CVS commit: [pkg_install-renovation] pkgsrc/pkgtools/pkg_install/files/lib

[Joerg Sonnenberger <joerg%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   joerg
Date:           Sat Jul  5 17:26:40 UTC 2008

Modified Files:
        pkgsrc/pkgtools/pkg_install/files/lib [pkg_install-renovation]: lib.h
            pkcs7.c pkg_signature.c version.h vulnerabilities-file.c

Log Message:
pkg_install-20080705:
Based on a discussion with tls@, make the key validation stricter.
Don't allow CA keys for packages or pkg-vulnerabilities.
Require CODE SIGN as key usage attribute for packages.
Require that no key usage attribute is set for pkg-vulnerabilities.
The latter is not finalised and might change again.


To generate a diff of this commit:
cvs rdiff -r1.42.2.6 -r1.42.2.7 pkgsrc/pkgtools/pkg_install/files/lib/lib.h
cvs rdiff -r1.1.2.2 -r1.1.2.3 pkgsrc/pkgtools/pkg_install/files/lib/pkcs7.c \
    pkgsrc/pkgtools/pkg_install/files/lib/pkg_signature.c
cvs rdiff -r1.102.2.7 -r1.102.2.8 \
    pkgsrc/pkgtools/pkg_install/files/lib/version.h
cvs rdiff -r1.3.4.4 -r1.3.4.5 \
    pkgsrc/pkgtools/pkg_install/files/lib/vulnerabilities-file.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.