Skip to main content
aboutsummaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2022-03-15Bug 578820 - Use new FileLocator.getBundleFileLocation(Bundle)HEADI20220316-1800I20220315-1800masterHannes Wellmann3-4/+6
Change-Id: I520d37dfdd94bef1c35c1d73063490331613314b Signed-off-by: Hannes Wellmann <wellmann.hannes1@gmx.net> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/191925 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2022-03-04Bug 579073 - POM and product version change for 4.24 releaseSravan Kumar Lakkimsetti1-1/+1
Change-Id: I2c093935b188cf894233f2d5eaf9dd6d92b4b77b Signed-off-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/191472
2022-02-23Bug 575541 - [pgp] P2 should not fail completely if a public key is notY20220317-0600Y20220316-0600Y20220315-0600Y20220314-1250Y20220314-0600Y20220313-0600Y20220312-0600Y20220311-0600Y20220310-0600Y20220309-0600Y20220308-0730Y20220308-0600Y20220307-0600Y20220306-0600Y20220305-0600Y20220304-0750Y20220304-0600Y20220303-0600Y20220302-0600Y20220301-0600Y20220228-0600Y20220227-0600Y20220226-0600Y20220225-0600Y20220224-0600S4_23_0_RC2aS4_23_0_RC2S4_23_0_RC1R4_23I20220308-0310I20220302-1800I20220302-0600I20220301-1800I20220301-0600I20220228-1800I20220228-0600I20220227-1800I20220227-0600I20220226-1800I20220226-0600I20220225-1800I20220223-1800R4_23_maintenanceEd Merks2-10/+79
found Treat missing keys as if no signatures are present and ensure that the transfered artifact's metadata has no signature nor key metadata exactly like an unsigned artifact. Change-Id: Id079b4da0ef9acc7d7d8c538a7d57d4aa181c65a Signed-off-by: Ed Merks <ed.merks@gmail.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/191120 Reviewed-by: Alexander Kurtakov <akurtako@redhat.com>
2022-02-10Bug 578536 - Stop pointing to http://download.eclipse.orgAlexander Kurtakov8-21/+21
Use https instead Change-Id: I5426bf06e0e9d0d932e48e775f6086ce0a9327df Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/190665 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2022-02-10Bug 572343 - Avoid deprecated org.xml.sax.helpers.XMLReaderFactoryEd Merks1-1/+1
Change-Id: I5d5ca5726fc18760032476fd53e96bb5ec180c71 Signed-off-by: Ed Merks <ed.merks@gmail.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/190649 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2022-02-02Bug 578322 - Provide a more flexible mechanism for managing and locatingY20220203-0600Y20220202-0910I20220203-0300I20220202-1800Ed Merks3-57/+140
PGP public keys Provide org.eclipse.equinox.p2.repository.spi.PGPPublicKeyService and its default registered implementation DefaultPGPPublicKeyService that supports network access to zero or more key servers with offline caching, caching of all locally added keys, and access to keys in the GPG pubring. Extend ValidationDialogServiceUI to make it aware of the agent such that it can access the PGPPublicKeyService to provide web-of-trust details to the user. Ensure that PGPPublicKeyStore properly handles multiple keys per key ID. Provide access to the target artifact descriptor via SimpleArtifactRepository.ArtifactOutputStream.getAdapter so that the special case handling of PGP properties in MirrorRequest.getDestinationDescriptor can be moved to PGPSignatureVerifier.close() to ensure that signatures and the keys used to verify them follow the artifact during a mirror request. Simplify CertificateChecker such that it expects the keys used for signature verification to be present in the artifact properties. Ensure that PGPSignatureVerifier can deal with multiple keys with the same key ID. Also verify key expiration (log a warning) and key revocation (abort the download), guarded by system properties p2.pgp.verifyExpiration and p2.pgp.verifyRevocation to disable the checks. Fix TrustPreferencePage to store keys in a file based on the fingerprint rather than the key ID and to present to the user the fingerprint rather than the key ID. Add a .options file to provide access to the debug/tracing options. Change-Id: I8c50ce886b9af175db129c7508774d00972a0432 Signed-off-by: Ed Merks <ed.merks@gmail.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/189910 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2022-01-27Bug 578394 - Add helper methods to PublisherHelper that are moreChristoph Läubrich1-11/+12
meaningful to get the bitflags form IPublisherInfo - add helper methods to PublisherHelper - adjust the test to give more meaningfull error messages - let mockito call the default methods - fix API description Change-Id: I9d4b6b7d7ab826a0ab699d9514578cfb18f74f56 Signed-off-by: Christoph Läubrich <laeubi@laeubi-soft.de> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/190041 Reviewed-by: Mickael Istria <mistria@redhat.com> Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2022-01-18Revert "Bug 575541 - [pgp] P2 should not fail completely if a public key is not"Y20220127-0600Y20220126-0600Y20220125-0600Y20220124-0600Y20220123-0600Y20220122-0600Y20220121-0600Y20220120-0600Y20220119-0600I20220126-1800I20220126-0520I20220125-1800I20220125-0320I20220124-0510I20220123-1800I20220122-1800I20220121-1800I20220120-1800I20220120-0720I20220120-0220I20220119-1800I20220119-1440I20220119-1320I20220119-0540I20220118-1800Mickael Istria2-9/+4
Later steps of verification assume all signatures got verified, so chaning this invariant can invalidate the whole process. Instead, work must be placed on providers of signatures to ensure they also provide the pgp.publicKeys to verify the signatures. This reverts commit c193e5197535846f3f546f0e9ce210660c190484. Change-Id: I1dc2cacd044f1ab878001ffef29167867d63c0fe Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/189738 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2022-01-13Bug 575541 - [pgp] P2 should not fail completely if a public key is notY20220114-0600Y20220113-0900I20220114-1800I20220113-1800Ed Merks2-4/+9
found Ignore signatures for which no corresponding key can be found. If all signatures are ignored, the artifact will be effectively treated the same as an unsigned artifact. In the unsigned artifact details presented to the user, include the key ID(s) of the ignored signature(s). Update the test to expect the artifact request status to be OK. Change-Id: If433a81144d2eafed51e12d38396e9ffa5b09787 Signed-off-by: Ed Merks <ed.merks@gmail.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/189588 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2022-01-11Bug 578161 - The CertificateChecker uses the wrong profileEd Merks1-1/+4
Provide support to be able to set the profile used by the CertificateChecker, much like it supports adding the artifacts descriptor to add. Use this in the CheckTrust phase so that the CertificateChecker operates on the profile being provisioned. Modify downstream uses of the CertificateChecker to set the appropriate profile for that usage context. Change-Id: Ie2da8e1b137f8540ce40f8dd737ffc938a47194d Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/189475 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Tested-by: Ed Merks <ed.merks@gmail.com> Reviewed-by: Ed Merks <ed.merks@gmail.com> Reviewed-by: Mickael Istria <mistria@redhat.com>
2022-01-10Bug 577248 - Bundles can contribute trusted PGP keys as extensionsY20220111-0600I20220111-0450I20220110-1800Mickael Istria3-7/+71
Change-Id: I8ea41d0829f2ab80a0edfcd4fe4a9892b80432b4 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/189270 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-12-20Bug 577863 - Allow director app to install PGP-signed artifactY20220107-0600Y20220106-0600Y20220105-0600Y20220104-0600Y20220103-0600Y20220102-0600Y20220101-0600Y20211231-0600Y20211230-0600Y20211229-0600Y20211228-0600Y20211227-0600Y20211224-0600Y20211223-0600Y20211222-1030Y20211222-0840Y20211222-0830Y20211222-0600Y20211221-0600S4_23_0_M1I20220107-1800I20220106-0000I20220105-1800I20220105-0600I20220104-1800I20220104-0940I20220104-0600I20220103-1800I20220103-0600I20220102-1800I20220102-0600I20220101-1800I20220101-1140I20220101-0600I20211231-1800I20211230-1800I20211229-1800I20211228-1800I20211227-1800I20211226-1800I20211225-1800I20211224-1800I20211223-1800I20211222-1800I20211221-1800I20211221-0620I20211220-1820Mickael Istria1-0/+20
Override prompt action for PGP keys as well. Change-Id: Iad5ec56724fc8eff6c64a2952ad79d5202306f53 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188954 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-12-13Bug 577769 - Switch to ecf.httpclient5Y20211214-0600Y20211213-0600I20211213-1800I20211213-0440Alexander Kurtakov2-2/+4
Change-Id: Iab1bba15480b90d8b2c2bf69c6e4e8aed1b0046f Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188775
2021-12-10Bug 577552 - Switch tests to mockitoY20211212-0600Y20211211-0600Y20211210-0600I20211212-1800I20211211-1800I20211210-1800I20211210-1050I20211210-0600Alexander Kurtakov21-563/+529
Switch p2 tests to mockito from easymock. Improve asserts to be slightly more readable and give better failure message. Change-Id: I3b975983a5c975dc03814a73bdbf0ce9ed652a1f Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188640 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-12-09Fix some CVE warnings in testsAlexander Kurtakov2-7/+13
Output like "!MESSAGE Using unsafe http transport to retrieve http://eclipse.org/equinox/foobar/abcdefg, see CVE-2021-41033. Consider using https instead." just pollutes the log. Use https:// despite the fact it's testing non-existing content. Change-Id: Id221aed3864b3a909f00b264573b8f1757b12609 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188667 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-12-05Fix testMetadataCachingLocalRepoI20211208-1800I20211207-1800I20211206-1800I20211205-1800Mickael Istria1-8/+5
As content.xml.xz is now used, and then XZedSimpleMetadataRepository, the cached file path differs and test needs to be updated. Change-Id: I0b56179e371acf95aefbc34fb1256cb46d74227e Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188554 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-12-04Improve asserts in MetadataRepositoryManagerTestI20211204-1800Alexander Kurtakov1-3/+5
Change-Id: Ia6c005550909c1119f9e93bc4a3f915e4a4a56ab Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188532
2021-12-03Bug 577552 - Switch tests to mockitoI20211204-0500I20211203-1800Alexander Kurtakov3-54/+43
First portion of p2 tests. Change-Id: I87dc952dfdceea329f64e8176b3672b11ea62f37 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188436
2021-12-01Bug 577522 - Update to newer easymockI20211203-1010I20211202-0900I20211202-0440I20211201-1950I20211201-1800Mickael Istria7-117/+25
Change-Id: Ibbf5447233a02578244c274e855f2a088b5f9d92 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188359 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-11-30Bug 577522 - Update test framework dependenciesI20211130-1800Mickael Istria1-1/+1
Constrain version for easymock until newer versions are supported. Change-Id: Iab77c8f106fbd9c5ee1853ca4d1923c01bfca9c8 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188355 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-11-30Version bump for 4.23 streamI20211130-1100I20211130-1000Alexander Kurtakov2-2/+2
Change-Id: Id29fc774427d27bfaf227acf820467db496e63b4 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188303 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-11-29Bug 577193 - Support addition/removal of trusted PGP keysI20211129-1800Mickael Istria1-1/+1
Change-Id: I429645e308d805a4511828dfab18f7864fc01e1f Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/187562 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-11-26Bug 577442 - POM and product version change for 4.23 releaseSravan Kumar Lakkimsetti1-1/+1
Change-Id: Iafdab184aa8c580142b49ade671225e778135829 Signed-off-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/188131
2021-11-03Bug 576705 - Disable pgp.trustedPublicKeys from IUsI20211103-1800Mickael Istria1-39/+36
Only stick to trusted keys defined in profile as it's not safe to import trusted keys from installed IUs because metadata is an attack vector (Bug 577029) Change-Id: I3d4c97b69d7b85a8f5aceed0c50383975f7f6f6a Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/187264 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-10-21Bug 576705 - Declare some PGP keys as trusted in p2 metadataMickael Istria3-4/+154
This allows to build a product/profile or install metadata that define a pgp.trustedPublicKeys property containing public keys to trust. After verifying that signatures are correct when installing an artifact (was bug 570907), deciding of whether to consider an artifact as trusted or not will check whether one of the signing keys is already installed trusted. If no signing key is trusted, user is prompted for approval in order to continue installation, as already implemented with bug 572816 Change-Id: Ie17ecca23de8186845ec943e63abb4dd0d141836 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/186727 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-10-18Bug 576506 - [win32] 2021-09 cannot be upgraded to 2021-12I20211020-1800I20211019-1800I20211018-1800Ed Merks1-1/+6
After a move to backup, check if the launcher executable is being moved and if so check if it has actually be removed properly. On Windows a running executable cannot be deleted and cannot be moved to a different drive so we must move (rename) it in place. Change-Id: I06a7cbb65c50ec61111d4969bc352243dad4da2f Signed-off-by: Ed Merks <ed.merks@gmail.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/186477 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-10-13Fix p2 tests to not use http://download.eclipse.orgI20211017-1800I20211016-1800I20211015-1800I20211014-1800I20211013-1800Alexander Kurtakov19-92/+143
Fixes many warnings printed during running p2 tests about unsecure p2 site location. Change-Id: I5488712fd23044a9af992c8751a687f7c42e3c43 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/186419 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-10-13Stop using javacWarnings in build.propertiesAlexander Kurtakov1-1/+0
It's one way too many in addition to .settings/ and pom.xml capable of altering the ecj warnings. Change-Id: I4d8db214c2ec011ed7411a89e70794d46bc8be20 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/186408 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-10-07Give real message when status is not OK in DownloadManagerTestI20211011-1800I20211010-1800I20211009-1800I20211008-1800I20211007-1800Alexander Kurtakov1-5/+8
Current "OK" message is totally meaningless Change-Id: Ifd104fa3de7234d1a4cd9580e143f69acb709a22 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/186262 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-10-06Bug 576429 - Log warning when none or only unsafe checksumMickael Istria2-7/+8
algorithms are used for an artifact Change-Id: Id82dff5c2a957e19cab1c8caaa83febac6d13f74 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/186138 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-09-15Bug 575991 - MetadataRepositoryManagerTest.testMetadataCachingRemoteRepoS4_22_0_M1I20211005-1800I20211004-2030I20211003-1800I20211002-1800I20211002-0220I20211001-1800I20210929-1800I20210929-0600I20210928-1800I20210928-0600I20210927-1800I20210927-0600I20210926-1800I20210926-0600I20210925-1800I20210925-0600I20210924-1800I20210924-0200I20210923-1800I20210922-1800I20210921-1800I20210920-1800I20210919-1800I20210919-0120I20210918-1800I20210917-1800I20210917-0000I20210916-2150I20210916-1800I20210915-1800Andrey Loskutov4-5/+6
fails Cache directory also change as the new repo uses content.xml.xz, which goes through XZedSimpleMetadataRepositoryFactory, which calls different methods of CacheManager resulting in different directories. + use HTTPS where necessary Change-Id: I5410ffc8e495258fb2dcf83fdf493d16b4cc9512 Signed-off-by: Andrey Loskutov <loskutov@gmx.de> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/185450 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-09-06Bug 575782 - POM and product version change for 4.22 releaseI20210906-1000I20210906-0820I20210906-0610Kit Lo1-1/+1
Change-Id: I5e21752f8d0b6176f4ce550961b3ed0a8a611f8b Signed-off-by: Kit Lo <kitlo@us.ibm.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/185022 Tested-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com> Reviewed-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com>
2021-08-24Bug 575470 - JREActionTest.testDefaultJavaProfile fails with Java 16Y20210826-0800Y20210824-0940Y20210824-0840S4_21_0_RC1I20210829-1800I20210829-0600I20210828-1800I20210828-0600I20210827-1800I20210825-1800I20210825-0600I20210824-1800I20210824-0600Alexander Kurtakov1-1/+1
Reduce the expected Java 11 packages to 250 or more as on Java 16 incubator modules like (java.package:String=jdk.incubator.foreign; version:OmniVersion=0.0.0, java.package; java.package:String=jdk.incubator.vector; version:OmniVersion=0.0.0, java.package;) are no longer exposed by default. Change-Id: Ifbe6f55c711bdd52867fd66c9e3bdf17014e75d4 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/184349
2021-08-20Bug 575479 - only normalize if not already contains line breaksY20210822-0440I20210823-1800I20210823-0600I20210822-1800I20210822-0600I20210821-1800I20210821-0600I20210820-1800Christoph Läubrich6-0/+98
Change-Id: Id64a16886b9a0d66a9ae98748dedb0b9b4d7981e Signed-off-by: Christoph Läubrich <laeubi@laeubi-soft.de> Also-By: Mickael Istria <mistria@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/184213 Reviewed-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-by: Mickael Istria <mistria@redhat.com> Reviewed-by: Thomas Watson <tjwatson@us.ibm.com> Tested-by: Mickael Istria <mistria@redhat.com>
2021-08-20Bug 575470 - JREActionTest.testDefaultJavaProfile fails with Java 16Alexander Kurtakov2-32/+42
Convert to JUnit4 and use direct assert methods for better reporting. Change-Id: I2b3eb4849524e64e19416202ae9a419d28f4576a Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/184190
2021-06-30Bug 537757 - Convert BackupStore to java.nio.fileI20210630-1800Todor Boev6-438/+302
- Cleanup to the path conversion methods - Cleaned up the backup store root handling - Using UUID for the unique part of the backup dir name - Convert to Java 7 file API using only File.move() for the most critical operation. - Improved logging - Changed BackupStore to SimpleBackupStore - Fixed the backup tests to use Java 7 Signed-off-by: Todor Boev <rinsvind@gmail.com> Change-Id: I16f3496bf9accacdb2932b0a2a14a96d3581d37b Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/182585 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-06-15Bug 572816 - p2 strategy to trust PGP signaturesMickael Istria6-11/+92
This makes users declare whether PGP keys are trusted or not at installation, and to skip installation if one artifact has no signature/signer being trusted. * Propagate the pgp.signatures on local artifact description, so it's usable for CheckTrust * Add support in the Trust model for PGP keys * Add (limited) support for PGP approval in TrustCertificationDialog * Skip installation is PGP Keys are not trusted (similarly to certificates). Current limitations: * Dialog doesn't show whether a subset of PGP Keys is sufficient to complete installation (eg 1 artifact may have mulitple signature, only 1 is necessary to be approved for installation to complete, dialog doesn't show that and gives impression all keys need to be approved) * The dialog doesn't give any form of hint about how to decide whether to trust a key or net (eg check PGP key registries and so on); but it's also the case for certificates apparently... Change-Id: I65f698c7412027fedefc28ddfaa344caa6bfecdc # Conflicts: # bundles/org.eclipse.equinox.p2.ui/src/org/eclipse/equinox/internal/p2/ui/dialogs/TrustCertificateDialog.java Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/179275 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-06-15Bug 573965 - Version bumps for 4.21 streamY20210615-0910Y20210615-0900Alexander Kurtakov2-2/+2
Change-Id: I4c488f3e4a8fefb3592b3006d8f49bcfadac53c7 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/181973 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-06-10Bug 572099 - testBug242346 fail since I20210316-1800Vikas Chandra2-3/+7
- Switched default profile used by JREAction to Java 11. - If no JRE profile given, JREAction generates a temporary profile based on default profile version and containing packages observed by the currently running JVM. - Updated JREActionTest to Java 11 expectations: 228 system packages and 23 capabilities Change-Id: Iaa8cbd62b8d70576ee55ade49e9a416799dfed5d Signed-off-by: Vikas Chandra <Vikas.Chandra@in.ibm.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/181182 Tested-by: Equinox Bot <equinox-bot@eclipse.org> Reviewed-by: Andrey Loskutov <loskutov@gmx.de>
2021-06-04Bug 573960 - POM and product version change for 4.21 releaseSravan Kumar Lakkimsetti1-1/+1
Change-Id: Icdb9ea67799b20308f4143439a953c0e86e91b07 Signed-off-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/181361
2021-05-05Bug 572034 - update corrupted test jar to modern digest algorithmI20210506-1800I20210505-1800Thomas Watson4-4/+4
Old corrupted test JAR was using MD5 digest algorithm which is no longer supported with the Java JAR API. Updating corrupted test JAR with latest signed JAR for equinox.common. Change-Id: Ibe5c3a901de016c8636c159697941b3e32dad9de Signed-off-by: Thomas Watson <tjwatson@us.ibm.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/180251 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-04-18Revert "Revert "Bug 570907 - A processingStep to verify PGP signaturesMickael Istria38-2/+1102
in artifact"" This reverts commit 6b5269b19fefdfc34c819212c5fe6c0f838e349f. This adds the necessary bouncycastle bundles to the p2 feature Change-Id: I4b5f8f761e4e683d35fef2ea0ce00bc3d3b34fa2 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/179465 Tested-by: Mickael Istria <mistria@redhat.com> Reviewed-by: Mickael Istria <mistria@redhat.com>
2021-04-18Revert "Bug 570907 - A processingStep to verify PGP signatures in artifact"I20210417-2330Sravan Kumar Lakkimsetti38-1102/+2
This reverts commit d92c82f87cef36cc6840b14b6d8e85be55f9f335. Reason for revert: Build failure in I20210417-1800 Change-Id: Ieeb68052b0d9aa73f564d8eeb7f97f33bda6b6e8 Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/179035 Tested-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com> Reviewed-by: Sravan Kumar Lakkimsetti <sravankumarl@in.ibm.com>
2021-04-16Bug 570907 - A processingStep to verify PGP signatures in artifactI20210416-1800Mickael Istria38-2/+1102
metadata Change-Id: I2300bce7861e59f5851c81a5b0204da9bfa111d0 Signed-off-by: Mickael Istria <mistria@redhat.com> Reviewed-on: https://git.eclipse.org/r/c/equinox/rt.equinox.p2/+/175851 Tested-by: Equinox Bot <equinox-bot@eclipse.org>
2021-03-25Bug 572043 - Deprecate pack200 support for removalI20210325-1800Alexander Kurtakov2-5/+3
Hopefully last warnings patch. Change-Id: Ibbbb2f086826d0c19423bfd0de1569edeb0270a8 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2021-03-23Bug 572043 - Deprecate pack200 support for removalAlexander Kurtakov4-0/+4
Further silencing of removal warnings in our codebase. Change-Id: Ibdbac953d9ebe291d87992e4f5560587437faeb9 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2021-03-22Bug 572043 - Deprecate pack200 support for removalAlexander Kurtakov10-6/+39
Silence removal warnings in the main build. Deprecated few extra methods as spotted in the process. Change-Id: Iaa40ac2a1a088dec9ef12799cf53aa22f750cb6c Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2021-03-20Version bump for 4.20.I20210321-1800I20210321-0340I20210320-1800I20210320-0650Alexander Kurtakov2-2/+2
Change-Id: I0e87ce7cbf9ffd08287555d9fd9bda4953f5fee0 Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>
2021-03-18Break loop early in AbsolutePlanTestI20210319-0030I20210318-2320I20210318-2100Lars Vogel1-0/+1
Done with JDT Cleanup exit loop early Change-Id: I8290dcbc44fa255fd13c23df0dd4cf1207eeb0f2 Signed-off-by: Lars Vogel <Lars.Vogel@vogella.com>
2021-03-05Bug 571689 - POM and product version change for 4.20 releaseI20210305-0820Alexander Kurtakov1-1/+1
Change-Id: I3adc2961dfcfb7cc647efdc9655303ab12f5836f Signed-off-by: Alexander Kurtakov <akurtako@redhat.com>

Back to the top