Overview
| Comment: | Make sure that the TLS protocol is always enabled when downloading via HTTPS. |
|---|---|
| Downloads: | Tarball | ZIP archive | SQL archive |
| Timelines: | family | ancestors | descendants | both | trunk |
| Files: | files | file ages | folders |
| SHA1: |
fbe498f5f3621b49a9b44efe6049b11a |
| User & Date: | mistachkin on 2016-09-17 00:02:11 |
| Other Links: | manifest | tags |
Context
|
2016-09-17
| ||
| 01:27 | Make sure all uses of the native Tcl 'http' package are prefixed with '::'. check-in: 6943eb70a6 user: mistachkin tags: trunk | |
| 00:02 | Make sure that the TLS protocol is always enabled when downloading via HTTPS. check-in: fbe498f5f3 user: mistachkin tags: trunk | |
|
2016-09-15
| ||
| 08:19 | Address chicken-and-egg issues related to the 'http' and 'tls' packages. Add 'allowInsecureHttp' setting to permit insecure HTTP requests to be issued by the client. Prevent the package downloader from using the API keys associated with the package repository. Add and update comments. check-in: 5790d1dd55 user: mistachkin tags: trunk | |
Changes
Modified client/1.0/pkgr.eagle from [3124877c79] to [39c3236f38].
| ︙ | ︙ | |||
1716 1717 1718 1719 1720 1721 1722 |
package require http 2.0
#
# NOTE: If the 'tls' package is available, always attempt to use HTTPS;
# otherwise, only attempt to use HTTP if explicitly allowed.
#
if {[catch {package require tls}] == 0} then {
| | | 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 |
package require http 2.0
#
# NOTE: If the 'tls' package is available, always attempt to use HTTPS;
# otherwise, only attempt to use HTTP if explicitly allowed.
#
if {[catch {package require tls}] == 0} then {
::http::register https 443 [list ::tls::socket -tls1 true]
if {[string range $uri 0 6] eq "http://"} then {
set uri [appendArgs https:// [string range $uri 7 end]]
}
} elseif {$allowInsecureHttp} then {
if {[string range $uri 0 7] eq "https://"} then {
set uri [appendArgs http:// [string range $uri 8 end]]
|
| ︙ | ︙ |
Modified client/1.0/pkgr.eagle.asc from [868ee097b3] to [441f4abb79].
1 2 3 4 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Eagle Package Repository | | | | | | | | | | | | | | | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Eagle Package Repository iQIcBAABCAAGBQJX3IfwAAoJEFAslq9JXcLZweMP/3IB79zme2+4iHFUG6CcGgF/ y8SeJhYo2YIEquQyQyFGMY60DMHy5dBYZXmQ2usvGjyhln9GHLgiKjjPkEmenX/C jgZM/cifDINIEjWeep7x44yWcJ/fiOdUOVAsaTEbKbQn4vrcziOO+tkl/LiVL5Hq 33UEBah0/q8LiWTJz5PKf98VhROWc/L0qlUAH1Yt9hAfk03WCp1Gbeb+TjoITF1i m0a4gcHI2Lgp8Jqmh8mqoxc+ckKEiCgFydVxWnmc/uWkTfZH/O0K72h5JbYqKl0Y bs3xeJw8nJeXBV0U4X/WtO/JRKJEI9XmkBx5QExI5ifyP6FIrr8dWbAUn1Q4AOm0 /LfNoyF3iz7hhsVJNexK//douAA0mCPyXFnGmTWx1CB0qhMkPrj0B6xWV4ruMY1w jrREhtjILwlqxg10vNLajeNW4QlS94wNngPu5J38uiCxSMDCDLS0oZlgrENMg+OX mDm7Hb6uv6Qmv7VH6k8Nn1IlOeCf2GAuQNwFq1Nq+O9tkv/LQSP5cjy2KsNPIgHt +ju3QyU5n14a5D7sgJ/yPlbK84xT1Q6xIzJcVcYBrXKq9eoF7jgoL5Z/WC+fj7P8 31WsoXyTb6dNIwzFLxk+GA2iv780aS62I6EBQgdL/SJfBBnYVAaOBxH+oZBYwKml lB3d1PYlx2hS0Udr4zFX =Yw9Y -----END PGP SIGNATURE----- |
Modified client/1.0/pkgr.eagle.harpy from [b911adf9d7] to [61143bf4d4].
| ︙ | ︙ | |||
17 18 19 20 21 22 23 |
THE ASSOCIATED SOFTWARE MAY NOT WORK PROPERLY IF THIS FILE IS ALTERED.
-->
<Certificate xmlns="https://eagle.to/2011/harpy"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<Protocol>None</Protocol>
<Vendor>Mistachkin Systems</Vendor>
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 |
THE ASSOCIATED SOFTWARE MAY NOT WORK PROPERLY IF THIS FILE IS ALTERED.
-->
<Certificate xmlns="https://eagle.to/2011/harpy"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<Protocol>None</Protocol>
<Vendor>Mistachkin Systems</Vendor>
<Id>8e4de0c9-5524-4685-97e2-7df35d4eec91</Id>
<HashAlgorithm>SHA512</HashAlgorithm>
<EntityType>Script</EntityType>
<TimeStamp>2016-09-17T00:01:15.7050781Z</TimeStamp>
<Duration>-1.00:00:00</Duration>
<Key>0x9559f6017247e3e2</Key>
<Signature>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=
</Signature>
</Certificate>
|
Modified client/1.0/pkgr.eagle.harpy.asc from [222750b24a] to [c0befa6a3b].
1 2 3 4 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Eagle Package Repository | | | | | | | | | | | | | | | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 | -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Eagle Package Repository iQIcBAABCAAGBQJX3IfxAAoJEFAslq9JXcLZD28P/0SNJVXPv4yRLUO64+WqG3tW hnOypdQpoaISmD78uytMukY21VSji684Czi+iSk+ZEG73GccUBJ3Ta/sf10V/x2B m5oHLAzLMt5JtKlQawTeB1eLe8wE6bm4CFULS6x9j8CwXrq4tri5uo8DFWwvJ6H+ qWCn4y0+6JmtaApIgAhHGxa/5v1QXLn0QGgCHIWDndL5CMqrYpwZ68vE7mFvRC4G VXcOvKOYp4RzQwqvh3rYHO0vjgmyqitk1IG5C4PbXZfgNnvIbxYhkEC3oXNIn/RT JSk4W7l0CURaXXLcs8Zanf67f12DkUIo01NR7eSQCZ6/TG5zwbQjpsJYOS0oBEuL ps5M7mUDLwUslYM3TYbMfwIO6THGx1QdLC7JsqLCwf7742p/oaowTcQQtHyLEB1+ 1bC2vcNHGr9gxtpdC/T3sqmHOE+eHJX5QRcdr78IOXpve4b61iqCqFf3a44NzUX3 cGNxms9vrMJBe5qhSMKIO81pRjnHw4/gcncPYCc+XgjYxLRscOyF+fWQIyJu50kK cAM4+oKhf9ZXJ0TUhfMJWtwvRHeWqtlUBrN0RdpXcJxiBnui3O4PD1XpX/neAero elQ8M/LjbiRBtkw4HOov5oYq/MVgBima+9O/mq9ELms/kGaNFOaO7SnXWxjKjbzK UvvZ4ZqJO42lfWTu2Kuw =luZi -----END PGP SIGNATURE----- |