Skip to content

Use cURL to fetch content trust roles metadata#972

Merged
wolfv merged 3 commits into
mamba-org:masterfrom
adriendelsalle:curl-av-roles
Jun 3, 2021
Merged

Use cURL to fetch content trust roles metadata#972
wolfv merged 3 commits into
mamba-org:masterfrom
adriendelsalle:curl-av-roles

Conversation

@adriendelsalle

Copy link
Copy Markdown
Member

Description

Fetch content trust roles metadata using cURL
Check for freeze attack on root or pkg_mgr metadata
Add capability to silent logs on DownloadTarget (also move a log from constructor to perform)
Add fetch_error and freeze_error
add C++ tests

check for freeze attack on root or pkg_mgr
add capability to silent logs on DownloadTarget
add fetch_error and freeze_error
add C++ tests
@adriendelsalle adriendelsalle marked this pull request as ready for review May 31, 2021 18:40
Comment thread include/mamba/core/fetch.hpp Outdated
Comment thread include/mamba/core/fetch.hpp Outdated

inline curl_off_t get_downloaded_size() const
{
return downloaded_size;

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we need this? downloaded size is public.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

right, I could use directly downloaded_size

@wolfv

wolfv commented Jun 2, 2021

Copy link
Copy Markdown
Member

looks good except for the two comments. not sure if those changes are really necessary?

@adriendelsalle

Copy link
Copy Markdown
Member Author

I removed the unnecessary get_downloaded_size method! See my comment for the other one.

remove set_active_logs and active_logs methods of DownloadTarget
remove special handling of logs in DownloadTarget

Co-authored-by: Alex Franchuk <afranchuk@caci.com>
@adriendelsalle

Copy link
Copy Markdown
Member Author

@wolfv I reused head request implementation of @afranchuk in #934 to get rid of the special logging behavior in DownloadTarget.

@afranchuk I mentioned you as co-author of this commit.

@wolfv wolfv merged commit a1f7f9b into mamba-org:master Jun 3, 2021
@adriendelsalle adriendelsalle deleted the curl-av-roles branch June 3, 2021 06:22
@adriendelsalle adriendelsalle added this to the next-release milestone Jun 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants