Skip to content

Issues: haskell/hackage-security

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
53 Open 150 Closed
53 Open 150 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Decide on and implement policy for verifying author-signed lists of package versions hackage-security
#31 opened Jun 26, 2015 by edsko updated Jun 26, 2015 Phase 2
Properly implement delegation hackage-security
#39 opened Jun 26, 2015 by edsko updated Jun 26, 2015 Phase 2
Deal with additional keys being introduced in target files hackage-security
#40 opened Jun 26, 2015 by edsko updated Jun 26, 2015 Phase 2
Close premature-closed connections in HTTP client enhancement hackage-security-HTTP
#45 opened Jun 26, 2015 by edsko updated Jun 26, 2015
Test key rollover (and generally updating root info) on running Hackage server hackage-server
#48 opened Jun 26, 2015 by edsko updated Jun 26, 2015 Phase 1
@edsko
Encoding is Base64 but TUF uses Hex
#52 opened Jun 27, 2015 by tekul updated Jun 27, 2015
2
Change index representation to avoid pure exceptions cabal-install
#62 opened Jul 6, 2015 by edsko updated Jul 6, 2015 Phase 2
Automated testing of the hackage-security library hackage-security
#67 opened Jul 8, 2015 by edsko updated Jul 8, 2015 Phase 1
Deal with 200 (rather than 206) response to get-range request hackage-security
#73 opened Jul 10, 2015 by edsko updated Jul 10, 2015
Deal with exceptions thrown by setURI hackage-security-http-client
#85 opened Aug 7, 2015 by edsko updated Aug 7, 2015
Extend MetadataEntry with signatures hackage-server
#86 opened Aug 8, 2015 by edsko updated Aug 8, 2015 Phase 2
Add some kind of "Secure!" badge to author signed packages hackage-server
#107 opened Aug 28, 2015 by edsko updated Aug 28, 2015 Phase 2
Add log messages that indicate what is being verified cabal-install enhancement hackage-security
#122 opened Sep 15, 2015 by edsko updated Sep 15, 2015
Use hackage-security library to extract .cabal files from the index cabal-install hackage-security
#29 opened Jun 26, 2015 by edsko updated Dec 18, 2015
3 tasks
Phase 2
1
Compute hash for index incrementally hackage-mirror priority: low (ideal world)
#130 opened Dec 18, 2015 by edsko updated Dec 18, 2015
Single preferred-versions in legacy index? hackage-server priority: low (ideal world)
#128 opened Dec 17, 2015 by edsko updated Dec 18, 2015
1
checkForUpdates interacts badly with the CDN hackage-security
#106 opened Aug 28, 2015 by edsko updated Dec 18, 2015 Phase 1
1
Range requests interact badly with the CDN hackage-security
#104 opened Aug 28, 2015 by edsko updated Dec 18, 2015 Phase 1
1
Tarball does not show which user modified preferred-versions hackage-server priority: low (ideal world)
#96 opened Aug 24, 2015 by edsko updated Dec 18, 2015 Phase 1
Deal with errors in the index hackage-security priority: low (ideal world)
#84 opened Aug 3, 2015 by edsko updated Dec 18, 2015
@edsko
What about security of package candidates? hackage-server priority: low (ideal world)
#66 opened Jul 8, 2015 by edsko updated Dec 18, 2015
1
Don't hardcode tar trailer length hackage-security priority: low (ideal world)
#27 opened Jun 26, 2015 by edsko updated Dec 18, 2015 Phase 1
@edsko
1
Allow for finer control over which mirror is selected cabal-install enhancement hackage-security
#24 opened Jun 26, 2015 by edsko updated Dec 18, 2015
Write repo spec hackage-security priority: low (ideal world)
#20 opened Jun 26, 2015 by edsko updated Dec 18, 2015
1 of 4 tasks
Phase 1
@edsko
Policies and protocols for dealing with private keys hackage-server
#13 opened Jun 26, 2015 by edsko updated Dec 18, 2015 Phase 1
@dcoutts
2
ProTip! Exclude everything labeled bug with -label:bug.