pkg: include missing <string.h>

My local environment seems to be seeing some pollution; we need
<string.h> for strlen.

PR: 284021
Fixes: 2e065d74a5b0e ("pkg: add a pkgsign_verify_data [...]")
MFC

pkg: include missing <string.h>

My local environment seems to be seeing some pollution; we need
<string.h> for strlen.

PR: 284021
Fixes: 2e065d74a5b0e ("pkg: add a pkgsign_verify_data [...]")
MFC after: immediately (trivial build fix)

show more ...

pkg: add a pkgsign_verify_data callback

This will be used to verify raw payloads, as if signed by pkg-key(8).
It will be used specifically in pkg(7) to verify .pubkeysig as published
by poudriere.

pkg: add a pkgsign_verify_data callback

This will be used to verify raw payloads, as if signed by pkg-key(8).
It will be used specifically in pkg(7) to verify .pubkeysig as published
by poudriere.

Amend verify_pubsignature() now to use it. For the RSA signer, we need
to verify using a sha256 of the data instead of the data itself.

Reviewed by: bapt
Differential Revision: https://reviews.freebsd.org/D48109

show more ...

pkg: abstract rsa out behind a pkgsign API

This mirrors a change we made in pkg(8), and will be used to next add
another signer that does ECC.

Reviewed by: bapt, emaste
Differential Revision: https

pkg: abstract rsa out behind a pkgsign API

This mirrors a change we made in pkg(8), and will be used to next add
another signer that does ECC.

Reviewed by: bapt, emaste
Differential Revision: https://reviews.freebsd.org/D48106

show more ...

pkg: pull rsa bits out of pkg.c

We'll eventually add a pkgsign abstraction over these similar to how we do
in pkg(8), but start by isolating these parts.

Reviewed by: bapt, emaste
Differential Revi

pkg: pull rsa bits out of pkg.c

We'll eventually add a pkgsign abstraction over these similar to how we do
in pkg(8), but start by isolating these parts.

Reviewed by: bapt, emaste
Differential Revision: https://reviews.freebsd.org/D48105

show more ...