PEP-458 Implementation (Secure downloads with signed metadata)#9041

Closed

jku wants to merge 48 commits intopypa:masterfrom

jku:tuf-mvp-vendored

Commits on Oct 21, 2020

Initial tuf-handling code -- no integration yet
Jussi Kukkonen
committed
tuf: use confined_target_dirs
Jussi Kukkonen
committed
Expose USER_DATA_DIR in locations
Jussi Kukkonen
committed
SessionCommandMixin: Add get_tuf_updaters()
Jussi Kukkonen
committed
tuf: Make the cache handling more consistent
Jussi Kukkonen
committed
TUF: Download distribution files with TUF
Jussi Kukkonen
committed
TUF: Implement index file downloads
Jussi Kukkonen
committed
TUF: Add Updater.__str__()
Jussi Kukkonen
committed
tuf: Workaround the mirror config issues
Jussi Kukkonen
committed
tuf: set log level to ERROR
Jussi Kukkonen
committed
Rename, refactor
Jussi Kukkonen
committed
secure_updater: Split distribution url more robustly
Jussi Kukkonen
committed
self version check: Fix to work with SecureUpdateSession
Jussi Kukkonen
committed
secure_update: Handle --no-cache situation
Jussi Kukkonen
committed
secure_update: Include initial metadata with pip
Jussi Kukkonen
committed
secure_update: Add sanity check to target_name parsing
Jussi Kukkonen
committed
Support secure update in download and wheel commands
Jussi Kukkonen
committed
secure_update: Avoid logger.info() if debug() will do
Jussi Kukkonen
committed
Silence most output on failing index download
Jussi Kukkonen
committed
TUF: raise NetWorkConnectionError on failing download
Jussi Kukkonen
committed
secure_update: Handle UnknownTargetError
Jussi Kukkonen
committed
secure_update: Log the same things as regular download
Jussi Kukkonen
committed
secure_update: Add belt-and-suspenders check for pypi
Jussi Kukkonen
committed
secure_update: Improve comments
Jussi Kukkonen
committed
Fix all linter issues in secure_update related code
Jussi Kukkonen
committed
list: support SecureUpdateSession
Jussi Kukkonen
committed
Improve comments in SessionCommandMixin
Jussi Kukkonen
committed
secure_update: Improve docstrings and comments
Jussi Kukkonen
committed
Standardize parsing index url from project url
Jussi Kukkonen
committed
Update secure updater bootstrap metadata
Jussi Kukkonen
committed
LinkCollector: rename fetch_page -> fetch_project_page
Jussi Kukkonen
committed
secure_update: Clean up if metadata bootstrap fails
Jussi Kukkonen
committed
secure_update: Remove broken url canonicalization
Jussi Kukkonen
committed
prepare: link.comes_from can be None
Jussi Kukkonen
committed
secure_update: Allow datadir=None argument
Jussi Kukkonen
committed
options.cache_dir can be False
Jussi Kukkonen
committed
secure_update: No real need to use the tuf.log module
Jussi Kukkonen
committed
tests: Fix most test secure_update test fails
Jussi Kukkonen
committed

Commits on Oct 22, 2020

secure_update: Use MissingLocalRepositoryError
Jussi Kukkonen
committed
secure_update: Update mirror configs to TUF 0.15
Jussi Kukkonen
committed

Commits on Oct 23, 2020

Vendor tuf and securesystemslib
Jussi Kukkonen
committed
Add the vendored sources for tuf and securesystemslib
Jussi Kukkonen
committed
Fix linter issues
Jussi Kukkonen
committed
Merge branch 'tuf-mvp' into tuf-mvp-vendored
Jussi Kukkonen
committed
Fix linter issues
Jussi Kukkonen
committed
vendoring: Update tuf files
Jussi Kukkonen
committed
test_build_env: Handle SecureUpdateSession
Jussi Kukkonen
committed
Merge branch 'tuf-mvp' into tuf-mvp-vendored
Jussi Kukkonen
committed