apk-tools/libfetch, branch 2.8-stable

libfetch: add option to set "Cache-Control: no-cache"

2018-01-09T07:56:05+00:00

ref #8161

(cherry picked from commit f90af35e9c563bd4f865d8d47a7ae357191494db)

libfetch: honor https_proxy variable for https

2018-01-09T07:55:26+00:00

fixes #8160

(cherry picked from commit 99e7bb93dfff2f43987b81ce7600ad8fbd0ce64c)

libfetch: fix certificate host name check

2017-10-06T15:09:37+00:00

OpenSSL allows passing zero-length to indicate "use strlen".
LibreSSL requires using the real length always, so pass the length.

libfetch: improve openssl/libressl compatibility

2017-10-06T10:25:27+00:00

X509_check_host() is introduced in libressl-2.5.0 and openssl-1.0.2
which are not yet universally available. Add support for building
against the older versions.

libfetch: improve ssl connections

2017-10-05T13:59:14+00:00

loosely based on the freebsd implementation, implement https
connection settings to override CA, and use client certificate.

new files supported in /etc/apk/:
  ca.pem   - if exists, it contains CAs acceptable for https
	     (otherwise system wide CAs are used)
  crl.pem  - if ca.pem is used, this is the (optional) CRL for it
  cert.pem - used as client authentication certificate (+ key)
  cert.key - used as client key (can be also inside cert.pem)

libfetch: remove unwanted code conditionals

2017-10-05T13:59:14+00:00

libfetch: fix ssl context leak

2017-10-05T13:59:14+00:00

from freebsd

build and use bundled libfetch natively

2017-10-05T13:59:14+00:00

import libfetch-2.38 from NetBSD

2017-10-05T13:58:09+00:00

ftp://ftp.fu-berlin.de/unix/NetBSD/packages/current-src/pkgsrc/net/libfetch/files

libfetch comes (at least) in netbsd and freebsd flavors which
differing functionality. Alpine and Arch package netbsd one,
but it's not widely packaged across other distributions.

We need NetBSD version as it does not use funopen(3) which is not
supported in musl, and supports connection pooling.

FreeBSD seems to be the orignal and better maintained version
with support for SSL CAs, client certificate authentication,
proxy authentication, and improved http redirect handling.

So this imports NetBSD version, and future commits will pick up
the needed improvements from FreeBSD tree.

Incidentally, this also fixes #7857 and likes for good.