3ef22258e5
Add key fingerprints for easier comparison and debugging via diagnose
9 years ago
a9be7c83f1
Add verification of signatures when running self-update
9 years ago
bdb97e7527
Reuse new TlsHelper for CA validation, refs #4798
9 years ago
1ea810d40b
Merge remote-tracking branch 'cs278/san-support'
9 years ago
78ffe0fd08
Avoid checking CA files several times
9 years ago
e727f9f5fe
[Config command] allow to pass options when adding a repo
9 years ago
901e6f1d0e
Fix output and handling of RFS::copy() and extract redirect code into its own method, refs #4783
9 years ago
a574d5ef76
Merge remote-tracking branch 'cs278/follow-redirects'
9 years ago
e2e07a32c3
Fixes to vuln detection
9 years ago
bc8b7b0f78
Remove left behind debug code
9 years ago
b32aad8439
Do not set TLS options on local URLs
9 years ago
74aa73e841
The origin may not be the remote host
9 years ago
304c268c3b
Tidy up and general improvement of sAN handling code
...
* Move OpenSSL functions into a new TlsHelper class
* Add error when sAN certificate cannot be verified due to
CVE-2013-6420
* Throw exception if PHP >= 5.6 manages to use fallback code
* Add support for wildcards in CN/sAN
* Add tests for cert name validation
* Check for backported security fix for CVE-2013-6420 using
testcase from PHP tests.
* Whitelist some disto PHP versions that have the CVE-2013-6420
fix backported.
9 years ago
7e2a015e9b
Provide support for subjectAltName on PHP < 5.6
9 years ago
837fa805ec
Code tweaks, refs #4124
9 years ago
ddd140fd1c
Rollback plugin api version to 1.0.0 for now, add warning about requiring 1.0.0 exactly
9 years ago
5ec6988218
Fixed docs and removed implementation detail
9 years ago
aa45a48283
Refactoring
...
- changed "SPI" into something more familiar, like "implementation"
- throw exceptions on invalid implementation types or invalid class names
- use null instead of false when querying
- refactored the tests accordingly
9 years ago
ec8229ffa3
Remove @since
9 years ago
2051d74774
Added Capable plugins for a more future-proof Plugin API
...
Plugins can now present their capabilities to the PluginManager, through which it can act accordingly, thus making Plugin API more flexible, BC-friendly and decoupled.
9 years ago
5b85ee409c
add missing array-replace-recursive
9 years ago
d6be2a693b
switch to array-replace-recursive
9 years ago
2393222826
more appropriate name
9 years ago
474541e9aa
apply comments
...
- add capath to json schema
- simplify factory
- hash_file and sha256 for CA checking
- remove exception as scenario should not occur
- remove executable bit from CA file
- make CA file also group/world writable (we overwrite invalid content anyway)
to avoid permission errors as much as possible
9 years ago
33f823146b
Account for ports in URL
9 years ago
34f1fcbdcb
Drop downgrade warning
9 years ago
c232566e52
add a hash to make sure CA file gets recreated if the content changes
9 years ago
cef97904d0
dont rewrite temp CA file if it already exists
...
and make it readable by everyone the first time we create it
9 years ago
4482a1dca0
also wrong array
9 years ago
f79255df29
make sure passed options are merged into defaults before checking
9 years ago
94947ee772
merge isset() calls
9 years ago
b95b0c2ab6
wrong array
9 years ago
008cce8d85
add back sanity checks
9 years ago
c1488f65bf
a quick stab at adding capath
9 years ago
395d115d9b
Resolve all dirs before initializing them, fixes #4802
9 years ago
c1b9b082a4
Break early when a provider name is matched
9 years ago
dd3216e93d
Refactor to use new helper methods for headers
9 years ago
8a8ec6fccc
Too many redirects is not an error in PHP, return the latest response
9 years ago
33471e389f
Pass redirect count using options
...
Removing the risk it might be preserved between requests.
9 years ago
e830a611ec
Handle other path redirects
9 years ago
ffab235edd
Remove code preventing protocol downgrades
9 years ago
ce1eda25f3
Follow redirects inside RFS only when required by PHP version
9 years ago
73662c725a
Don't let PHP follow redirects it doesn't validate certificates
9 years ago
09417cae50
Composer gives .ini hints about missing extensions
9 years ago
b39b113fc3
Handle envvar auth credentials as a JSON blob
...
As well as move the handling to a proper place
9 years ago
aaee6dc0b0
Simplify envvar credential parsing
9 years ago
e9cac53f90
Allow fetching auth credentials from an envvar
...
When an environmental variable named "COMPOSER_AUTH" is set
as $USERNAME:$PASSWORD, it is automatically used for authentication
e.g. when fetching packages from Satis.
The envvar credentials are of lower priority than URL credentials.
Fixes #4285
9 years ago
546730dcf3
Show CA files being used in debug mode, refs #4792
9 years ago
4dd388074e
Merge pull request #4790 from filbertkm/updatecommand
...
Remove unused import in UpdateCommand
9 years ago
f9fadb187e
Fix undefined var $auth issue
9 years ago
40baa3ff05
Use COMPOSER_HOME if defined instead of falling back to HOME, fixes #4789
9 years ago
0a662a7e42
Remove unused import in UpdateCommand
9 years ago
96ff17c520
Cleanups of XDG support, refs #1407
9 years ago
3e9efcfb85
Merge remote-tracking branch 'ntoniazzi/master'
9 years ago
41d8fdfda8
Restore "Avoid loading plugins that do not match the current plugin api even during installation" but fixed
...
This reverts commit 0118d69603
9 years ago
a13b06725e
Add support for if-modified-since on lazy repos and turning packagist into a lazy provider repo
9 years ago
1d08f83976
Only clone if needed
9 years ago
33c123e8c2
Fix passing of options to remotefilesystem in composer repo
9 years ago
876f143418
Forward repo options correctly to the RemoteFilesystem even if we get one injected, fixes #4786
9 years ago
22d8b5dff4
fix possible caBundle error
9 years ago
0118d69603
Revert "Avoid loading plugins that do not match the current plugin api even during installation"
...
This reverts commit 21f5933e0121f5933eCloses auraphp/Aura.Intl#20
9 years ago
21f5933e01
Avoid loading plugins that do not match the current plugin api even during installation
9 years ago
8375af268c
Use fixed CN_match for github hosts, fixes #4782
9 years ago
42f49b3b97
fix missing import
9 years ago
b839c7ef1c
Fix code to work with old php, fixes #4779 #4780
9 years ago
974fb4ac66
Only pass remotefilesystem when needed, fixes #4779
9 years ago
d7c61c50ad
Merge branch 'tls-config'
9 years ago
fb848d2e07
Code cleanups
9 years ago
72fae0bf70
Declare CN_match/SNI_server_name only for php <5.6
9 years ago
449f68deae
Remove dangerous CN_match fallback
9 years ago
a0398286ba
Wording fixes
9 years ago
2491679ba3
Remove override of renderException, refs #4774
9 years ago
d2e97eecb2
Replace preg_match by strpos
9 years ago
03299ff075
Suggest https in docs where it makes sense, closes #4056
9 years ago
e4eee227e0
Fix old-php support
9 years ago
c1cc6bfecf
Avoid doing too many loads of the remotefilesystem
9 years ago
fc4d94f160
Code clarity and updates from the getcomposer.org installer
9 years ago
cb53bd04cb
Remove a few instances of RemoteFilesystem that were not needed
9 years ago
86a911150b
Update bundled CAfile and other cleanups
9 years ago
f8dff0867c
Remove --disable-tls/--cafile flags and rely solely on config options plus some wording clarifications
9 years ago
5d015defb8
Merge remote-tracking branch 'origin/master' into tls-config
9 years ago
b056d9ae42
Avoid double xdebug warning with global command
9 years ago
633e9f91a1
Small tweaks for consistency, refs #3639
9 years ago
721acf3c93
Merge remote-tracking branch 'SofHad/update-interactive'
9 years ago
bda2c0f9b7
Re-enable include path even when classmap authoritative is present, refs #4556
9 years ago
e05207dbad
Merge remote-tracking branch 'bp1222/save-loads'
9 years ago
e8bc9232e0
Add explanation about match args in the "no installed package" output, refs #4663
9 years ago
42cb3dafc4
Merge remote-tracking branch 'Soullivaneuh/depends-replaces'
9 years ago
4fbf15e6d6
Tweaks and add new args to docs, refs #4663
9 years ago
9e42eedf1f
Merge remote-tracking branch 'Soullivaneuh/depends-match-constraint'
9 years ago
5dbc8fa30b
Make sure getRepoConfig is only called on VcsRepos, refs #4700
9 years ago
f874842535
Merge remote-tracking branch 'chorry/4331-svn-creds'
9 years ago
47b05eab7a
Fix type errors
9 years ago
dbe7f34181
Allow depend command to show results for platform packages, fixes #3836 , fixes #4696
9 years ago
fd7267e4ad
Show overridden versions (as well as original) in composer show -p
9 years ago
1a8aedaa9d
Assume -i when running composer show --tree without arg
9 years ago
764de14b5e
Add caching to bitbucket API requests
9 years ago
64b0d72183
Add missing git fallback function in gitlab driver
9 years ago
5752559ae8
fixed typo
9 years ago
f31799b739
Fix error output of the psr-4 trailing backslash validation
9 years ago
94136e0d4f
Merge remote-tracking branch 'hanovruslan/add-sort-packages-into-config'
9 years ago
a6beb7f53d
Merge pull request #4698 from WouterJ/patch-1
...
Improve error message about platform php version
9 years ago
d0e4c5f71e
Use "value" instead of "setting"
9 years ago
b298b9e8c6
Added sort-packages into config
9 years ago
c9501a4cc1
Update dependencies, fixes #4706
9 years ago
29312be4df
Strict typing fixes
9 years ago
f42ba46175
#4331 use --no-auth-cache for svn downloader when such option was set
9 years ago
b156ad0345
Improve error message
9 years ago
43f7b762e5
Revert "[ClassLoader] performance improvement: use str_replace instead of strtr"
9 years ago
44bc8e019f
Merge pull request #4672 from Tobion/patch-1
...
[ClassLoader] performance improvement: use str_replace instead of strtr
9 years ago
e0031ed4a2
Add match-constraint options to depends command
9 years ago
5d625c2231
Improve PHPDoc for package requires
9 years ago
0eb7e2f216
Add --with-replaces option on depends command
9 years ago
a76ce9b25a
[ClassLoader] no need to call str_replace on Windows
9 years ago
314741c1ec
[ClassLoader] use str_replace instead of strtr
9 years ago
feefd51565
Fix custom installer example, fixes #4648
9 years ago
ce74477899
Configuration of GitLab driver
9 years ago
611f9dcfe2
Reordered keys gitlab comes after github
9 years ago
dc5f8cfbaa
Merge pull request #4659 from mishak87/patch-1
...
Could not configure gitlab-oauth via CLI #3765
9 years ago
d8975b5cb1
Depends command: Add phpdoc blocks for IDE completion
9 years ago
7517a99b1c
Could not configure gitlab-oauth via CLI #3765
9 years ago
dc06276179
Remove publish errors from diagnose command output, fixes #4652
9 years ago
6d9e04c0e9
Tweak regex usage
9 years ago
ddd85afd32
Merge pull request #4633 from jaapio/feature/gitlabInstallPath
...
Adds support for gitlab installed in subfolder
9 years ago
df92cb09ab
extract regex to const. To be able to reuse it
9 years ago
94daedde06
Fixed typo in the ShowCommand
9 years ago
d9a62ffd50
Improve PHPDoc for package links
9 years ago
9b8a14179b
Only list tree of packages required by root and not every installed package individually, refs #2600
9 years ago
e6e636802f
Add support for a simplified pure ASCII version of the tree view, refs #2600
9 years ago
92ad33d11e
Undo some invalid merges and simplify code a little bit, refs #2600
9 years ago
a79d0ab886
Merge remote-tracking branch 'jeremyFreeAgent/feature/tree'
9 years ago
45a3db8877
Merge pull request #4638 from realshadow/configurable_repository
...
Allows repositories to implement ConfigurableRepositoryInterface
9 years ago
c5e5bc6fc6
Merge pull request #4589 from dunglas/patch-1
...
Update the autoloader PHPDoc: PSR-4 instead of PSR-0
9 years ago
6c5c53c362
Update the PHPDoc: The autoloader supports PSR-0, PSR-4 and classmap.
9 years ago
8072448cf3
Adjust deduplication of files autoloads, refs 9710b26d3f
9 years ago
36271a7dd1
Added a tree view of required packages
9 years ago
5b748eda6c
Allows repositories to implement ConfigurableRepositoryInterface and thus provide getRepoConfigmethod
9 years ago
b471440ea0
Adds support for gitlab install in subfolder
...
Since gitlab can be hosted on any url also subdirectories should be
supported. (e.g https://mycompany.com/gitlab ).
This supports only http and https protocols since the gitlab api url
is derived from the package repository url. And the ssh protocol doesn't
support folders this way.
9 years ago
fbab2bfa17
Move user agent definition to StreamContextFactory so it is available in all contexts
9 years ago
cf593351ef
Bypass `runScripts` parameter to autoload dumper in `Installer:run()` method
9 years ago
f084b1e053
Remove duplicate handling of retry-auth-failure option, refs #3765
9 years ago
020c126c27
Fix CS
9 years ago
a10bffec0e
Merge remote-tracking branch 'GromNaN/gitlab'
9 years ago
977b8c8f41
Fix loading error when plugin is a final class, fixes #4482
9 years ago
7a06615bf0
Add env var to disable xdebug warnings, refs #4622
9 years ago
966a982738
CS fixes
9 years ago
67a1924173
Merge remote-tracking branch 'Rudloff/xz'
9 years ago
1fe690f810
Autoload generator cleanups
9 years ago
3748c11709
Simplify files autoload include function, and make sure files are included once per package even if exactly the same, refs #4186
9 years ago
9710b26d3f
Merge remote-tracking branch 'jeskew/feature/require_files_but_once'
9 years ago
Jordi Boggiano
Bilal Amarni
Chris Smith
nevvermind
Rob Bast
Stephen Beemsterboer
Radek Benkel
Oliver Vartiainen
aude
Jose Diaz-Gonzalez
Markus Staab
Wouter J
hanov.ruslan
Alexander Loutsenko
Sullivan SENECHAL
Tobias Schultze
Michal Gebauer
Jaapio
Jérémy Romey
Kévin Dunglas
Lukáš Homza
Artur Eshenbrener