mirror of
https://github.com/gentoo-mirror/gentoo.git
synced 2026-11-02 16:27:05 -08:00
Sergei Trofimovich
d6ff030025
Hackage security library Package-Manager: Portage-2.3.3, Repoman-2.3.1
33 lines
1.2 KiB
XML
33 lines
1.2 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
|
|
<pkgmetadata>
|
|
<maintainer type="project">
|
|
<email>haskell@gentoo.org</email>
|
|
<name>Gentoo Haskell</name>
|
|
</maintainer>
|
|
<use>
|
|
<flag name="use-network-uri">Get Network.URI from the network-uri package.</flag>
|
|
</use>
|
|
<longdescription>
|
|
The hackage security library provides both server and
|
|
client utilities for securing the Hackage package server
|
|
(<http://hackage.haskell.org/>). It is based on The Update
|
|
Framework (<http://theupdateframework.com/>), a set of
|
|
recommendations developed by security researchers at
|
|
various universities in the US as well as developers on the
|
|
Tor project (<https://www.torproject.org/>).
|
|
|
|
The current implementation supports only index signing,
|
|
thereby enabling untrusted mirrors. It does not yet provide
|
|
facilities for author package signing.
|
|
|
|
The library has two main entry points:
|
|
"Hackage.Security.Client" is the main entry point for
|
|
clients (the typical example being @cabal@), and
|
|
"Hackage.Security.Server" is the main entry point for
|
|
servers (the typical example being @hackage-server@).
|
|
|
|
This is a beta release.
|
|
</longdescription>
|
|
</pkgmetadata>
|