For now, I wanted to document my progress so far.
I have a branch which contains an test which runs a mockup http server
(thanks to intrigeri for recommendations etc.) and runs an
ftpmasterapi command against it to check things are working.
The work which remains to be done is:
1. Write test case shell code to generate a mockup of the
current and future LE situations
2. Convert the test case to TLS
3. Implement code in dgit to support cert pinning
4. Add the cert pinning to the test case config
5. Add appropriate failure cases (t-expect-fail)
For 2 and 3 we have helpful runes from intrigeri, I think. I'm
finding 1 a bit of a struggle.
My current WIP branch (rebasing) is here:
https://salsa.debian.org/dgit-team/dgit/commits/wip.tls
Ian.
--
Ian Jackson <ijack...@chiark.greenend.org.uk> These opinions are my own.
If I emailed you from an address @fyvzl.net or @evade.org.uk, that is
a private address which bypasses my fierce spamfilter.
