repo: new function ostree_repo_remote_get_gpg_verify_summary

It allows to specify whether GPG verification for the summary file is
enabled for a specific repository.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

diff --git a/doc/ostree-sections.txt b/doc/ostree-sections.txt
index 8149b5ef6e579d367afb8bb063b9d609c716bed5..1e488e00b1f3a9b6a1c2d06e3b24c65b401e5ca0 100644 (file)
--- a/doc/ostree-sections.txt
+++ b/doc/ostree-sections.txt
@@ -233,6 +233,7 @@ ostree_repo_remote_change
 ostree_repo_remote_list
 ostree_repo_remote_get_url
 ostree_repo_remote_get_gpg_verify
+ostree_repo_remote_get_gpg_verify_summary
 ostree_repo_remote_gpg_import
 ostree_repo_remote_fetch_summary
 ostree_repo_get_parent

diff --git a/doc/ostree.repo-config.xml b/doc/ostree.repo-config.xml
index 38b7a0bf48557150bf77c642d37628662aab362a..c77ccc6ec77d0b5153be1a746d8c95b645c45b50 100644 (file)
--- a/doc/ostree.repo-config.xml
+++ b/doc/ostree.repo-config.xml
@@ -148,6 +148,15 @@ Boston, MA 02111-1307, USA.
         manual under GPG.</para></listitem>
       </varlistentry>
 
+      <varlistentry>
+        <term><varname>gpg-verify-summary</varname></term>
+        <listitem><para>A boolean value, defaults to false.
+        Controls whether or not OSTree will check if the summary
+        is signed by a known GPG key.
+        For more information, see the <citerefentry><refentrytitle>ostree</refentrytitle><manvolnum>1</manvolnum></citerefentry>
+        manual under GPG.</para></listitem>
+      </varlistentry>
+
       <varlistentry>
         <term><varname>tls-permissive</varname></term>
         <listitem><para>A boolean value, defaults to false.  By

diff --git a/src/libostree/ostree-repo.c b/src/libostree/ostree-repo.c
index 56f7b29a5fa07e1c3e7a7773e953b52084a1e0ab..badc8ff9833226aa6bd5897d9cddf45014340223 100644 (file)
--- a/src/libostree/ostree-repo.c
+++ b/src/libostree/ostree-repo.c
@@ -1272,6 +1272,29 @@ ostree_repo_remote_get_gpg_verify (OstreeRepo  *self,
                                                 TRUE, out_gpg_verify, error);
 }
 
+/**
+ * ostree_repo_remote_get_gpg_verify_summary:
+ * @self: Repo
+ * @name: Name of remote
+ * @out_gpg_verify_summary: (out) (allow-none): Remote's GPG option
+ * @error: Error
+ *
+ * Return whether GPG verification of the summary is enabled for the remote
+ * named @name through @out_gpg_verify_summary.  It is an error if the provided
+ * remote does not exist.
+ *
+ * Returns: %TRUE on success, %FALSE on failure
+ */
+gboolean
+ostree_repo_remote_get_gpg_verify_summary (OstreeRepo  *self,
+                                           const char  *name,
+                                           gboolean    *out_gpg_verify_summary,
+                                           GError     **error)
+{
+  return _ostree_repo_get_remote_boolean_option (self, name, "gpg-verify-summary",
+                                                 FALSE, out_gpg_verify_summary, error);
+}
+
 /**
  * ostree_repo_remote_gpg_import:
  * @self: Self

diff --git a/src/libostree/ostree-repo.h b/src/libostree/ostree-repo.h
index ce81c464d0a6ea655705cf8ce5b3a72dc130bc61..e6937b5ff3a992ed9626a3aab580d27ec995849b 100644 (file)
--- a/src/libostree/ostree-repo.h
+++ b/src/libostree/ostree-repo.h
@@ -112,6 +112,11 @@ gboolean      ostree_repo_remote_get_gpg_verify (OstreeRepo  *self,
                                                  gboolean    *out_gpg_verify,
                                                  GError     **error);
 
+gboolean      ostree_repo_remote_get_gpg_verify_summary (OstreeRepo  *self,
+                                                         const char  *name,
+                                                         gboolean    *out_gpg_verify_summary,
+                                                         GError     **error);
+
 gboolean      ostree_repo_remote_gpg_import (OstreeRepo         *self,
                                              const char         *name,
                                              GInputStream       *source_stream,