backend is selected at compile-time with crypto_backend option (for
meson) or CRYPTO (for legacy Makefile)

Co-developed-by: Christian Marangi <ansuelsmth@gmail.com>
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>

Can be configured by setting URL_BACKEND. If not set libfetch is
selected by default.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>

nina authored 10 months ago and Timo Teräs committed 10 months ago

fixes #11005

Add also a digest context reset without algorithm change.

This is a GCC extension, and seems to not work correctly with
cross-compilation. Perhaps the combination of using also designated
array initializer mixed up things.

Just git rid of the flexible member for now.

and additional sanity checks on the extraction state

The _DATA callback needs to be deferred until extracted data is
handled for the state machine to work correctly for identity data
generation.

fixes regresion in "apk index"

fixes 9855169e "io: simplify mpart and error handling"

instead of io error

Otherwise the ops might be retained, and result in false verification
failure.

fixes #10985

fixes #10988

Make the package uninstallable, and report the status correctly
if dependens is incorrect. Treat malformed provides and install_if
better.

fixes #10987

ends up saving a pointer size on the struct as the short
fits in padding gap.

- put generic crypto function to own file
- put openssl specific crypto implementations into its own file
- remove EVP_MD_CTX_FLAG_ONESHOT setting as it was mere optimization
  (only useful for Padlock SHA accelerator IIRC)
- use separate identity generation hash context
- remove usage of gotos
- remove unused and unneeded modes
- harden extract_v2 file parser while at it

Pass data only with the APK_MPART_DATA callback to simplify things.
Handler errors more straight forward.

This was originally used for testing, but is no longer needed.
If uvol configuration is needed, support for a lib/apk/exec/uvol
symlink or similar can be added to take preference of the uvol
binary.

This allows apk to create a db-uvol symlink on any write operation
if uvol is active, and the database does not exist yet. This allows
relocation of the uvol-db to an alternative directory, but still
support generic apk builds to find the uvol database using the
symlink.

fixes #10969

This corresponds with the Make.rules default of -Wall

Calculate and write the xattr hash to installed database. This
will go away once installed database is migrated to new format.

Since the conversion happens on installation of the package,
the issue will get fixed the package is reinstalled (apk fix)
or upgraded to new version with apk including this commit.

fixes #10986