Rob Bast
f829a160fb
use a proper tmp directory
...
this test failed on OSX before, trying to create a directory at the root of the filesystem
9 years ago
Jordi Boggiano
1818b95149
CS fixes
9 years ago
Jordi Boggiano
5c944d45ac
Merge pull request #4827 from curry684/issue-4203
...
Added more graceful warning suppression utility
9 years ago
Niels Keurentjes
c2e768b8ad
Made Silencer invocations safer against exceptions.
9 years ago
Jordi Boggiano
5672f67475
Merge pull request #4829 from curry684/issue-4726
...
Globbing while resolving path repositories now normalizes to slashes
9 years ago
Jordi Boggiano
fff5074bbf
Fix additionalOptions getting dropped when SAN and redirect handling are combined, refs #4782
9 years ago
Jordi Boggiano
03e0d65f37
Allow stream wrapper usage in config dirs, fixes #4788
9 years ago
Niels Keurentjes
84fed02df1
Globbing while resolving path repositories now normalizes to slashes for predictable cross-platform behaviour. Fixes #4726
9 years ago
Niels Keurentjes
76c1645a0e
Merge remote-tracking branch 'upstream/master' into issue-4203
9 years ago
Niels Keurentjes
18cd4f966b
Added silencer utility to more gracefully handle error suppression without hiding errors or worse. Fixes #4203 , #4683
9 years ago
Jordi Boggiano
e0ff9598c3
Tweak wording a bit, refs #3177
9 years ago
Jordi Boggiano
4d9bab4b86
Merge remote-tracking branch 'singles/missing-extension-ini-hint'
9 years ago
Jordi Boggiano
c5cb2327cf
Merge remote-tracking branch 'bamarni/config-repo-options'
9 years ago
Jordi Boggiano
5b41eaad3a
Bundle pubkeys and fail hard if validation can not happen
9 years ago
Jordi Boggiano
59975e3aaa
Add missing keys class
9 years ago
Jordi Boggiano
f4bcf7590b
Fix array syntax
9 years ago
Jordi Boggiano
3ef22258e5
Add key fingerprints for easier comparison and debugging via diagnose
9 years ago
Jordi Boggiano
a9be7c83f1
Add verification of signatures when running self-update
9 years ago
Jordi Boggiano
bdb97e7527
Reuse new TlsHelper for CA validation, refs #4798
9 years ago
Jordi Boggiano
1ea810d40b
Merge remote-tracking branch 'cs278/san-support'
9 years ago
Jordi Boggiano
78ffe0fd08
Avoid checking CA files several times
9 years ago
Bilal Amarni
e727f9f5fe
[Config command] allow to pass options when adding a repo
9 years ago
Jordi Boggiano
901e6f1d0e
Fix output and handling of RFS::copy() and extract redirect code into its own method, refs #4783
9 years ago
Jordi Boggiano
a574d5ef76
Merge remote-tracking branch 'cs278/follow-redirects'
9 years ago
Chris Smith
e2e07a32c3
Fixes to vuln detection
9 years ago
Chris Smith
bc8b7b0f78
Remove left behind debug code
9 years ago
Chris Smith
b32aad8439
Do not set TLS options on local URLs
9 years ago
Chris Smith
74aa73e841
The origin may not be the remote host
9 years ago
Chris Smith
304c268c3b
Tidy up and general improvement of sAN handling code
...
* Move OpenSSL functions into a new TlsHelper class
* Add error when sAN certificate cannot be verified due to
CVE-2013-6420
* Throw exception if PHP >= 5.6 manages to use fallback code
* Add support for wildcards in CN/sAN
* Add tests for cert name validation
* Check for backported security fix for CVE-2013-6420 using
testcase from PHP tests.
* Whitelist some disto PHP versions that have the CVE-2013-6420
fix backported.
9 years ago
Chris Smith
7e2a015e9b
Provide support for subjectAltName on PHP < 5.6
9 years ago
Jordi Boggiano
837fa805ec
Code tweaks, refs #4124
9 years ago
Jordi Boggiano
ddd140fd1c
Rollback plugin api version to 1.0.0 for now, add warning about requiring 1.0.0 exactly
9 years ago
nevvermind
5ec6988218
Fixed docs and removed implementation detail
9 years ago
nevvermind
aa45a48283
Refactoring
...
- changed "SPI" into something more familiar, like "implementation"
- throw exceptions on invalid implementation types or invalid class names
- use null instead of false when querying
- refactored the tests accordingly
9 years ago
nevvermind
ec8229ffa3
Remove @since
9 years ago
nevvermind
2051d74774
Added Capable plugins for a more future-proof Plugin API
...
Plugins can now present their capabilities to the PluginManager, through which it can act accordingly, thus making Plugin API more flexible, BC-friendly and decoupled.
9 years ago
Rob Bast
5b85ee409c
add missing array-replace-recursive
9 years ago
Rob Bast
d6be2a693b
switch to array-replace-recursive
9 years ago
Rob Bast
2393222826
more appropriate name
9 years ago
Rob Bast
474541e9aa
apply comments
...
- add capath to json schema
- simplify factory
- hash_file and sha256 for CA checking
- remove exception as scenario should not occur
- remove executable bit from CA file
- make CA file also group/world writable (we overwrite invalid content anyway)
to avoid permission errors as much as possible
9 years ago
Chris Smith
33f823146b
Account for ports in URL
9 years ago
Chris Smith
34f1fcbdcb
Drop downgrade warning
9 years ago
Rob Bast
c232566e52
add a hash to make sure CA file gets recreated if the content changes
9 years ago
Rob Bast
cef97904d0
dont rewrite temp CA file if it already exists
...
and make it readable by everyone the first time we create it
9 years ago
Rob Bast
4482a1dca0
also wrong array
9 years ago
Rob Bast
f79255df29
make sure passed options are merged into defaults before checking
9 years ago
Rob Bast
94947ee772
merge isset() calls
9 years ago
Rob Bast
b95b0c2ab6
wrong array
9 years ago
Rob Bast
008cce8d85
add back sanity checks
9 years ago
Rob Bast
c1488f65bf
a quick stab at adding capath
9 years ago