4070 Commits (7420265c0defbf70bcea598792ab6728216f73b3)

Author SHA1 Message Date
Niels Keurentjes a48159b283 Bail out if root package attempts to include itself. 9 years ago
Chris Smith 3979abc638 Add warning if OpenSSL does not support TLSv1.2 or TLSv1.1 9 years ago
Jordi Boggiano 593b88e414 Let users configure *any auth* via COMPOSER_AUTH and add it to the docs, refs #4546 9 years ago
Jordi Boggiano e513f27674 Merge remote-tracking branch 'firoxer/envvar_auth' 9 years ago
Jordi Boggiano ae14e0f086 Add ssh2 protocol default ports, fixes #4835 9 years ago
appchecker 13b50799d1 fix: missing parentheses 9 years ago
Jordi Boggiano 618e7f98b2 Force base error reporting level to include everything 9 years ago
Jordi Boggiano 4e00635298 Fix error handling support, fixes #4833 9 years ago
Rob Bast f829a160fb use a proper tmp directory
this test failed on OSX before, trying to create a directory at the root of the filesystem
9 years ago
Jordi Boggiano 1818b95149 CS fixes 9 years ago
Jordi Boggiano 5c944d45ac Merge pull request #4827 from curry684/issue-4203
Added more graceful warning suppression utility
9 years ago
Niels Keurentjes c2e768b8ad Made Silencer invocations safer against exceptions. 9 years ago
Jordi Boggiano 5672f67475 Merge pull request #4829 from curry684/issue-4726
Globbing while resolving path repositories now normalizes to slashes
9 years ago
Jordi Boggiano fff5074bbf Fix additionalOptions getting dropped when SAN and redirect handling are combined, refs #4782 9 years ago
Jordi Boggiano 03e0d65f37 Allow stream wrapper usage in config dirs, fixes #4788 9 years ago
Niels Keurentjes 84fed02df1 Globbing while resolving path repositories now normalizes to slashes for predictable cross-platform behaviour. Fixes #4726 9 years ago
Niels Keurentjes 76c1645a0e Merge remote-tracking branch 'upstream/master' into issue-4203 9 years ago
Niels Keurentjes 18cd4f966b Added silencer utility to more gracefully handle error suppression without hiding errors or worse. Fixes #4203, #4683 9 years ago
Jordi Boggiano e0ff9598c3 Tweak wording a bit, refs #3177 9 years ago
Jordi Boggiano 4d9bab4b86 Merge remote-tracking branch 'singles/missing-extension-ini-hint' 9 years ago
Jordi Boggiano c5cb2327cf Merge remote-tracking branch 'bamarni/config-repo-options' 9 years ago
Jordi Boggiano 5b41eaad3a Bundle pubkeys and fail hard if validation can not happen 9 years ago
Jordi Boggiano 59975e3aaa Add missing keys class 9 years ago
Jordi Boggiano f4bcf7590b Fix array syntax 9 years ago
Jordi Boggiano 3ef22258e5 Add key fingerprints for easier comparison and debugging via diagnose 9 years ago
Jordi Boggiano a9be7c83f1 Add verification of signatures when running self-update 9 years ago
Jordi Boggiano bdb97e7527 Reuse new TlsHelper for CA validation, refs #4798 9 years ago
Jordi Boggiano 1ea810d40b Merge remote-tracking branch 'cs278/san-support' 9 years ago
Jordi Boggiano 78ffe0fd08 Avoid checking CA files several times 9 years ago
Bilal Amarni e727f9f5fe [Config command] allow to pass options when adding a repo 9 years ago
Jordi Boggiano 901e6f1d0e Fix output and handling of RFS::copy() and extract redirect code into its own method, refs #4783 9 years ago
Jordi Boggiano a574d5ef76 Merge remote-tracking branch 'cs278/follow-redirects' 9 years ago
Chris Smith e2e07a32c3 Fixes to vuln detection 9 years ago
Chris Smith bc8b7b0f78 Remove left behind debug code 9 years ago
Chris Smith b32aad8439 Do not set TLS options on local URLs 9 years ago
Chris Smith 74aa73e841 The origin may not be the remote host 9 years ago
Chris Smith 304c268c3b Tidy up and general improvement of sAN handling code
* Move OpenSSL functions into a new TlsHelper class
* Add error when sAN certificate cannot be verified due to
  CVE-2013-6420
* Throw exception if PHP >= 5.6 manages to use fallback code
* Add support for wildcards in CN/sAN
* Add tests for cert name validation
* Check for backported security fix for CVE-2013-6420 using
  testcase from PHP tests.
* Whitelist some disto PHP versions that have the CVE-2013-6420
  fix backported.
9 years ago
Chris Smith 7e2a015e9b Provide support for subjectAltName on PHP < 5.6 9 years ago
Jordi Boggiano 837fa805ec Code tweaks, refs #4124 9 years ago
Jordi Boggiano ddd140fd1c Rollback plugin api version to 1.0.0 for now, add warning about requiring 1.0.0 exactly 9 years ago
nevvermind 5ec6988218 Fixed docs and removed implementation detail 9 years ago
nevvermind aa45a48283 Refactoring
- changed "SPI" into something more familiar, like "implementation"
- throw exceptions on invalid implementation types or invalid class names
- use null instead of false when querying
- refactored the tests accordingly
9 years ago
nevvermind ec8229ffa3 Remove @since 9 years ago
nevvermind 2051d74774 Added Capable plugins for a more future-proof Plugin API
Plugins can now present their capabilities to the PluginManager, through which it can act accordingly, thus making Plugin API more flexible, BC-friendly and decoupled.
9 years ago
Rob Bast 5b85ee409c add missing array-replace-recursive 9 years ago
Rob Bast d6be2a693b switch to array-replace-recursive 9 years ago
Rob Bast 2393222826 more appropriate name 9 years ago
Rob Bast 474541e9aa apply comments
- add capath to json schema
- simplify factory
- hash_file and sha256 for CA checking
- remove exception as scenario should not occur
- remove executable bit from CA file
- make CA file also group/world writable (we overwrite invalid content anyway)
    to avoid permission errors as much as possible
9 years ago
Chris Smith 33f823146b Account for ports in URL 9 years ago
Chris Smith 34f1fcbdcb Drop downgrade warning 9 years ago
Rob Bast c232566e52 add a hash to make sure CA file gets recreated if the content changes 9 years ago
Rob Bast cef97904d0 dont rewrite temp CA file if it already exists
and make it readable by everyone the first time we create it
9 years ago
Rob Bast 4482a1dca0 also wrong array 9 years ago
Rob Bast f79255df29 make sure passed options are merged into defaults before checking 9 years ago
Rob Bast 94947ee772 merge isset() calls 9 years ago
Rob Bast b95b0c2ab6 wrong array 9 years ago
Rob Bast 008cce8d85 add back sanity checks 9 years ago
Rob Bast c1488f65bf a quick stab at adding capath 9 years ago
Jordi Boggiano 395d115d9b Resolve all dirs before initializing them, fixes #4802 9 years ago
Chris Smith dd3216e93d Refactor to use new helper methods for headers 9 years ago
Chris Smith 8a8ec6fccc Too many redirects is not an error in PHP, return the latest response 9 years ago
Chris Smith 33471e389f Pass redirect count using options
Removing the risk it might be preserved between requests.
9 years ago
Chris Smith e830a611ec Handle other path redirects 9 years ago
Chris Smith ffab235edd Remove code preventing protocol downgrades 9 years ago
Chris Smith ce1eda25f3 Follow redirects inside RFS only when required by PHP version 9 years ago
Chris Smith 73662c725a Don't let PHP follow redirects it doesn't validate certificates 9 years ago
Radek Benkel 09417cae50 Composer gives .ini hints about missing extensions 9 years ago
Oliver Vartiainen b39b113fc3 Handle envvar auth credentials as a JSON blob
As well as move the handling to a proper place
9 years ago
Oliver Vartiainen aaee6dc0b0 Simplify envvar credential parsing 9 years ago
Oliver Vartiainen e9cac53f90 Allow fetching auth credentials from an envvar
When an environmental variable named "COMPOSER_AUTH" is set
as $USERNAME:$PASSWORD, it is automatically used for authentication
e.g. when fetching packages from Satis.

The envvar credentials are of lower priority than URL credentials.

Fixes #4285
9 years ago
Jordi Boggiano 546730dcf3 Show CA files being used in debug mode, refs #4792 9 years ago
Jordi Boggiano 4dd388074e Merge pull request #4790 from filbertkm/updatecommand
Remove unused import in UpdateCommand
9 years ago
Jordi Boggiano f9fadb187e Fix undefined var $auth issue 9 years ago
Jordi Boggiano 40baa3ff05 Use COMPOSER_HOME if defined instead of falling back to HOME, fixes #4789 9 years ago
aude 0a662a7e42 Remove unused import in UpdateCommand 9 years ago
Jordi Boggiano 96ff17c520 Cleanups of XDG support, refs #1407 9 years ago
Jordi Boggiano 3e9efcfb85 Merge remote-tracking branch 'ntoniazzi/master' 9 years ago
Jordi Boggiano 41d8fdfda8 Restore "Avoid loading plugins that do not match the current plugin api even during installation" but fixed
This reverts commit 0118d69603.
9 years ago
Jordi Boggiano a13b06725e Add support for if-modified-since on lazy repos and turning packagist into a lazy provider repo 9 years ago
Jordi Boggiano 1d08f83976 Only clone if needed 9 years ago
Jordi Boggiano 33c123e8c2 Fix passing of options to remotefilesystem in composer repo 9 years ago
Jordi Boggiano 876f143418 Forward repo options correctly to the RemoteFilesystem even if we get one injected, fixes #4786 9 years ago
Rob Bast 22d8b5dff4 fix possible caBundle error 9 years ago
Jose Diaz-Gonzalez 0118d69603 Revert "Avoid loading plugins that do not match the current plugin api even during installation"
This reverts commit 21f5933e01.

Commit 21f5933e breaks fresh installations of cakephp applications, or
any project where a dependency uses a different composer plugin
installer than the upstream project.

Closes auraphp/Aura.Intl#20
9 years ago
Jordi Boggiano 21f5933e01 Avoid loading plugins that do not match the current plugin api even during installation 9 years ago
Jordi Boggiano 8375af268c Use fixed CN_match for github hosts, fixes #4782 9 years ago
Rob Bast 42f49b3b97 fix missing import 9 years ago
Jordi Boggiano b839c7ef1c Fix code to work with old php, fixes #4779 #4780 9 years ago
Jordi Boggiano 974fb4ac66 Only pass remotefilesystem when needed, fixes #4779 9 years ago
Jordi Boggiano d7c61c50ad Merge branch 'tls-config' 9 years ago
Jordi Boggiano fb848d2e07 Code cleanups 9 years ago
Jordi Boggiano 72fae0bf70 Declare CN_match/SNI_server_name only for php <5.6 9 years ago
Jordi Boggiano 449f68deae Remove dangerous CN_match fallback 9 years ago
Jordi Boggiano a0398286ba Wording fixes 9 years ago
Jordi Boggiano 2491679ba3 Remove override of renderException, refs #4774 9 years ago
Jordi Boggiano d2e97eecb2 Replace preg_match by strpos 9 years ago
Jordi Boggiano 03299ff075 Suggest https in docs where it makes sense, closes #4056 9 years ago
Jordi Boggiano e4eee227e0 Fix old-php support 9 years ago
Jordi Boggiano c1cc6bfecf Avoid doing too many loads of the remotefilesystem 9 years ago
Jordi Boggiano fc4d94f160 Code clarity and updates from the getcomposer.org installer 9 years ago