]>
Commit | Line | Data |
---|---|---|
9082a1fc DK |
1 | #!/bin/sh |
2 | set -e | |
3 | ||
4 | TESTDIR=$(readlink -f $(dirname $0)) | |
5 | . $TESTDIR/framework | |
6 | ||
7 | setupenvironment | |
8 | configarchitecture "i386" | |
9 | ||
10 | buildsimplenativepackage 'apt' 'all' '1.0' 'stable' | |
11 | ||
12 | # setup http redirecting to https | |
d56e2917 | 13 | getlabelfromsuite() { echo 'Testcases'; } |
9082a1fc | 14 | setupaptarchive --no-update |
6c0765c0 DK |
15 | changetohttpswebserver -o 'aptwebserver::support::http=false' |
16 | webserverconfig 'aptwebserver::redirect::replace::/downgrademe/' "http://localhost:${APTHTTPPORT}/" | |
17 | webserverconfig 'aptwebserver::redirect::replace::/redirectme/' "https://localhost:${APTHTTPSPORT}/" | |
18 | sed -i -e "s#:${APTHTTPSPORT}/#:${APTHTTPPORT}/redirectme#" -e 's# https:# http:#' rootdir/etc/apt/sources.list.d/* | |
9082a1fc DK |
19 | |
20 | testsuccess aptget update -o Debug::Acquire::http=1 -o Debug::Acquire::https=1 -o Debug::pkgAcquire::Worker=1 | |
21 | ||
22 | msgtest 'Test that the webserver does not answer' 'http requests' | |
6c0765c0 | 23 | downloadfile "http://localhost:${APTHTTPPORT}/pool/main/a/apt/apt_1.0/changelog" changelog >/dev/null 2>&1 && msgfail || msgpass |
9082a1fc | 24 | |
430481e7 | 25 | echo "Acquire::Changelogs::URI::Label::Testcases \"http://localhost:${APTHTTPPORT}/redirectme/pool/@CHANGEPATH@/changelog\";" > rootdir/etc/apt/apt.conf.d/changelog.conf |
6c0765c0 | 26 | testsuccessequal "'http://localhost:${APTHTTPPORT}/redirectme/pool/main/a/apt/apt_1.0/changelog' apt.changelog" aptget changelog apt --print-uris |
9082a1fc | 27 | |
03aa0847 | 28 | cd downloaded |
9082a1fc DK |
29 | testsuccess aptget changelog apt -d |
30 | testsuccess test -s apt.changelog | |
31 | rm -f apt.changelog | |
32 | ||
33 | testsuccess aptget download apt | |
34 | testsuccess test -s apt_1.0_all.deb | |
35 | rm apt_1.0_all.deb | |
03aa0847 | 36 | cd - >/dev/null |
9082a1fc DK |
37 | |
38 | testsuccess aptget install apt -y | |
39 | testdpkginstalled 'apt' | |
40 | ||
9d2a8a73 DK |
41 | # install a slowed down file: otherwise its to fast to reproduce combining |
42 | NEWMETHODS="$(readlink -f rootdir)/usr/lib/apt/methods" | |
43 | OLDMETHODS="$(readlink -f rootdir/usr/lib/apt/methods)" | |
63c71412 DK |
44 | rm "$NEWMETHODS" |
45 | mkdir "$NEWMETHODS" | |
46 | backupIFS="$IFS" | |
47 | IFS="$(printf "\n\b")" | |
48 | for METH in $(find "$OLDMETHODS" ! -type d); do | |
49 | ln -s "$OLDMETHODS/$(basename "$METH")" "$NEWMETHODS" | |
9082a1fc | 50 | done |
63c71412 DK |
51 | IFS="$backupIFS" |
52 | rm "$NEWMETHODS/https" | |
9082a1fc | 53 | |
03aa0847 | 54 | cd downloaded |
25b86db1 | 55 | testfailureequal "E: The method driver $(readlink -f './../')/rootdir/usr/lib/apt/methods/https could not be found. |
87d6947d | 56 | N: Is the package apt-transport-https installed?" aptget download apt |
e52aad52 | 57 | testfailure test -e apt_1.0_all.deb |
03aa0847 | 58 | cd - >/dev/null |
889b0072 DK |
59 | |
60 | # revert to all methods | |
63c71412 | 61 | ln -s "$OLDMETHODS/https" "$NEWMETHODS" |
889b0072 DK |
62 | |
63 | # check that downgrades from https to http are not allowed | |
64 | webserverconfig 'aptwebserver::support::http' 'true' | |
6c0765c0 | 65 | sed -i -e "s#:${APTHTTPPORT}/redirectme#:${APTHTTPSPORT}/downgrademe#" -e 's# http:# https:#' rootdir/etc/apt/sources.list.d/* |
c99fe2e1 | 66 | testfailure aptget update --allow-insecure-repositories |