There was a ß in utils.py that I think was supposed to be a 0.  Either it needs
to be changed to a 0 or the character encoding needs to be declared at the top
of the source file.  I opted to change the character to a 0.
Signed-off-by: NMike O'Connor <stew@vireo.org>

Adjust the gpgv signature check. Add one more case of broken key to detect,
EXPKEYSIG. From gnupg docs:
    EXPKEYSIG   <long keyid>  <username>
    The signature with the keyid is good, but the signature was
    made by an expired key. The username is the primary one
    encoded in UTF-8 and %XX escaped.

Also, handle KEYEXPIRED right. The first argument given back is NOT the keyid,
it is the timestamp when the key expired. From gnupg docs:
    KEYEXPIRED <expire-timestamp>
    The key has expired.  expire-timestamp is the expiration time
    in seconds after the epoch.

    Note, that TIMESTAMP may either be a number with seconds since
    epoch or an ISO 8601 string which can be detected by the
    presence of the letter 'T' inside.
So lets go and see if we find a T, if not convert the epoch to something
more easily human readable in our reject message.
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

        * daklib/utils.py: move the html escape stuff here.
        * dak/examine_package.py: Remove the html escape stuff.
        * dak/queue_report.py: lotsa html changes to get more info on the
        page and to get Tinchos css foo working.
        * web/style.css: Added new stuff from Tincho
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

2008-09-08  Philipp Kern  <pkern@debian.org>

        * daklib/utils.py (build_file_list): do not die on very
        old dsc files without format header
Signed-off-by: NPhilipp Kern <pkern@debian.org>

Signed-off-by: NPhilipp Kern <pkern@debian.org>

The current check for additional entries in checksums-* which are not
covered by entries in files is flawed because files could be modified
by autobyhand or sometimes when the file's already in the pool.

We need to rework this to look into the original files dict instead.
Signed-off-by: NPhilipp Kern <pkern@debian.org>

For now dont warn if file is not found.
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

2008-09-07  Philipp Kern  <pkern@debian.org>

        * daklib/utils.py (check_hash): try..except..finally only
        works on python >=2.5.
Signed-off-by: NPhilipp Kern <pkern@debian.org>

2008-09-07  Philipp Kern  <pkern@debian.org>

        * daklib/utils.py (check_hash): change the comment and warn
        if a file is not found when checking the hashes (i.e. when
        it is probably in the pool)

	* daklib/utils.py (check_size): do not bail out if the file
	is not found, because it may be in the pool

        * dak/process_accepted.py (install): bail out and skip the
        upload when ensure_hashes fails, print the rejection messages
        as warnings
Signed-off-by: NPhilipp Kern <pkern@debian.org>

This reverts commit aa83ebb1.

Conflicts:

	ChangeLog

2008-08-28  Philipp Kern  <pkern@debian.org>

	* daklib/utils.py (check_hashes): adapt to different API, check
	sizes separately

	* daklib/utils.py (parse_changes, parse_deb822): refactor
	the string-based logic of parse_changes into a new function
	parse_deb822; parse_changes itself remains file-based

	* daklib/utils.py (hash_key): gives the key of a hash in the
	files dict

	* daklib/utils.py (create_hash, check_size): made more readable

	* daklib/utils.py (check_hash): just check the hashes and complain
	about missing checksums

	* daklib/utils.py (check_hash_fields): function to reject unknown
	checksums fields

	* daklib/utils.py (_ensure_changes_hash, _ensure_dsc_hash): helper
	functions for ensure_hashes; check their corresponding manifests'
	hashes

	* daklib/utils.py (ensure_hashes): retrieve the checksums fields
	from the original filecontents blob so that they do not need to
	be present in the .dak; refactored the actual checks by calling
	the aforementioned helper functions

	* daklib/utils.py (parse_checksums): parse a given checksums field
	in a manifest and insert the values found into the files dict,
	checking the file sizes on the way

Signed-off-by: NMark Hymers <mhy@debian.org>

This reverts commit f50c6be1.

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

Signed-off-by: NMark Hymers <mhy@debian.org>

build a file list for checksums-foo fields. Don't use float() to
compare formats, because Format: 1.10 should compare greater than
Format: 1.9 (use "1.9".split(".",1) and tuple comparison instead)

* dak/process_unchecked.py: check_md5sum becomes check_hashes
and check_hash. If changes format is 1.8 or later, also check
checksums-sha1 and checksums-sha256 for both .changes and .dsc.

Did a few style fixes. Moved determine_new and friends into daklib/queue. Removed some unneeded imports

(and do reject based on it if it has no GOODSIG also).