From vodonosov at mail.ru Sat Mar 10 11:54:45 2007 From: vodonosov at mail.ru (Vodonosov Anton) Date: Sat, 10 Mar 2007 14:54:45 +0300 Subject: [asdf-install-devel] prevent loading signature filse when *verify-gpg-signatures* is nil Message-ID: Hello! I would like to suggest to add a line to asdf-install source code to prevent loading signature files when *verify-gpg-signatures* is nil. I'm installing Edi Weitz' hunchentoot, which depends on Kevin Rosenberg's md5, but md5-1.8.5.tar.gz.asc file isn't provided for md5. The version of asdf-install I'm using is just downloaded from http://common-lisp.net/project/asdf-install/asdf-install_latest.tar.gz. We could change it like this: File installer.lisp, function download-files-for-package. Note (when (verify-gpg-signatures-p... (defun download-files-for-package (package-name-or-url) (multiple-value-bind (package-url package-file) (download-url-to-temporary-file (download-link-for-package package-name-or-url)) (multiple-value-bind (signature-url signature-file) ;; this WHEN ensures that signature files are not downloaded ;; if *verify-gpg-signatures* is nil (when (verify-gpg-signatures-p package-name-or-url) (download-url-to-temporary-file (download-link-for-signature package-url))) (declare (ignore signature-url)) (values package-file signature-file)))) Regards, -Anton From gwking at metabang.com Sun Mar 11 14:32:39 2007 From: gwking at metabang.com (Gary King) Date: Sun, 11 Mar 2007 10:32:39 -0400 Subject: [asdf-install-devel] prevent loading signature filse when *verify-gpg-signatures* is nil In-Reply-To: References: Message-ID: <996C76D7-9AE7-4EB2-AAB7-B23AB2A99E93@metabang.com> This makes good sense; I will try to add your patch and post it today,. thanks, On Mar 10, 2007, at 6:54 AM, Vodonosov Anton wrote: > Hello! > > I would like to suggest to add a line to asdf-install source code > to prevent loading signature files when *verify-gpg-signatures* is > nil. > > I'm installing Edi Weitz' hunchentoot, which depends on Kevin > Rosenberg's md5, but md5-1.8.5.tar.gz.asc file isn't provided for > md5. The version of asdf-install I'm using is just downloaded from > http://common-lisp.net/project/asdf-install/asdf- > install_latest.tar.gz. > > We could change it like this: > > File installer.lisp, function download-files-for-package. Note > (when (verify-gpg-signatures-p... > > (defun download-files-for-package (package-name-or-url) > (multiple-value-bind (package-url package-file) > (download-url-to-temporary-file > (download-link-for-package package-name-or-url)) > (multiple-value-bind (signature-url signature-file) > ;; this WHEN ensures that signature files are not downloaded > ;; if *verify-gpg-signatures* is nil > (when (verify-gpg-signatures-p package-name-or-url) > (download-url-to-temporary-file > (download-link-for-signature package-url))) > (declare (ignore signature-url)) > (values > package-file signature-file)))) > > > Regards, > -Anton > _______________________________________________ > asdf-install-devel mailing list > asdf-install-devel at common-lisp.net > http://common-lisp.net/cgi-bin/mailman/listinfo/asdf-install-devel -- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM From gwking at metabang.com Mon Mar 12 02:25:50 2007 From: gwking at metabang.com (Gary King) Date: Sun, 11 Mar 2007 22:25:50 -0400 Subject: [asdf-install-devel] prevent loading signature filse when *verify-gpg-signatures* is nil In-Reply-To: References: Message-ID: Hi again, I'm going to use the following patch instead of yours. The only difference is that I place the if statement before multiple-value- bind call instead of after. This should go out tomorrow as ASDF- Install 0.6.7. thanks again, > --- old-asdf-install/asdf-install/installer.lisp 2007-03-11 > 22:23:27.0000000 > 00 -0400 > +++ new-asdf-install/asdf-install/installer.lisp 2007-03-11 > 22:23:27.0000000 > 00 -0400 > @@ -156,12 +156,13 @@ > (multiple-value-bind (package-url package-file) > (download-url-to-temporary-file > (download-link-for-package package-name-or-url)) > - (multiple-value-bind (signature-url signature-file) > - (download-url-to-temporary-file > - (download-link-for-signature package-url)) > - (declare (ignore signature-url)) > - (values > - package-file signature-file)))) > + (if (verify-gpg-signatures-p package-name-or-url) > + (multiple-value-bind (signature-url signature-file) > + (download-url-to-temporary-file > + (download-link-for-signature package-url)) > + (declare (ignore signature-url)) > + (values package-file signature-file)) > + (values package-file nil)))) On Mar 10, 2007, at 6:54 AM, Vodonosov Anton wrote: > Hello! > > I would like to suggest to add a line to asdf-install source code > to prevent loading signature files when *verify-gpg-signatures* is > nil. > > I'm installing Edi Weitz' hunchentoot, which depends on Kevin > Rosenberg's md5, but md5-1.8.5.tar.gz.asc file isn't provided for > md5. The version of asdf-install I'm using is just downloaded from > http://common-lisp.net/project/asdf-install/asdf- > install_latest.tar.gz. > > We could change it like this: > > File installer.lisp, function download-files-for-package. Note > (when (verify-gpg-signatures-p... > > (defun download-files-for-package (package-name-or-url) > (multiple-value-bind (package-url package-file) > (download-url-to-temporary-file > (download-link-for-package package-name-or-url)) > (multiple-value-bind (signature-url signature-file) > ;; this WHEN ensures that signature files are not downloaded > ;; if *verify-gpg-signatures* is nil > (when (verify-gpg-signatures-p package-name-or-url) > (download-url-to-temporary-file > (download-link-for-signature package-url))) > (declare (ignore signature-url)) > (values > package-file signature-file)))) > > > Regards, > -Anton > _______________________________________________ > asdf-install-devel mailing list > asdf-install-devel at common-lisp.net > http://common-lisp.net/cgi-bin/mailman/listinfo/asdf-install-devel -- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM From vodonosov at mail.ru Mon Mar 12 07:12:56 2007 From: vodonosov at mail.ru (Vodonosov Anton) Date: Mon, 12 Mar 2007 10:12:56 +0300 Subject: =?koi8-r?Q?Re[2]=3A_[asdf-install-devel]_prevent_loading_signature_filse_when_*verify-gpg-signatures*_is_nil?= In-Reply-To: References: Message-ID: Thanks -----Original Message----- From: Gary King To: Vodonosov Anton Date: Sun, 11 Mar 2007 22:25:50 -0400 Subject: Re: [asdf-install-devel] prevent loading signature filse when *verify-gpg-signatures* is nil > > Hi again, > > I'm going to use the following patch instead of yours. The only > difference is that I place the if statement before multiple-value- > bind call instead of after. This should go out tomorrow as ASDF- > Install 0.6.7. > > thanks again, > > > --- old-asdf-install/asdf-install/installer.lisp 2007-03-11 > > 22:23:27.0000000 > > 00 -0400 > > +++ new-asdf-install/asdf-install/installer.lisp 2007-03-11 > > 22:23:27.0000000 > > 00 -0400 > > @@ -156,12 +156,13 @@ > > (multiple-value-bind (package-url package-file) > > (download-url-to-temporary-file > > (download-link-for-package package-name-or-url)) > > - (multiple-value-bind (signature-url signature-file) > > - (download-url-to-temporary-file > > - (download-link-for-signature package-url)) > > - (declare (ignore signature-url)) > > - (values > > - package-file signature-file)))) > > + (if (verify-gpg-signatures-p package-name-or-url) > > + (multiple-value-bind (signature-url signature-file) > > + (download-url-to-temporary-file > > + (download-link-for-signature package-url)) > > + (declare (ignore signature-url)) > > + (values package-file signature-file)) > > + (values package-file nil)))) > > > > On Mar 10, 2007, at 6:54 AM, Vodonosov Anton wrote: > > > Hello! > > > > I would like to suggest to add a line to asdf-install source code > > to prevent loading signature files when *verify-gpg-signatures* is > > nil. > > > > I'm installing Edi Weitz' hunchentoot, which depends on Kevin > > Rosenberg's md5, but md5-1.8.5.tar.gz.asc file isn't provided for > > md5. The version of asdf-install I'm using is just downloaded from > > http://common-lisp.net/project/asdf-install/asdf- > > install_latest.tar.gz. > > > > We could change it like this: > > > > File installer.lisp, function download-files-for-package. Note > > (when (verify-gpg-signatures-p... > > > > (defun download-files-for-package (package-name-or-url) > > (multiple-value-bind (package-url package-file) > > (download-url-to-temporary-file > > (download-link-for-package package-name-or-url)) > > (multiple-value-bind (signature-url signature-file) > > ;; this WHEN ensures that signature files are not downloaded > > ;; if *verify-gpg-signatures* is nil > > (when (verify-gpg-signatures-p package-name-or-url) > > (download-url-to-temporary-file > > (download-link-for-signature package-url))) > > (declare (ignore signature-url)) > > (values > > package-file signature-file)))) > > > > > > Regards, > > -Anton > > _______________________________________________ > > asdf-install-devel mailing list > > asdf-install-devel at common-lisp.net > > http://common-lisp.net/cgi-bin/mailman/listinfo/asdf-install-devel > > -- > Gary Warren King, metabang.com > Cell: (413) 885 9127 > Fax: (206) 338-4052 > gwkkwg on Skype * garethsan on AIM > > > > From mega at retes.hu Mon Mar 12 11:25:50 2007 From: mega at retes.hu (=?iso-8859-1?q?G=E1bor_Melis?=) Date: Mon, 12 Mar 2007 12:25:50 +0100 Subject: [asdf-install-devel] installing from local tarball ... Message-ID: <200703121225.50221.mega@retes.hu> ... seems to be broken. CL-USER> (asdf-install:install "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz") Install where? 1) Current world: System in /home/mega/cvswork/Library/world/asdf-world/example/worlds/example.world Files in /home/mega/cvswork/Library/world/asdf-world/example/worlds/../site/ 2) System-wide install: System in /usr/local/asdf-install/site-systems/ Files in /usr/local/asdf-install/site/ 3) Personal installation: System in /home/mega/.asdf-install-dir/systems/ Files in /home/mega/.asdf-install-dir/site/ 0) Abort installation. --> 3 hello/ hello/hello.asd hello/hello.lisp ;;; ASDF-INSTALL: Found system definition: /home/mega/.asdf-install-dir/site/hello/hello.asd ;;; ASDF-INSTALL: Loading system "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz" via ASDF. component "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz" not found [Condition of type ASDF:MISSING-COMPONENT] Restarts: 0: [RETRY] Retry installation 1: [ABORT] Return to SLIME's top level. 2: [ABORT] Abort entirely from this (lisp) process. Backtrace: 0: (SWANK:SWANK-DEBUGGER-HOOK component "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz" not found #) 1: (ERROR ASDF:MISSING-COMPONENT :REQUIRES "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz") 2: (ASDF:FIND-SYSTEM "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz") 3: (ASDF:OPERATE ASDF:LOAD-OP "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz") 4: (ASDF-INSTALL::LOAD-PACKAGE "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz") 5: ((LABELS ASDF-INSTALL:INSTALL ASDF-INSTALL::ONE-ITER) ("/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz")) 6: (ASDF-INSTALL:INSTALL "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz") 7: (EVAL (ASDF-INSTALL:INSTALL "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz")) please CC me, I'm not on the list. Cheers, Gabor Melis From gwking at metabang.com Mon Mar 12 12:42:21 2007 From: gwking at metabang.com (Gary King) Date: Mon, 12 Mar 2007 08:42:21 -0400 Subject: [asdf-install-devel] installing from local tarball ... In-Reply-To: <200703121225.50221.mega@retes.hu> References: <200703121225.50221.mega@retes.hu> Message-ID: <9A71FD97-FC66-4A5B-864E-78951BE7456E@metabang.com> Thanks for the fault report. I will look at this later today. On Mar 12, 2007, at 7:25 AM, G?bor Melis wrote: > ... seems to be broken. > > CL-USER> (asdf-install:install "/home/mega/cvswork/Library/world/ > asdf-world/example/hello.tar.gz") > Install where? > 1) Current world: > System in /home/mega/cvswork/Library/world/asdf-world/example/ > worlds/example.world > Files in /home/mega/cvswork/Library/world/asdf-world/example/ > worlds/../site/ > 2) System-wide install: > System in /usr/local/asdf-install/site-systems/ > Files in /usr/local/asdf-install/site/ > 3) Personal installation: > System in /home/mega/.asdf-install-dir/systems/ > Files in /home/mega/.asdf-install-dir/site/ > 0) Abort installation. > --> 3 > hello/ > hello/hello.asd > hello/hello.lisp > ;;; ASDF-INSTALL: Found system definition: /home/mega/.asdf-install- > dir/site/hello/hello.asd > ;;; ASDF-INSTALL: Loading system "/home/mega/cvswork/Library/world/ > asdf-world/example/hello.tar.gz" via ASDF. > > > component > "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz" > not found > [Condition of type ASDF:MISSING-COMPONENT] > > Restarts: > 0: [RETRY] Retry installation > 1: [ABORT] Return to SLIME's top level. > 2: [ABORT] Abort entirely from this (lisp) process. > > Backtrace: > 0: (SWANK:SWANK-DEBUGGER-HOOK > component > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz" > not found > #) > 1: (ERROR ASDF:MISSING-COMPONENT :REQUIRES > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz") > 2: (ASDF:FIND-SYSTEM "/home/mega/cvswork/Library/world/asdf-world/ > example/hello.tar.gz") > 3: (ASDF:OPERATE ASDF:LOAD-OP > "/home/mega/cvswork/Library/world/asdf-world/ > example/hello.tar.gz") > 4: (ASDF-INSTALL::LOAD-PACKAGE > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz") > 5: ((LABELS ASDF-INSTALL:INSTALL ASDF-INSTALL::ONE-ITER) > ("/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz")) > 6: (ASDF-INSTALL:INSTALL > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz") > 7: (EVAL (ASDF-INSTALL:INSTALL > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz")) > > > please CC me, I'm not on the list. > > Cheers, Gabor Melis > _______________________________________________ > asdf-install-devel mailing list > asdf-install-devel at common-lisp.net > http://common-lisp.net/cgi-bin/mailman/listinfo/asdf-install-devel -- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM From gwking at metabang.com Tue Mar 13 02:47:37 2007 From: gwking at metabang.com (Gary King) Date: Mon, 12 Mar 2007 22:47:37 -0400 Subject: [asdf-install-devel] Announce: ASDF-Install 0.6.7 Message-ID: <60D8BB93-59FC-4D29-8485-F615293FE108@metabang.com> Version 0.6.7 of [ASDF-Install][] corrects a bug that Vodonosov Anton reported: ASDF-Install was trying to download the signature file of a package even when you didn't want it to verify the GPG signature. Thanks! Coming soon will be a fix / update for the bug Gabor Melis reported regarding installation from local tarballs. [ASDF-Install]: http://common-lisp.net/project/asdf-install/ -- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM From gwking at metabang.com Thu Mar 15 21:28:59 2007 From: gwking at metabang.com (Gary King) Date: Thu, 15 Mar 2007 17:28:59 -0400 Subject: [asdf-install-devel] installing from local tarball ... In-Reply-To: <200703121225.50221.mega@retes.hu> References: <200703121225.50221.mega@retes.hu> Message-ID: <8C7BC90B-9901-44A0-8273-2EEA99932B82@metabang.com> Hi Gabor, I have verified the problem and fixed it in my sources (embarrassingly, it's been broken for quite some time!). I've added a test to the regression suite so that it shouldn't be able to bite me again. I hope to post the fixes by tomorrow at the latest and will let you know when I finish. Thanks again for pointing out the problem. On Mar 12, 2007, at 7:25 AM, G?bor Melis wrote: > ... seems to be broken. > > CL-USER> (asdf-install:install "/home/mega/cvswork/Library/world/ > asdf-world/example/hello.tar.gz") > Install where? > 1) Current world: > System in /home/mega/cvswork/Library/world/asdf-world/example/ > worlds/example.world > Files in /home/mega/cvswork/Library/world/asdf-world/example/ > worlds/../site/ > 2) System-wide install: > System in /usr/local/asdf-install/site-systems/ > Files in /usr/local/asdf-install/site/ > 3) Personal installation: > System in /home/mega/.asdf-install-dir/systems/ > Files in /home/mega/.asdf-install-dir/site/ > 0) Abort installation. > --> 3 > hello/ > hello/hello.asd > hello/hello.lisp > ;;; ASDF-INSTALL: Found system definition: /home/mega/.asdf-install- > dir/site/hello/hello.asd > ;;; ASDF-INSTALL: Loading system "/home/mega/cvswork/Library/world/ > asdf-world/example/hello.tar.gz" via ASDF. > > > component > "/home/mega/cvswork/Library/world/asdf-world/example/hello.tar.gz" > not found > [Condition of type ASDF:MISSING-COMPONENT] > > Restarts: > 0: [RETRY] Retry installation > 1: [ABORT] Return to SLIME's top level. > 2: [ABORT] Abort entirely from this (lisp) process. > > Backtrace: > 0: (SWANK:SWANK-DEBUGGER-HOOK > component > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz" > not found > #) > 1: (ERROR ASDF:MISSING-COMPONENT :REQUIRES > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz") > 2: (ASDF:FIND-SYSTEM "/home/mega/cvswork/Library/world/asdf-world/ > example/hello.tar.gz") > 3: (ASDF:OPERATE ASDF:LOAD-OP > "/home/mega/cvswork/Library/world/asdf-world/ > example/hello.tar.gz") > 4: (ASDF-INSTALL::LOAD-PACKAGE > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz") > 5: ((LABELS ASDF-INSTALL:INSTALL ASDF-INSTALL::ONE-ITER) > ("/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz")) > 6: (ASDF-INSTALL:INSTALL > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz") > 7: (EVAL (ASDF-INSTALL:INSTALL > "/home/mega/cvswork/Library/world/asdf-world/example/ > hello.tar.gz")) > > > please CC me, I'm not on the list. > > Cheers, Gabor Melis > _______________________________________________ > asdf-install-devel mailing list > asdf-install-devel at common-lisp.net > http://common-lisp.net/cgi-bin/mailman/listinfo/asdf-install-devel -- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM From gwking at metabang.com Sun Mar 18 01:36:23 2007 From: gwking at metabang.com (Gary King) Date: Sat, 17 Mar 2007 21:36:23 -0400 Subject: [asdf-install-devel] Announce: 0.6.8 Message-ID: Hot on the heels of 0.6.7, [ASDF-Install][] fixes a long-standing bug discovered by Gabor Melis: ASDF-Install was no longer working with local archives. With 0.6.8, you can now once again point ASDF-Install at a `tar.gz` file on your computer and happily install it. 0.6.8 also makes some changes aimed at simplifying the portability layer and adds a few more tests. I recently installed [Parallels][] on my OS X box but haven't gotten gotten setup enough to use it for Windows testing. I hope to check things out over this weekend but the best laid plans... So, please let me know right away if I've made something worse. [ASDF-Install]: http://common-lisp.net/project/asdf-install/ [Parallels]: http://www.parallels.com/en/products/workstation/mac/ -- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM From mega at retes.hu Tue Mar 20 08:35:56 2007 From: mega at retes.hu (=?iso-8859-1?q?G=E1bor_Melis?=) Date: Tue, 20 Mar 2007 09:35:56 +0100 Subject: [asdf-install-devel] installing from local tarball ... In-Reply-To: <8C7BC90B-9901-44A0-8273-2EEA99932B82@metabang.com> References: <200703121225.50221.mega@retes.hu> <8C7BC90B-9901-44A0-8273-2EEA99932B82@metabang.com> Message-ID: <200703200935.56939.mega@retes.hu> On Thursday 15 March 2007 22:28, Gary King wrote: > Hi Gabor, > > I have verified the problem and fixed it in my sources > (embarrassingly, it's been broken for quite some time!). I've added a > test to the regression suite so that it shouldn't be able to bite me > again. I hope to post the fixes by tomorrow at the latest and will > let you know when I finish. Thanks for fixing it so quickly, it works. Did you know that some fasls and the scratch/ dir are in the distributed tarball? Cheers, G?bor From gwking at metabang.com Tue Mar 20 14:17:53 2007 From: gwking at metabang.com (Gary King) Date: Tue, 20 Mar 2007 10:17:53 -0400 Subject: [asdf-install-devel] installing from local tarball ... In-Reply-To: <200703200935.56939.mega@retes.hu> References: <200703121225.50221.mega@retes.hu> <8C7BC90B-9901-44A0-8273-2EEA99932B82@metabang.com> <200703200935.56939.mega@retes.hu> Message-ID: Ack. No, I didn't; thanks for pointing that out. On Mar 20, 2007, at 4:35 AM, G?bor Melis wrote: > On Thursday 15 March 2007 22:28, Gary King wrote: >> Hi Gabor, >> >> I have verified the problem and fixed it in my sources >> (embarrassingly, it's been broken for quite some time!). I've added a >> test to the regression suite so that it shouldn't be able to bite me >> again. I hope to post the fixes by tomorrow at the latest and will >> let you know when I finish. > > Thanks for fixing it so quickly, it works. > > Did you know that some fasls and the scratch/ dir are in the > distributed > tarball? > > Cheers, G?bor > _______________________________________________ > asdf-install-devel mailing list > asdf-install-devel at common-lisp.net > http://common-lisp.net/cgi-bin/mailman/listinfo/asdf-install-devel -- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM