Hello community,
here is the log from the commit of package obs-service-download_files for
openSUSE:Factory checked in at 2017-10-11 23:03:19
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/obs-service-download_files (Old)
and /work/SRC/openSUSE:Factory/.obs-service-download_files.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "obs-service-download_files"
Wed Oct 11 23:03:19 2017 rev:24 rq:533178 version:0.6.0.git.1502884469.0993a01
Changes:
--------
---
/work/SRC/openSUSE:Factory/obs-service-download_files/obs-service-download_files.changes
2016-03-17 16:47:59.000000000 +0100
+++
/work/SRC/openSUSE:Factory/.obs-service-download_files.new/obs-service-download_files.changes
2017-10-11 23:03:22.523586924 +0200
@@ -1,0 +2,6 @@
+Wed Aug 16 11:47:48 UTC 2017 - [email protected]
+
+- Update to version 0.6.0.git.1502883896.50fa599: (boo#1053984)
+ * make enforcement of IPv4 and SSL verification optional.
+
+-------------------------------------------------------------------
Old:
----
obs-service-download_files-0.5.1.git.1455712026.9c0a4a0.tar.gz
New:
----
obs-service-download_files-0.6.0.git.1502884469.0993a01.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ obs-service-download_files.spec ++++++
--- /var/tmp/diff_new_pack.s9IW5D/_old 2017-10-11 23:03:23.179558184 +0200
+++ /var/tmp/diff_new_pack.s9IW5D/_new 2017-10-11 23:03:23.183558009 +0200
@@ -1,7 +1,7 @@
#
# spec file for package obs-service-download_files
#
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%define service download_files
Name: obs-service-%{service}
-Version: 0.5.1.git.1455712026.9c0a4a0
+Version: 0.6.0.git.1502884469.0993a01
Release: 0
Summary: An OBS source service: download files
License: GPL-2.0+
@@ -50,6 +50,7 @@
%files
%defattr(-,root,root)
+%doc README.md
%dir %{_prefix}/lib/obs
%{_prefix}/lib/obs/service
%dir %{_sysconfdir}/obs
++++++ PKGBUILD ++++++
--- /var/tmp/diff_new_pack.s9IW5D/_old 2017-10-11 23:03:23.243555380 +0200
+++ /var/tmp/diff_new_pack.s9IW5D/_new 2017-10-11 23:03:23.247555205 +0200
@@ -1,5 +1,5 @@
pkgname=obs-service-download_files
-pkgver=0.5.1.git.1455712026.9c0a4a0
+pkgver=0.6.0.git.1502884469.0993a01
pkgrel=0
pkgdesc="An OBS source service: download files"
arch=(any)
++++++ _service ++++++
--- /var/tmp/diff_new_pack.s9IW5D/_old 2017-10-11 23:03:23.275553978 +0200
+++ /var/tmp/diff_new_pack.s9IW5D/_new 2017-10-11 23:03:23.275553978 +0200
@@ -4,7 +4,7 @@
<param name="scm">git</param>
<param name="exclude">.git</param>
<param name="version">git-master</param>
- <param name="versionformat">0.5.1.git.%ct.%h</param>
+ <param name="versionformat">0.6.0.git.%ct.%h</param>
<param name="revision">master</param>
<param name="changesgenerate">enable</param>
</service>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.s9IW5D/_old 2017-10-11 23:03:23.295553101 +0200
+++ /var/tmp/diff_new_pack.s9IW5D/_new 2017-10-11 23:03:23.295553101 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param
name="url">[email protected]:openSUSE/obs-service-download_files.git</param>
- <param
name="changesrevision">9c0a4a0eebd74a53e59a6a15059e5325f637088b</param>
+ <param
name="changesrevision">0993a0122648d67585df1c53c0375bbeaae5e4a8</param>
</service>
</servicedata>
\ No newline at end of file
++++++ debian.dsc ++++++
--- /var/tmp/diff_new_pack.s9IW5D/_old 2017-10-11 23:03:23.335551349 +0200
+++ /var/tmp/diff_new_pack.s9IW5D/_new 2017-10-11 23:03:23.339551174 +0200
@@ -1,8 +1,8 @@
Format: 1.0
Source: obs-service-download-files
-Version: 0.5.1.git.1455712026.9c0a4a0
+Version: 0.6.0.git.1502884469.0993a01-0
Binary: obs-service-download-files
Maintainer: Hib Eris <[email protected]>
Architecture: all
Standards-Version: 3.9.6
-Build-Depends: debhelper (>= 7)
+Build-Depends: debhelper (>= 7), libpath-class-perl,
libhttp-server-simple-perl, libfile-type-perl, libcgi-pm-perl, build |
obs-build, wget
++++++ obs-service-download_files-0.5.1.git.1455712026.9c0a4a0.tar.gz ->
obs-service-download_files-0.6.0.git.1502884469.0993a01.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/README.md
new/obs-service-download_files-0.6.0.git.1502884469.0993a01/README.md
--- old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/README.md
1970-01-01 01:00:00.000000000 +0100
+++ new/obs-service-download_files-0.6.0.git.1502884469.0993a01/README.md
2017-08-16 13:54:29.000000000 +0200
@@ -0,0 +1,6 @@
+# download_files (OBS source service)
+
+This is an [Open Build Service](http://openbuildservice.org/) source service.
It parses all spec files and downloads all Source files which are specified via
a http, https or ftp url.
+
+This is the git repository for
[openSUSE:Tools/obs-service-download_files](https://build.opensuse.org/package/show/openSUSE:Tools/obs-service-download_files).
The authoritative source is
https://github.com/openSUSE/obs-service-download_files
+
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/debian/changelog
new/obs-service-download_files-0.6.0.git.1502884469.0993a01/debian/changelog
---
old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/debian/changelog
2016-02-17 14:38:20.000000000 +0100
+++
new/obs-service-download_files-0.6.0.git.1502884469.0993a01/debian/changelog
2017-08-16 13:54:29.000000000 +0200
@@ -1,3 +1,8 @@
+obs-service-download-files (0.6.0) stable; urgency=medium
+
+ * Enforce SSL verification
+
+ -- Adrian Schroeter <[email protected]> Wed, 16 Aug 2017 15:20:41 +0200
obs-service-download-files (0.5.1) stable; urgency=medium
* Initial release.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/download_files
new/obs-service-download_files-0.6.0.git.1502884469.0993a01/download_files
--- old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/download_files
2016-02-17 14:38:20.000000000 +0100
+++ new/obs-service-download_files-0.6.0.git.1502884469.0993a01/download_files
2017-08-16 13:54:29.000000000 +0200
@@ -14,39 +14,57 @@
CHANGES_GENERATE=disable
CHANGES_AUTHOR=""
CHANGES_LINES_MAX=30
+
+WGET="/usr/bin/wget --timeout=30 -q --tries=2 --no-directories"
+# We do not tell the server that we are an OBS tool by default anymore,
+# because too many sites just have a white list, but they accept wget
+# WGET="$WGET -U 'OBS-wget'"
+
while test $# -gt 0; do
case $1 in
- *-recompress)
+ --enforceipv4)
+ if [[ "$2" == "enable" ]]; then
+ WGET="$WGET -4"
+ fi
+ shift
+ ;;
+ --sslvalidation)
+ if [[ "$2" == "disable" ]]; then
+ NOSSLVALIDATION="yes"
+ fi
+ shift
+ ;;
+ --recompress)
if [[ "$2" == "yes" ]]; then
DORECOMPRESS="yes"
fi
shift
;;
- *-enforcelocal)
+ --enforcelocal)
if [[ "$2" == "yes" ]]; then
ENFORCELOCAL="yes"
fi
shift
;;
- *-enforceupstream)
+ --enforceupstream)
if [[ "$2" == "yes" ]]; then
ENFORCEUPSTREAM="yes"
fi
shift
;;
- *-outdir)
+ --outdir)
MYOUTDIR="$2"
shift
;;
- *-changesgenerate)
+ --changesgenerate)
CHANGES_GENERATE="$2"
shift
;;
- *-changesauthor)
+ --changesauthor)
CHANGES_AUTHOR="$2"
shift
;;
- *-changeslinesmax)
+ --changeslinesmax)
CHANGES_LINES_MAX="$2"
shift
;;
@@ -64,6 +82,10 @@
exit 1
fi
+if [[ -n "$NOSSLVALIDATION" ]]; then
+ WGET="$WGET --no-check-certificate"
+fi
+
function uncompress_file() {
local input=$1
local output=$2
@@ -201,7 +223,7 @@
test -e "$i" || continue
for url in `perl -I/usr/lib/build -MBuild -e Build::show $default_config
"$i" sources` `perl -I/usr/lib/build -MBuild -e Build::show $default_config
"$i" patches`; do
- WGET="/usr/bin/wget -4 --no-check-certificate --timeout=30 -q --tries=2
--no-directories"
+
MYCACHEDIRECTORY="$CACHEDIRECTORY"
PROTOCOL="${url%%:*}"
SAMEFILEAFTERCOMPRESSION=
@@ -209,11 +231,6 @@
BN=`basename "$url"`
- # We do not tell the server that we are an OBS tool by default anymore,
- # because too many sites just have a white list, but they accept wget
- # WGET="$WGET -U 'OBS-wget'"
-
-
cd "$MYOUTDIR"
# check local cache if configured
@@ -261,11 +278,9 @@
if [ -n "$RECOMPRESS" ]; then
tempfile=`mktemp`
file_name=`uncompress_file "$FILE" "$tempfile"`
- SKIP_RECOMPRESS=0
-
- old_file="$SRCDIR/${url##*/}"
-
- if [ -f $old_file ];then
+ SKIP_RECOMPRESS=0
+ old_file="$SRCDIR/${url##*/}"
+ if [ -f $old_file ];then
# uncompress the old file also to compare
tempoldfile=`mktemp`
uncompress_file "$old_file" "$tempoldfile" > /dev/null
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/download_files.service
new/obs-service-download_files-0.6.0.git.1502884469.0993a01/download_files.service
---
old/obs-service-download_files-0.5.1.git.1455712026.9c0a4a0/download_files.service
2016-02-17 14:38:20.000000000 +0100
+++
new/obs-service-download_files-0.6.0.git.1502884469.0993a01/download_files.service
2017-08-16 13:54:29.000000000 +0200
@@ -6,6 +6,16 @@
<description>In case the right compression is not available on server, do
recompress the file as needed.</description>
<allowedvalue>yes</allowedvalue>
</parameter>
+ <parameter name="enforceipv4">
+ <description>Enforce IPv4 hostname resolution. This is currently the
default due to too many invalid configured servers.</description>
+ <allowedvalue>enable</allowedvalue>
+ <allowedvalue>disable</allowedvalue>
+ </parameter>
+ <parameter name="sslvalidation">
+ <description>Disable SSL verification on download.</description>
+ <allowedvalue>enable</allowedvalue>
+ <allowedvalue>disable</allowedvalue>
+ </parameter>
<parameter name="enforceupstream">
<description>Fail when upstream file differes to local committed file.
Package state will become "broken".</description>
<allowedvalue>yes</allowedvalue>