Ok, I've gotten ~90% done with an initial, mostly usable (I hope), version. I'm dealing with some of the rough edges, and then I'll put it up in the tree so people can point and laugh ... I mean, make productive modifications. ;)
On Mon, Feb 07, 2005 at 07:30:11PM -0500, Theo Van Dinter wrote: > There are a few things I haven't fully fleshed out yet: > > 1) How to archive the update files together? I envisioned a similar > naming convention to our normal rules directory (ie: a bunch of files > named ##_type.cf), but the script should just expect to download a single > file which will then be expanded. I don't want to rely on system calls to > run an expansion, nor do I want to expect tar or zip to be installed, etc. I decided on requiring tar.gz files, and using Archive::Tar and IO::Zlib (requires Compress::Zlip and IO::String) to deal with the archive extraction. > 2) How to validate with GPG? Similar to the archive issue. Perhaps using > GnuPG::Interface? It's really just a wrapper to running gpg from the > commandline, but at least abstracts the issue for platforms where "gpg" isn't > what I think it is. I gave up on the available Perl modules. GnuPG::Interface and PGP::Sign seemed to be the only ones available, and neither really seemed to work well for what I want to do (is the file signature good? yes/no. what is the keyid of the signature?). So I'm back to the commandline method. I coded in just GPG support, if someone has PGP and wants to put in some patches ... ;) Tested on GPG 1.2.x, works fine. > 3) Using "channel.cf" means that it may or may not come after local.cf. > We should probably use some form of prefix to get it to load beforehand, > but what? People should be able to override the channel config if > they want to. I don't know if I want "AA_updates_spamassassin_org.cf" > as a file. I haven't come up with anything for this yet. 4) what SA versions should this script be usable for? It's pretty generic, but there's one or two spots (debugging was a definite one) where the API is all different between versions. Right now, the script should definitely work on v3 (I've only been testing on 3.0.3 so far though), and in theory it'll work for at least later v2 versions as well. So this is probably a moot point, but we should do some testing on this and make sure. -- Randomly Generated Tagline: Professor: Perhaps it's your outlook that need a good bend, a ninety degree bend to a place where happiness is perpendicular to wonderment.
pgpMSJtn0UhpV.pgp
Description: PGP signature
