Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: quicklisp/quicklisp-bootstrap
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: master
Choose a base ref
...
head repository: quicklisp/quicklisp-bootstrap
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: pgp
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 6 commits
  • 1 file changed
  • 1 contributor

Commits on Feb 7, 2017

  1. Embed the Quicklisp release PGP key in quicklisp.lisp.

    @xach
    xach committed Feb 7, 2017
    Configuration menu
    Copy the full SHA
    3669f11 View commit details
    Browse the repository at this point in the history

  2. Bump the client version.

    @xach
    xach committed Feb 7, 2017
    Configuration menu
    Copy the full SHA
    24ba0fc View commit details
    Browse the repository at this point in the history

  3. Revert "Merge pull request #8 from tamurashingo/ProxyAuth" 

    quicklisp.lisp does not load cleanly with PR#8.
    @xach
    xach committed Feb 7, 2017
    Configuration menu
    Copy the full SHA
    e83ff25 View commit details
    Browse the repository at this point in the history

Commits on Feb 8, 2017

  1. Implement PGP signature verification and SHA256 checks. 

    This will use PGP to verify the client info file, then use the checksums
from that file to verify the files it references after they are
downloaded.

This is intended to mitigate main-in-the-middle attacks against
Quicklisp bootstrapping.

More work remains to be done on the client side.
    @xach
    xach committed Feb 8, 2017
    Configuration menu
    Copy the full SHA
    c7def4d View commit details
    Browse the repository at this point in the history

  2. Change "pgp" to "openpgp" in most places.

    @xach
    xach committed Feb 8, 2017
    Configuration menu
    Copy the full SHA
    9696317 View commit details
    Browse the repository at this point in the history

Commits on Sep 7, 2017

  1. Be a little more verbose about signature and digest verification.

    @xach
    xach committed Sep 7, 2017
    Configuration menu
    Copy the full SHA
    9502e0f View commit details
    Browse the repository at this point in the history
Loading