src-test2/etc/pkg, branch releng/11.2

Rename stable/11 from PRERELEASE to BETA1 as part of the 11.2-RELEASE

2018-05-10T23:58:33Z

cycle. Update the default pkg(8) repository to the 'quarterly' branch to prevent further 11.2 builds from downgrading packages when invoking 'pkg upgrade' for the duration of the cycle. Approved by: re (implicit) Sponsored by: The FreeBSD Foundation

Give hint on how to disable the default repository.

2014-03-30T15:24:17Z

Discussed with: bapt MFC after: instantly (preparing EN)

Enabled should be a boolean, not a string

2013-11-16T15:54:46Z

MFC after: 2 days

Use proper capitalization for FreeBSD.org

2013-11-05T02:22:04Z

Approved by: bapt MFC after: 2 days

Enable fingerprint checking as the currently known

2013-11-05T02:20:49Z

fingerprint has an uploaded signature on all mirrors. Approved by: bapt MFC after: 2 days

Move /etc/keys to /usr/share/keys where users are less likely to modify them.

2013-10-29T15:07:54Z

Requested by: secteam (cperciva, des) Approved by: bapt

Disable fingerprint checking for now as the pkg repository mirrors will

2013-10-26T14:19:57Z

not receive the signature until later this week. Approved by: bapt

Support checking signature for pkg bootstrap.

2013-10-26T03:43:02Z

If the pkg.conf is configured with SIGNATURE_TYPE: FINGERPRINTS, and FINGERPRINTS: /etc/keys/pkg then a pkg.sig file is fetched along with pkg.txz. The signature contains the signature provided by the signing server, and the public key. The .sig is the exact output from the signing server in the following format: SIGNATURE CERT END The signature is verified with the following logic: - If the .sig file is missing, it fails. - If the .sig doesn't validate, it fails. - If the public key in the .sig is not in the known trusted fingerprints, it fails. - If the public key is in the revoked key list, it fails. Approved by: bapt MFC after: 2 days Discussed by: bapt with des, jonathan, gavin

Add support for reading configuration files from /etc/pkg.

2013-10-26T03:31:05Z

For now only /etc/pkg/FreeBSD.conf is supported. Its style is: Repo: { URL: "...", MIRROR_TYPE: "...", ... } The configuration will be read from /usr/local/etc/pkg.conf if exists, otherwise /etc/pkg/FreeBSD.conf Approved by: bapt MFC after: 2 days