slapos.libnetworkcache:buildout-mr26 commitshttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commits/buildout-mr262022-03-17T21:16:36+01:00https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/0fe8148a89c659a87b95677f3554a562ca77d173Require private key to have a matching certificate2022-03-17T21:16:36+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/319b8b184d4e760bb02b956f2337e7c789be1abbDo not require useless metadata2022-03-17T21:16:36+01:00Julien Muchembledjm@nexedi.com
url would be more useful than file+urlmd5
(slapos.buildout will be changed this way)
However, prevent the user from passing empty metadata inadvertently.
Of course, that won't reject dummy information but it's unlikely there's
nothing useful to add.https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/1130d3810cda4abcf521b08e4d8b6c7eacd952d4New tryDownload/tryUpload methods2022-03-09T05:58:49+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/330e4eeec2ac8721998599cca53070578156d285Release version 0.222021-12-09T11:22:26+01:00Thomas Gambierthomas.gambier@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/f573e286fd70c91c1187ba44dc8a06dd66e2bf5dlibnetworkcache: make verification method public2021-12-08T14:51:57+01:00Leo-Paul Geneauleo-paul.geneau@nexedi.com
Move `_verifySignatureInCertificateList` to a public methodhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/2a079ea3a11464b79ca8b1269129cd746c12206eRelease version 0.212021-09-28T12:16:34+02:00Thomas Gambierthomas.gambier@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/bc5c0754608477356e3e19086683fcb11329608eUse b64decode and b64encode instead of deprecated decodestring and encodestring2021-09-28T10:41:45+02:00Thomas Gambierthomas.gambier@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/cc1ee494bab22e935b41dfd1dded5b95b4ffe57bRelease 0.202020-02-12T16:35:53+01:00Łukasz Nowakluke@nexedi.com
Note: Forgotten commit.https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/26b21b05f55dbe3a3ed7ecf3b5a3552e2c55e537Fix "Ignore bad signature certificates with message"2020-02-12T16:34:10+01:00Łukasz Nowakluke@nexedi.com
Append loaded_certificate in the try block, so it does not result with
"UnboundLocalError: local variable 'loaded_certificate' referenced before assignment"https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/c758f22dfb181971628d2d16d7c3cc5e97c276a3fix "Ignore bad signature certificates with message"2019-12-03T15:16:05+01:00Łukasz Nowakluke@nexedi.com
python 3 compatibilityhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/0578762bbe2496140972162c6af97ded4fd8632aIgnore bad signature certificates with message2019-12-03T14:53:16+01:00Łukasz Nowakluke@nexedi.com
When list of signature certificates is processed any of them can result
with not using a cache while download, which is bad situation.
Just ignore bad certificates while checking the list, so any other good
ones can be used.
/reviewed-on <a href="https://lab.nexedi.com/nexedi/slapos.libnetworkcache/merge_requests/4" data-original="https://lab.nexedi.com/nexedi/slapos.libnetworkcache/merge_requests/4" data-link="false" data-link-reference="true" data-project="105" data-merge-request="3449" data-project-path="nexedi/slapos.libnetworkcache" data-iid="4" data-mr-title="Ignore bad signature certificates with message" data-reference-type="merge_request" data-container="body" data-placement="top" data-html="true" title="" class="gfm gfm-merge_request">!4</a>https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/f47b10af3af5274b51621bf18a0776b3cee90ebffix for old version of SSL2019-09-17T12:05:33+02:00Thomas Gambierthomas.gambier@nexedi.com
"context.set_ciphers('DEFAULT:@SECLEVEL=1')" was introduced in
<a href="/nexedi/slapos.libnetworkcache/-/commit/ab3b2c3b8b444124be742844bded4708404ac3bc" data-original="ab3b2c3b8b444124be742844bded4708404ac3bc" data-link="false" data-link-reference="false" data-project="105" data-commit="ab3b2c3b8b444124be742844bded4708404ac3bc" data-reference-type="commit" data-container="body" data-placement="top" data-html="true" title="Workaround waiting that we regenerate more secure certificates" class="gfm gfm-commit has-tooltip">ab3b2c3b</a> but for very old SSL we can have the
follwoing error:
Traceback (most recent call last):
File "/usr/local/bin/networkcache-upload", line 9, in <module>
load_entry_point('slapos.libnetworkcache==0.19', 'console_scripts', 'networkcache-upload')()
File "/usr/local/lib/python2.7/dist-packages/slapos/libnetworkcache.py", line 489, in cmd_upload
**dict(x.split('=', 1) for x in args.meta))
File "/usr/local/lib/python2.7/dist-packages/slapos/libnetworkcache.py", line 341, in upload
'Content-Type': 'application/octet-stream'})
File "/usr/local/lib/python2.7/dist-packages/slapos/libnetworkcache.py", line 264, in _request
context.set_ciphers('DEFAULT:@SECLEVEL=1') # XXX
ssl.SSLError: ('No cipher can be selected.',)
/reviewed-on <a href="https://lab.nexedi.com/nexedi/slapos.libnetworkcache/merge_requests/3" data-original="https://lab.nexedi.com/nexedi/slapos.libnetworkcache/merge_requests/3" data-link="false" data-link-reference="true" data-project="105" data-merge-request="3246" data-project-path="nexedi/slapos.libnetworkcache" data-iid="3" data-mr-title="fix for old version of SSL" data-reference-type="merge_request" data-container="body" data-placement="top" data-html="true" title="" class="gfm gfm-merge_request">!3</a>https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/cb63f48c24367cc7c091b220973a6ed97d265c6bRelease 0.192019-08-03T13:11:31+09:00Yusei Taharayusei@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/b0880419be098d5651adbbd993c68ed2354305fdFix a bug on Retry.read. It should have the same arguments as httplib.HTTPRes...2019-08-03T12:55:41+09:00Yusei Taharayusei@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/cedc3d8f70efecb4be83a13dcbbffe8483c461f4Release 0.182019-08-02T10:35:05+09:00Yusei Taharayusei@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/03b3ea14921a33f181efb7c3a0a71fef0f91b180Add download auto retrying function. This is necessary because downloading...2019-08-01T14:17:40+09:00Yusei Taharayusei@nexedi.comAdd download auto retrying function. This is necessary because downloading binary cache often fails.
https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/ab3b2c3b8b444124be742844bded4708404ac3bcWorkaround waiting that we regenerate more secure certificates2019-06-18T19:45:49+02:00Julien Muchembledjm@nexedi.com
Traceback (most recent call last):
...
File "/usr/lib/python3.7/http/client.py", line 1376, in __init__
context.load_cert_chain(cert_file, key_file)
ssl.SSLError: [SSL: CA_MD_TOO_WEAK] ca md too weak (_ssl.c:3824)https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/d20a99e3ef18ebe513066eef7df735709aec51b5Release 0.172019-06-07T21:45:24+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/b6989acf0d95da55ae62f7456498895514f8e459fixup! download: verify checksum of downloaded data2019-06-07T21:31:49+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/316d365a7529240d5b290baa98f55d229afc0bfbtest: assert certificate is created after 36500 days, not 100 years2019-01-07T06:48:09+01:00Jérome Perrinjerome@nexedi.com
As we can see today:
AssertionError: ' 2119 ' not found in 'notAfter=Dec 14 00:54:31 2118 GMT\n')https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/c08f207e31cc16840b64bb576cb4ea6a1711140ctest: Adapt to OpenSSl 1.1.x result2018-12-04T17:36:43+01:00Lukasz Nowakluke@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/e2d4843cbb8995f952e488c1026d89fed67bd3fdtests: Regenerate test certificates2018-12-04T14:09:56+01:00Lukasz Nowakluke@nexedi.com
Since OpenSSL 1.1 those broken certificates became a problem during testing,
so regenerate them with new OpenSSL.
/reviewed-on <a href="https://lab.nexedi.com/nexedi/slapos.libnetworkcache/merge_requests/2" data-original="https://lab.nexedi.com/nexedi/slapos.libnetworkcache/merge_requests/2" data-link="false" data-link-reference="true" data-project="105" data-merge-request="2559" data-project-path="nexedi/slapos.libnetworkcache" data-iid="2" data-mr-title="tests: Regenerate test certificates" data-reference-type="merge_request" data-container="body" data-placement="top" data-html="true" title="" class="gfm gfm-merge_request">!2</a>https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/fa0c1a8499bb32251bd4f14f863e648b487f838bRelease 0.162018-06-15T11:56:57+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/bfcd9c0e8a94e559bfba15e6b7fb8dd9c92750defixup! download: verify checksum of downloaded data2018-06-15T11:55:03+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/2375ce5c525103a20dc31371dd2ab348def89e16download: verify checksum of downloaded data2017-09-01T20:12:17+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/735103daef8f6d35018507db9ebf1da7bcf50f4aupload: make indexing optional2017-06-22T15:16:44+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/21f52c309c92fbba409a0f246805386d773eb17dRemove useless cast to str2017-06-09T21:14:57+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/2876a77e561ae0398c0933716c5ff67cc054d05aRelease 0.152017-06-09T18:33:48+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/1598b212377198efb5c619203d0da7686622d447Fix Changelog rendering2017-06-09T18:33:34+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/202c55dc45ba35dcc7d083bd877100d82bfff0f4For GitLab: CHANGES.txt -> CHANGELOG.rst, README.txt -> README.rst2017-06-09T18:33:34+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/eb0246c2a0406387b2aaa4e778b34c5a40b120d0Add support for Python 32017-06-09T18:11:43+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/4dee0c167b2acb86a8596f9d107e6b8adcc68052cli: add necessary options to upload a pypi-index file2017-06-06T16:57:13+02:00Julien Muchembledjm@nexedi.com
The commands remain difficult to use. Maybe we should move some slapos.buildout
code here so that the required information can be computed automatically.https://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/1fa91b70433a7fa243f4a02dfd62af000d33c21fRelease 0.14.5.2015-09-25T13:32:12+02:00Kazuhiko Shiozakikazuhiko@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/cc551033521947ab0407882fef3c261c8ccaa239support shacache_ca_file and shadir_ca_file in networkcachehelper.2015-09-25T13:31:06+02:00Kazuhiko Shiozakikazuhiko@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/0782ea0eeae54712862d30cf8e6be58d50780bc4typo.2015-09-25T09:55:43+02:00Kazuhiko Shiozakikazuhiko@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/15759fe051fb6b7782cffe251c35fef90dfdeacaRelease 0.14.4.2015-09-24T17:17:00+02:00Kazuhiko Shiozakikazuhiko@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/f495132e3dc885d8c2cc53f2a6b965aaa0489fc5Add shacache-ca-file and shadir-ca-file options.2015-09-24T17:15:06+02:00Kazuhiko Shiozakikazuhiko@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/85644b7b396afe843e57c52f6ead78a2107e88adtypo.2015-09-23T13:19:59+02:00Kazuhiko Shiozakikazuhiko@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/b4d3be0c8b3cbcdbbce25fcba6578269c52f2cfdRelease 0.14.3.2015-09-07T14:40:52+02:00Kazuhiko Shiozakikazuhiko@nexedi.comhttps://lab.nexedi.com/nexedi/slapos.libnetworkcache/-/commit/6545803fd56f0e3c4b9e5324fe0ecd3c26cb7dc5remove trailing white spaces.2015-09-07T13:28:45+02:00Kazuhiko Shiozakikazuhiko@nexedi.com