| | 1 | #!/bin/sh |
| | 2 | set -e |
| | 3 | |
| | 4 | TESTDIR="$(readlink -f "$(dirname "$0")")" |
| | 5 | . "$TESTDIR/framework" |
| | 6 | setupenvironment |
| | 7 | configarchitecture 'i386' |
| | 8 | |
| | 9 | insertpackage 'wheezy' 'apt' 'all' '0.8.15' |
| | 10 | |
| | 11 | setupaptarchive --no-update |
| | 12 | |
| | 13 | # we don't complain as the server could have just sent a 'Hit' here and this |
| | 14 | # 'downgrade attack' is usually performed by out-of-sync mirrors. Valid-Until |
| | 15 | # catches the 'real' downgrade attacks (expect that it finds stale mirrors). |
| | 16 | # Scaring users with an error here serves hence no point. |
| | 17 | |
| | 18 | msgmsg 'InRelease file is silently rejected if' 'new Date is before old Date' |
| | 19 | rm -rf rootdir/var/lib/apt/lists |
| | 20 | generatereleasefiles 'now' 'now + 7 days' |
| | 21 | signreleasefiles |
| | 22 | testsuccess aptget update |
| | 23 | listcurrentlistsdirectory > listsdir.lst |
| | 24 | redatereleasefiles 'now - 2 days' |
| | 25 | testsuccess aptget update |
| | 26 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 27 | |
| | 28 | msgmsg 'Release.gpg file is silently rejected if' 'new Date is before old Date' |
| | 29 | export APT_DONT_SIGN='InRelease' |
| | 30 | rm -rf rootdir/var/lib/apt/lists |
| | 31 | generatereleasefiles 'now' 'now + 7 days' |
| | 32 | signreleasefiles |
| | 33 | testsuccess aptget update |
| | 34 | listcurrentlistsdirectory > listsdir.lst |
| | 35 | redatereleasefiles 'now - 2 days' |
| | 36 | testsuccess aptget update |
| | 37 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 38 | unset APT_DONT_SIGN |
| | 39 | |
| | 40 | msgmsg 'Crisscross InRelease/Release.gpg file is silently rejected if' 'new Date is before old Date' |
| | 41 | export APT_DONT_SIGN='Release.gpg' |
| | 42 | rm -rf rootdir/var/lib/apt/lists |
| | 43 | generatereleasefiles 'now' 'now + 7 days' |
| | 44 | signreleasefiles |
| | 45 | testsuccess aptget update |
| | 46 | export APT_DONT_SIGN='InRelease' |
| | 47 | listcurrentlistsdirectory > listsdir.lst |
| | 48 | redatereleasefiles 'now - 2 days' |
| | 49 | testsuccess aptget update |
| | 50 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 51 | unset APT_DONT_SIGN |
| | 52 | |
| | 53 | msgmsg 'Crisscross Release.gpg/InRelease file is silently rejected if' 'new Date is before old Date' |
| | 54 | export APT_DONT_SIGN='InRelease' |
| | 55 | rm -rf rootdir/var/lib/apt/lists |
| | 56 | generatereleasefiles 'now' 'now + 7 days' |
| | 57 | signreleasefiles |
| | 58 | find aptarchive -name 'InRelease' -delete |
| | 59 | testsuccess aptget update |
| | 60 | export APT_DONT_SIGN='Release.gpg' |
| | 61 | listcurrentlistsdirectory > listsdir.lst |
| | 62 | redatereleasefiles 'now - 2 days' |
| | 63 | testsuccess aptget update |
| | 64 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 65 | unset APT_DONT_SIGN |
| | 66 | |
| | 67 | msgmsg 'Release file has' 'no Date and no Valid-Until field' |
| | 68 | rm -rf rootdir/var/lib/apt/lists |
| | 69 | generatereleasefiles 'now' |
| | 70 | sed -i '/^Date: / d' $(find ./aptarchive -name 'Release') |
| | 71 | signreleasefiles |
| | 72 | testwarning aptget update |
| | 73 | listcurrentlistsdirectory > listsdir.lst |
| | 74 | # have no effect as Date is unknown |
| | 75 | testwarning aptget update -o Acquire::Min-ValidTime=$((3600*24*30)) |
| | 76 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 77 | testwarning aptget update -o Acquire::Max-ValidTime=1 |
| | 78 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 79 | sed -i '/^Codename: / a\ |
| | 80 | Another-Field: yes' $(find aptarchive/ -name 'Release') |
| | 81 | touch -d 'now + 1 day' $(find aptarchive/ -name 'Release') |
| | 82 | signreleasefiles "${2:-Joe Sixpack}" |
| | 83 | testwarning aptget update |
| | 84 | testsuccess cmp $(find aptarchive/ -name 'InRelease') $(find rootdir/var/lib/apt/ -name '*_InRelease') |
| | 85 | |
| | 86 | msgmsg 'Release file has' 'no Date field, but Valid-Until expired' |
| | 87 | rm -rf rootdir/var/lib/apt/lists |
| | 88 | generatereleasefiles 'now' 'now - 2 days' |
| | 89 | sed -i '/^Date: / d' $(find ./aptarchive -name 'Release') |
| | 90 | signreleasefiles |
| | 91 | testfailure aptget update |
| | 92 | listcurrentlistsdirectory > listsdir.lst |
| | 93 | # have no effect as Date is unknown |
| | 94 | testfailure aptget update -o Acquire::Min-ValidTime=$((3600*24*30)) |
| | 95 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 96 | testfailure aptget update -o Acquire::Max-ValidTime=1 |
| | 97 | testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)" |
| | 98 | |
| | 99 | msgmsg 'Release file has' 'no Date field, but Valid-Until is good' |
| | 100 | rm -rf rootdir/var/lib/apt/lists |
| | 101 | generatereleasefiles 'now' 'now + 2 days' |
| | 102 | sed -i '/^Date: / d' $(find ./aptarchive -name 'Release') |
| | 103 | signreleasefiles |
| | 104 | testwarning aptget update |
projects / apt.git / blame_incremental