aboutsummaryrefslogtreecommitdiff
path: root/etc/pkg
Commit message (Collapse)AuthorAgeFilesLines
* Give hint on how to disable the default repository.Bryan Drewery2014-03-301-0/+8
| | | | | | | | Discussed with: bapt MFC after: instantly (preparing EN) Notes: svn path=/head/; revision=263937
* Enabled should be a boolean, not a stringBaptiste Daroussin2013-11-161-1/+1
| | | | | | | MFC after: 2 days Notes: svn path=/head/; revision=258227
* Use proper capitalization for FreeBSD.orgBryan Drewery2013-11-051-1/+1
| | | | | | | | Approved by: bapt MFC after: 2 days Notes: svn path=/head/; revision=257668
* Enable fingerprint checking as the currently knownBryan Drewery2013-11-051-1/+1
| | | | | | | | | | fingerprint has an uploaded signature on all mirrors. Approved by: bapt MFC after: 2 days Notes: svn path=/head/; revision=257667
* Move /etc/keys to /usr/share/keys where users are less likely to modify them.Bryan Drewery2013-10-291-1/+1
| | | | | | | | Requested by: secteam (cperciva, des) Approved by: bapt Notes: svn path=/head/; revision=257344
* Disable fingerprint checking for now as the pkg repository mirrors willBryan Drewery2013-10-261-1/+1
| | | | | | | | | not receive the signature until later this week. Approved by: bapt Notes: svn path=/head/; revision=257159
* Support checking signature for pkg bootstrap.Bryan Drewery2013-10-261-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the pkg.conf is configured with SIGNATURE_TYPE: FINGERPRINTS, and FINGERPRINTS: /etc/keys/pkg then a pkg.sig file is fetched along with pkg.txz. The signature contains the signature provided by the signing server, and the public key. The .sig is the exact output from the signing server in the following format: SIGNATURE <openssl signed> CERT <rsa public key> END The signature is verified with the following logic: - If the .sig file is missing, it fails. - If the .sig doesn't validate, it fails. - If the public key in the .sig is not in the known trusted fingerprints, it fails. - If the public key is in the revoked key list, it fails. Approved by: bapt MFC after: 2 days Discussed by: bapt with des, jonathan, gavin Notes: svn path=/head/; revision=257147
* Add support for reading configuration files from /etc/pkg.Bryan Drewery2013-10-262-0/+16
For now only /etc/pkg/FreeBSD.conf is supported. Its style is: Repo: { URL: "...", MIRROR_TYPE: "...", ... } The configuration will be read from /usr/local/etc/pkg.conf if exists, otherwise /etc/pkg/FreeBSD.conf Approved by: bapt MFC after: 2 days Notes: svn path=/head/; revision=257145
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-22 17:38:24 +0000