upstream/mercurial-mirror Files · tests/test-gpg.t

sslutil: prevent CRIME...

sslutil: prevent CRIME ssl.create_default_context() disables compression on the TLS channel in order to prevent CRIME. I think we should follow CPython's lead and attempt to disable channel compression in order to help prevent information leakage. Sadly, I don't think there is anything we can do on Python versions that don't have an SSLContext, as there is no way to set channel options with the limited ssl API.

Matt Mackall - - Load All Authors

File last commit:

r25472:4d2b9b30 default


                r29558:a935cd7d

default

Download file

             test-gpg.t
        
                    47 lines
            
             | 1.0 KiB
            
                | text/troff
            
             |
                Tads3Lexer
            
             / tests / test-gpg.t
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      #require gpg

      Test the GPG extension

        $ cat <<EOF >> $HGRCPATH

        > [extensions]

        > gpg=

        > 

        > [gpg]

        > cmd=gpg --no-permission-warning --no-secmem-warning --no-auto-check-trustdb --homedir "$TESTDIR/gpg"

        > EOF

        $ hg init r

        $ cd r

        $ echo foo > foo

        $ hg ci -Amfoo

        adding foo

        $ hg sigs

        $ HGEDITOR=cat hg sign -e 0

        signing 0:e63c23eaa88a

        Added signature for changeset e63c23eaa88a

        HG: Enter commit message.  Lines beginning with 'HG:' are removed.

        HG: Leave message empty to abort commit.

        HG: --

        HG: user: test

        HG: branch 'default'

        HG: added .hgsigs

        $ hg sigs

        hgtest                             0:e63c23eaa88ae77967edcf4ea194d31167c478b0

        $ hg sigcheck 0

        e63c23eaa88a is signed by:

         hgtest

      verify that this test has not modified the trustdb.gpg file back in

      the main hg working dir

        $ md5sum.py "$TESTDIR/gpg/trustdb.gpg"

        f6b9c78c65fa9536e7512bb2ceb338ae  */gpg/trustdb.gpg (glob)

      don't leak any state to next test run

        $ rm -f "$TESTDIR/gpg/random_seed"

        $ cd ..

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				#require gpg

				Test the GPG extension

				$ cat <<EOF >> $HGRCPATH
				> [extensions]
				> gpg=
				>
				> [gpg]
				> cmd=gpg --no-permission-warning --no-secmem-warning --no-auto-check-trustdb --homedir "$TESTDIR/gpg"
				> EOF
				$ hg init r
				$ cd r
				$ echo foo > foo
				$ hg ci -Amfoo
				adding foo

				$ hg sigs

				$ HGEDITOR=cat hg sign -e 0
				signing 0:e63c23eaa88a
				Added signature for changeset e63c23eaa88a


				HG: Enter commit message. Lines beginning with 'HG:' are removed.
				HG: Leave message empty to abort commit.
				HG: --
				HG: user: test
				HG: branch 'default'
				HG: added .hgsigs

				$ hg sigs
				hgtest 0:e63c23eaa88ae77967edcf4ea194d31167c478b0

				$ hg sigcheck 0
				e63c23eaa88a is signed by:
				hgtest

				verify that this test has not modified the trustdb.gpg file back in
				the main hg working dir
				$ md5sum.py "$TESTDIR/gpg/trustdb.gpg"
				f6b9c78c65fa9536e7512bb2ceb338ae */gpg/trustdb.gpg (glob)

				don't leak any state to next test run
				$ rm -f "$TESTDIR/gpg/random_seed"

				$ cd ..