Task #2613

include fingerprint for signing key in repo URL

Added by hans about 4 years ago. Updated over 3 years ago.

Status:ClosedStart date:11/21/2013
Priority:HighDue date:
Assignee:hans% Done:

0%

Category:-
Target version:make new Guardian Project FDroid repo
Component:

Description

The Fdroid URL format allows fingerprints to be included in it so that the fingerprint can sent pre-configured when setting up a new repo.

  • currently implemented format: https://indexJarFingerprint@host/repo
  • proposed extension: https://httpsFingerprint:indexJarFingerprint@host/repo

Related issues

Related to Bazaar - Task #3308: update HTTPS cert pin for guardianproject.info Closed 04/26/2014
Related to Bazaar - Bug #2604: get official GP repo into F-Droid Closed 11/21/2013

Associated revisions

Revision 1b72a188
Added by hans about 4 years ago

include the repo fingerprint in the repo URLs #2613

This takes the code from FDroid for calculating the fingerprint of the repo
signing key. Once this code is included in FDroid, it should use FDroid's
own DB.calcFingerprint() to replace KerplappKeyStore.getFingerprint().

This relies on this merge request being included in fdroidclient:
https://gitorious.org/f-droid/fdroidclient/merge_requests/45

History

#1 Updated by hans about 4 years ago

Once my merge request is accepted into fdroidclient, then FDroid will be able to import those and do something useful with them:
https://gitorious.org/f-droid/fdroidclient/merge_requests/45

#2 Updated by hans about 4 years ago

  • Priority changed from Normal to High

#3 Updated by hans over 3 years ago

  • Target version changed from improved security/usability to Integrate Kerplapp into FDroid

#4 Updated by hans over 3 years ago

  • Target version changed from Integrate Kerplapp into FDroid to 134

#5 Updated by hans over 3 years ago

The new format for including the fingerprint in the FDroid repo URL is to put it into the query string like this:

Adding the fingerprint as the 'user' is no longer supported, and was only ever supported in a test version.

#6 Updated by hans over 3 years ago

  • Target version changed from 134 to make new Guardian Project FDroid repo

#7 Updated by hans over 3 years ago

  • Subject changed from add new repo to FDroid with fingerprints for index.jar and HTTPS to add new GP repo to FDroid with fingerprints for index.jar

#8 Updated by hans over 3 years ago

  • Subject changed from add new GP repo to FDroid with fingerprints for index.jar to include fingerprint for signing key in repo URL
  • Assignee set to hans

#9 Updated by hans over 3 years ago

  • Status changed from New to Closed

this was included a while ago.

Also available in: Atom PDF