Gianpiero Carpinelli a5e70a26c1 Test apt against repositories that publish SHA3 ...

Build a real package, publish it with apt-ftparchive using only
SHA3-256 and then only SHA3-512, and run the client against it over
http. In each case apt update accepts the repository without a weak
security warning, and show, install, download and source all work.
A corrupted package or index file fails with a hash mismatch, and
marking the SHA3 type untrusted makes apt reject the repository.

With by-hash enabled, apt fetches from the SHA3 directory when that
is the only hash offered and also when SHA256 is offered next to it.
If such an archive has no SHA3 by-hash files, the update still
succeeds by fetching the plain path.

Finally, with both families published, corrupt only the SHA3-256
digests in Release. The update must fail although every SHA256
digest still matches.

2026-10-07 17:06:23 +01:00

..

integration

Test apt against repositories that publish SHA3

2026-10-07 17:06:23 +01:00

interactive-helper

test: mirrorlist fetch via redirect, fix clearing redirect::replace config

2026-07-20 18:33:13 +02:00

libapt

Add SHA3-256 and SHA3-512 to the hash library

2026-10-07 17:05:55 +01:00

thread-safety

thread-safety tests: Adjust path to lists

2015-10-30 15:41:13 +01:00

CMakeLists.txt

CMake: Add unit tests

2016-08-10 16:11:43 +02:00