test/integration/test-releasefile-date-older

   1 #!/bin/sh
   2 set -e
   3
   4 TESTDIR="$(readlink -f "$(dirname "$0")")"
   5 . "$TESTDIR/framework"
   6 setupenvironment
   7 configarchitecture 'i386'
   8
   9 insertpackage 'wheezy' 'apt' 'all' '0.8.15'
  10
  11 setupaptarchive --no-update
  12
  13 # we don't complain as the server could have just sent a 'Hit' here and this
  14 # 'downgrade attack' is usually performed by out-of-sync mirrors. Valid-Until
  15 # catches the 'real' downgrade attacks (expect that it finds stale mirrors).
  16 # Scaring users with an error here serves hence no point.
  17
  18 msgmsg 'InRelease file is silently rejected if' 'new Date is before old Date'
  19 rm -rf rootdir/var/lib/apt/lists
  20 generatereleasefiles 'now' 'now + 7 days'
  21 signreleasefiles
  22 testsuccess aptget update
  23 listcurrentlistsdirectory > listsdir.lst
  24 redatereleasefiles 'now - 2 days'
  25 testsuccess aptget update
  26 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  27
  28 msgmsg 'Release.gpg file is silently rejected if' 'new Date is before old Date'
  29 export APT_DONT_SIGN='InRelease'
  30 rm -rf rootdir/var/lib/apt/lists
  31 generatereleasefiles 'now' 'now + 7 days'
  32 signreleasefiles
  33 testsuccess aptget update
  34 listcurrentlistsdirectory > listsdir.lst
  35 redatereleasefiles 'now - 2 days'
  36 testsuccess aptget update
  37 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  38 unset APT_DONT_SIGN
  39
  40 msgmsg 'Crisscross InRelease/Release.gpg file is silently rejected if' 'new Date is before old Date'
  41 export APT_DONT_SIGN='Release.gpg'
  42 rm -rf rootdir/var/lib/apt/lists
  43 generatereleasefiles 'now' 'now + 7 days'
  44 signreleasefiles
  45 testsuccess aptget update
  46 export APT_DONT_SIGN='InRelease'
  47 listcurrentlistsdirectory > listsdir.lst
  48 redatereleasefiles 'now - 2 days'
  49 testsuccess aptget update
  50 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  51 unset APT_DONT_SIGN
  52
  53 msgmsg 'Crisscross Release.gpg/InRelease file is silently rejected if' 'new Date is before old Date'
  54 export APT_DONT_SIGN='InRelease'
  55 rm -rf rootdir/var/lib/apt/lists
  56 generatereleasefiles 'now' 'now + 7 days'
  57 signreleasefiles
  58 find aptarchive -name 'InRelease' -delete
  59 testsuccess aptget update
  60 export APT_DONT_SIGN='Release.gpg'
  61 listcurrentlistsdirectory > listsdir.lst
  62 redatereleasefiles 'now - 2 days'
  63 testsuccess aptget update
  64 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  65 unset APT_DONT_SIGN
  66
  67 msgmsg 'Release file has' 'no Date and no Valid-Until field'
  68 rm -rf rootdir/var/lib/apt/lists
  69 generatereleasefiles 'now'
  70 sed -i '/^Date: / d' $(find ./aptarchive -name 'Release')
  71 signreleasefiles
  72 testwarning aptget update
  73 listcurrentlistsdirectory > listsdir.lst
  74 # have no effect as Date is unknown
  75 testwarning aptget update -o Acquire::Min-ValidTime=$((3600*24*30))
  76 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  77 testwarning aptget update -o Acquire::Max-ValidTime=1
  78 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  79 sed -i '/^Codename: / a\
  80 Another-Field: yes' $(find aptarchive/ -name 'Release')
  81 touch -d 'now + 1 day' $(find aptarchive/ -name 'Release')
  82 signreleasefiles "${2:-Joe Sixpack}"
  83 testwarning aptget update
  84 testsuccess cmp $(find aptarchive/ -name 'InRelease')  $(find rootdir/var/lib/apt/ -name '*_InRelease')
  85
  86 msgmsg 'Release file has' 'no Date field, but Valid-Until expired'
  87 rm -rf rootdir/var/lib/apt/lists
  88 generatereleasefiles 'now' 'now - 2 days'
  89 sed -i '/^Date: / d' $(find ./aptarchive -name 'Release')
  90 signreleasefiles
  91 testfailure aptget update
  92 listcurrentlistsdirectory > listsdir.lst
  93 # have no effect as Date is unknown
  94 testfailure aptget update -o Acquire::Min-ValidTime=$((3600*24*30))
  95 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  96 testfailure aptget update -o Acquire::Max-ValidTime=1
  97 testfileequal 'listsdir.lst' "$(listcurrentlistsdirectory)"
  98
  99 msgmsg 'Release file has' 'no Date field, but Valid-Until is good'
 100 rm -rf rootdir/var/lib/apt/lists
 101 generatereleasefiles 'now' 'now + 2 days'
 102 sed -i '/^Date: / d' $(find ./aptarchive -name 'Release')
 103 signreleasefiles
 104 testwarning aptget update