ff2e2a9be47de82fa7c58448adbc Signed-off-by: Mickael Istria <mistria@redhat.com>
2020-04-06Bug 536106 - pack200 is being deprecated in java 11 and removed fromI20200408-0600I20200407-1800I20200407-1210I20200407-0120I20200406-1800Alexander Kurtakov1-1/+1
java 14 Fix Pack200ProcessorStep to still return OK if it's not enabled due to missing pack200 utilities. Disable some tests that rely on packed content. Adjust others as on Java 14 packed content is not downloaded thus results differ. Change-Id: I65f16d4ebbc41e20ed7d2486ea9109fffa439779 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2019-12-11Version updates for 4.15 streamKarsten Thoms1-1/+1
Required for - https://git.eclipse.org/r/#/c/153080/ - https://git.eclipse.org/r/#/c/153081/ - https://git.eclipse.org/r/#/c/153082/ - https://git.eclipse.org/r/#/c/153083/ Change-Id: I37e7e2612bfd04b0f05f3e705efbcb726426c8f9 Signed-off-by: Karsten Thoms <karsten.thoms@itemis.de>
2019-09-16Version bump for 4.14Karsten Thoms1-1/+1
- org.eclipse.equinox.p2.sdk - org.eclipse.equinox.p2.rcp.feature - org.eclipse.equinox.p2.artifact.repository - org.eclipse.equinox.p2.user.ui - org.eclipse.equinox.p2.core.feature - org.eclipse.equinox.p2.extras.feature Required for - https://git.eclipse.org/r/#/c/148397 - https://git.eclipse.org/r/#/c/148462 - https://git.eclipse.org/r/#/c/148977/ Change-Id: I18b03a58fa21f772d603335f0c02de7320d29862 Signed-off-by: Karsten Thoms <karsten.thoms@itemis.de>
2019-06-11Move away of old non-managed _core jdt formatter.Alexander Kurtakov1-1/+1
It fails when formatting new constructs like try-with-resources. Move to the built-in Eclipse profile. Change-Id: Id71d9e38ba12c623cded4a067e9e6a69da991ea4 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2019-03-30Bug 545183 - When publishing, do not calculate MD5 twiceI20190403-1800I20190402-1800I20190401-1800I20190331-1800I20190330-1800Mykola Nikishov1-1/+1
Since [1], MD5 is contributed via artifactChecksums extension point and ChecksumProducer's produce(File, String) method should not explicitly request its generation. [1] e4b77e59e038d101733b37be47941c899a88d7d3 Change-Id: Ie1a5adb66e7af15d02710c3f586f462f31f89d8d Signed-off-by: Mykola Nikishov <mn@mn.com.ua>
2018-12-20Bug 536282 - Check whether processing step is availableI20181220-1800Mykola Nikishov1-1/+1
Extend ProcessingStep with isEnabled() method that checks if step's dependencies are available. ProcessingStepHandler's canProcess will ensure that all required processing steps are enabled and skip this check for optional processing steps. MirrorRequest's perform(IArtifactRepository, IProgressMonitor) method will skip optimized artifact if it can't be processed and chose canonical one. Pack200ProcessorStep's isEnabled() checks if 'unpack200' CLI utility is available by calling UnpackStep's canUnpack(). Change-Id: I048db3b833f6e0881cca06ad48be37ad6d17a0c9 Signed-off-by: Mykola Nikishov <mn@mn.com.ua>
2018-10-04Bug 536326 - Bump versionMickael Istria1-1/+1
Change-Id: Icf815e4895dfdae0345b3a2cd19cd1a35d051929 Signed-off-by: Mickael Istria <mistria@redhat.com>
2018-06-07Bug 535318 - Update versions for next releaseAlexander Kurtakov1-1/+1
Prep for update license to EPL-2.0 Change-Id: I2fe45c006012a83c207821a2d41abaa248df3802 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2018-03-01Bug 423715 - Support multiple algorithms for artifact checksumsI20180301-2000Mykola Nikishov1-0/+1
Developer of p2-based software should be able to check integrity of artifact checksums using any MessageDigest implementation available, at his own discretion, without ever touching p2 internals. For the purpose of this bug, limit enabled checksum algorithms to: - MD5 (legacy one, deprecated now, for backward compatibility only) - SHA-256 (more collision-resistant than MD5) See artifactChecksums.exsd for more details. First, encode ID of the checksum algorithm into the name of the property itself so that artifact descriptor now may look like: <artifact classifier='binary' id='testKeyId' version='1.2.3'> <properties size='6'> <property name='download.md5' value='b3788632488d48b850255acf68669651'/> <property name='artifact.md5' value='b3788632488d48b850255acf68669651'/> <property name='download.checksum.sha-256' value='d594816b995d1689c2dfc97dc244859abe6bdb9ebeb4b396e401afd85a97ee16'/> <property name='download.checksum.whirlpool' value='e4f3ece3d3f289cc2686a68f0b1b5a2d03da3a8ccdc3cd6d03209e4c789af724c8fa915bb890079e1abe78df44875cec132885dd6ae1176eed7938dfb3c7b551'/> <property name='artifact.checksum.sha-256' value='d594816b995d1689c2dfc97dc244859abe6bdb9ebeb4b396e401afd85a97ee16'/> <property name='artifact.checksum.tiger' value='462a72a1a593b9e2de8721b8d79335fd03e974f2e2e1f35a'/> </properties> </artifact> Prefix helps to avoid conflicts with other, not checksum-related, properties. To find checksums of specific type, we need all properties with prefix 'artifact.checksum.', Extracting checksum id from the name of the property is also trivial. Store these prefixes in IArtifactDescriptor's DOWNLOAD_CHECKSUM and ARTIFACT_CHECKSUM. ChecksumUtilities provides internal API to deal with properties. Second, map ID of checksum algorithm to the name of MessageDigest implementation with a contribution to a new extension point org.eclipse.equinox.p2.artifact.repository.artifactChecksums: <extension point="org.eclipse.equinox.p2.artifact.repository.artifactChecksums"> <artifactChecksum algorithm="SHA-256" id="sha-256" ... /> </extension> Number of actual checksums in artifact descriptor depends on the configuration of the application that created such descriptor because p2 will: - handle MD5 checksums as usual, preserving backward compatibility - calculate other checksums using extensions that contribute to artifactChecksums extension point Last, we use id of specific checksum to get MessageDigest instance with getInstance(String). There is a number of standalone applications (like MirrorApplication) and Ant tasks (like ValidateTask) that allow user to chose specific comparator by id and ArtifactComparatorFactory is responsible for instantiating it. Legacy MD5 comparator requires no special configuration while the new ArtifactChecksumComparator is more generic and needs some parameters to instantiate. ArtifactComparatorFactory handles this by accepting fake comparator id - concatenated ArtifactChecksumComparator's id and checksum algorithm id. In other words, to compare artifacts using SHA-256 algorithm use 'org.eclipse.equinox.artifact.comparator.checksum.sha-256' as comparator id. We generate, consume and compare artifact checksums using all enabled algorithms. Ideally, configuration options should provide more control for both repository publisher and p2 client like: - a priority (compare with SHA-512 first, then SHA-256 and, finally, MD5) - skip specific checksum (do not use MD5 even if provided) - mandatory checksum (require Whirlpool and it's an error if its not available) While I have no good solution for this right now, there are some configuration options provided. Also, number of new enabled checksum algorithms is limited to SHA-256 only (more checksums = more reasons to fail = more reasons to disable). To turn checksum verification off completely: - for p2 client, use property 'eclipse.p2.checksums.disable' (see SimpleArtifactRepository.CHECKSUMS_ENABLED constant). - for p2 publisher, the old PublisherInfo's setArtifactOptions(int) and IPublisherInfo.A_NO_MD5 still could be used. To disable MD5 checksums only, existing properties 'eclipse.p2.MD5Check' and 'eclipse.p2.MD5ArtifactCheck' still can be used. Change-Id: Iacd267e13d5d096694001d34cafbaea5451e7157 Signed-off-by: Mykola Nikishov <mn@mn.com.ua>
2018-01-03Bug 529078 - Add header Automatic-Module-Name for Java 9I20180104-2000I20180104-0030I20180103-2000Karsten Thoms1-0/+1
Increment versions for Eclipse 4.8 Photon Change-Id: I678108c1f5afa895be26040184cd8c21e83a8a0e Signed-off-by: Karsten Thoms <karsten.thoms@itemis.de>
2017-09-04Bug 521827 - Move artifact.repository bundle to Java 8 Alexander Kurtakov1-2/+2
* Bump BREE. * Bump minor version for the BREE change. * Enable more warnings. * Add missing Override annotations. * Remove redundant type declarations. * Try-with-resources. * Lambda conversion. Change-Id: I198af985183d1429fb18ed3198f238f42afd0c25 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2017-05-11Bug 516457 - Many of plug-ins need a version increaseAlexander Kurtakov1-1/+1
Update the following (only service bump): org.eclipse.equinox.p2.artifact.repository org.eclipse.equinox.p2.console org.eclipse.equinox.p2.metadata org.eclipse.equinox.p2.metadata.repository org.eclipse.equinox.p2.operations Change-Id: Ic0eff63a2836ab7068e2c6dc3bef1648c764843a Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2016-01-02Update bundles versionsPascal Rapicault1-1/+1
Change-Id: I479ee5a8b507090ce496e7b334e0055e027896fe
2015-05-13Bug 464614 Use XZ as compression formats of metadata filesI20150514-2000I20150514-1000I20150513-2000Pascal Rapicault1-1/+2
This part takes care of the artifacts.xml file. Change-Id: If18777d4057ec273d219c4aa2b959fa3093a9a7f
2015-04-23Update versions for MarsThomas Watson1-1/+1
2015-02-24Bug 460627 - Fix compiler problems from generified IAdaptable#getAdapterAlexander Kurtakov1-1/+1
Generify where needed and bump the min version requirement for o.e.core.runtime and o.e.equinox.common to ensure that generified dependency will be used. Change-Id: I3e177a3c8384b5aaabe4c77c949e9802e53923b1 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2013-12-09bug 418662: Get rid of compile warnings in official build -Krzysztof Daniel1-1/+2
org.eclipse.equinox.p2.publisher.eclipse Change-Id: I02f9f6367913e01988f5e65452d2c52c7898a5a7 Signed-off-by: Krzysztof Daniel <kdaniel@redhat.com>
2013-07-11Increment bundle version and tidyI20130723-0800I20130717-1600I20130716-0800John Arthorne1-1/+1
2013-01-20Revert "Remove non existant dependency"v20130120-161028Pascal Rapicault1-1/+2
This reverts commit 77ba1dec8f5448479ca50611e3ab8af509939304.
2013-01-19Remove non existant dependencyPascal Rapicault1-2/+1
2012-11-14Updated manifest for bundles that use Java 5 class library methodsv20121114-150134John Arthorne1-3/+1
2012-01-12316328 engine should be more verbose while performing an installationv20120112-1825Mengxin Zhu1-1/+2
1. the event of phase starts and finishes 2. download events, including how many artifacts to be downloaded, how many artifacts to be downloaded from a specific repository, the mirror request(download) result, download progress event(a wrapper of ProgressStatistics) 3. the events before/after configuring/unconfiguring an IU Signed-off-by: Mengxin Zhu <kane.zhu@windriver.com>
2011-06-29Increment service segment by 100 for bug fix in Juno streamJohn Arthorne1-1/+1
2011-04-13Bug 342661 - compile warnings in official buildsDJ Houghton1-1/+2
2011-03-05NEW - bug 301903: Consider a file level lock during batch executionv20110305-0130Ian Bull1-0/+1
https://bugs.eclipse.org/bugs/show_bug.cgi?id=301903
2011-02-28Bug 336246 - Remove the metadata generatorPascal Rapicault1-3/+1
2010-08-26Bug 244628 - [api] [repository] artifact repos do not support bulk removeDJ Houghton1-1/+1
2010-03-30Cleanup manifestPascal Rapicault1-4/+0
2010-03-24bug 306942 - increment versionAndrew Niefer1-1/+1
2010-03-02Move metadata factory to a public package and change signature of ↵Pascal Rapicault1-1/+0
IUpdateDescriptor
2010-02-24Fix up import versionsPascal Rapicault1-13/+13
2010-01-13Merging api branch back to HEADv20100113Pascal Rapicault1-33/+21
2009-10-20Bug 290207 - Support multiple p2 instances in a single VMJohn Arthorne1-0/+3
2009-10-16bug 292419 - removing p2.selfhosting bundleAndrew Niefer1-1/+1
2009-09-23Bug 290206 - Inject event bus into repository managersJohn Arthorne1-0/+2
2009-08-24Cleanup bundle manifest imports.DJ Houghton1-9/+2
2009-06-17Bug 275965 Workspace errors after plugin importJohn Arthorne1-1/+0
2009-04-29Bug 274071 Request for friend status for some PDE packagesJohn Arthorne1-1/+2
2009-04-09Bug 227633 - [update] Support pack200 archives on update sitesPascal Rapicault1-1/+2
2009-03-30Bug 216278 - [prov] ECFTransport and ECFMetadataTransport should be mergedPascal Rapicault1-2/+5
2009-02-22Add a hack to force ecf.provider.filetransfer to be startedPascal Rapicault1-0/+1

Back to the top