package conex

  1. Overview
  2. Docs
Establishing trust in community repositories


Dune Dependency





v0.11.1 (2020-03-15)

  • Use mirage-crypto instead of nocrypto

v0.11.0 (2019-12-21)

  • Adapt to X509 0.7.0 API

  • Avoid deprecation warnings by using stdlib-shims

  • Adjust opam repository file locations #13, now the whitelist is: packages/NV/opam and packages/NV/files/* where NV is either name.version or name/name.version

  • Various fixes for diff in the real world #13

0.10.1 (2018-09-08)

  • re-add file (with a 2 clause BSD license)

0.10.0 (2018-09-03)

  • adjusted to new conex design, lots of breaking changes

  • opam_encoding: maps use identifiers now, instead of strings - as does alg_type

  • conex_resource: use alg=data for encoding digests (instead of [ alg ; data ])

  • conex_resource: use hex encoding, rather than base64 for checksums

  • rename "package" to "releases" ; rename "release" to "checksums" (filenames)

  • conex_unix_private_key: store private keys in ~/.conex/.private, instead of having the repository included in the filename. this removes lots of magic from conex_author

  • conex_private: new module gathering private key handling and operations, replacing conex_unix_private_key and conex_crypto.SIGN

0.9.2 (2017-02-18)

  • conex_author: status subcommand: handle id argument properly

0.9.1 (2017-02-18)

  • conex_author:

    • key subcommand: argument 'all' queued invalid resources (using id = all)

    • init subcommand: sign at the end, to have a public key in the index

    • status subcommand: fix argument processing if both id and repo are present

    • verify subcommand: require repo, do not use id

  • crypto: trim result from pub_of_priv (nocrypto appends a newline, and breaks checksum)

  • conex: verify_janitors could never succeed (unless quorum = 0), because the team janitors (repo.teams) was empty while validating the team resource

0.9.0 (2017-02-16)

  • initial release