283 Commits (09b14ceffcb5a552bb87fca38c307d2634411581)

Author	SHA1	Message	Date
Carla Schroder	0c9eaede41	Some typo corrections in occ command output	10 years ago
Lukas Reschke	933f60e314	Update author information ... Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	10 years ago
Joas Schilling	560085e1a4	Make sure to init the users Filesystem so we can add group shares	10 years ago
Joas Schilling	4eef8afe9b	Remove inaccurate "is already enabled" message	10 years ago
Pierre Ozoux	e611b85f51	typo	10 years ago
Thomas Müller	60c1ff7634	Register process control signel handlers only on execution of the command	10 years ago
Victor Dubiniuk	5910b82de1	Cut authors list. Declare a member variable	10 years ago
Victor Dubiniuk	b91bc80ea4	Optional path parameter	10 years ago
Victor Dubiniuk	fef7fc1248	CLI commands to check app and core signatures	10 years ago
Lukas Reschke	5f300ac275	Allow specifing the signing path	10 years ago
Morris Jobke	0a66734416	Revert "setting to skip migration tests by default"	10 years ago
Morris Jobke	2e444e6e37	setting to skip migration tests by default ... * if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default	10 years ago
Thomas Müller	0202acb926	Move signal handling to the base class to allow other commands to reuse this feature	10 years ago
Morris Jobke	e7aab8f31f	Print output for integrity check during ./occ upgrade	10 years ago
Lukas Reschke	ea367b598a	Use path instead of app id ... This change requires the usage of a path instead of the App ID when signing code. This has the advantage that developers can also sign code under a different location to make it easier. (e.g. remove `.git`, …) Also it adds an example command usage as well as a link to the documentation	10 years ago
Joas Schilling	56184f799e	Make it possible to enable apps for groups only via occ	10 years ago
Joas Schilling	78a02d1b2f	Make it possible to disable apps via the console, which are not enabled for the current user	10 years ago
Joas Schilling	d2285113a8	Make sure to list "group enabled" apps as enabled ... also when they are not enabled for the current user	10 years ago
Joas Schilling	fc08f71c12	Sort the list before saving	10 years ago
Joas Schilling	f2cb03e155	Allow array recursion in get	10 years ago
Joas Schilling	a06f0256a9	Allow deleting a nested system config value	10 years ago
Joas Schilling	00ab50defc	Retain backwards compatibility	10 years ago
Robin McCorkell	b9d384d837	occ config:system:set can now set other value types ... Integers, doubles, booleans and even arrays can now be set, with the --type=... option. Array setting can be specified by passing multiple name arguments, e.g. `./occ config:system:set redis port --value=123 --type=integer`	10 years ago
Robin Appelman	c67a09112b	Add occ commands to manager trusted certificates	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Joas Schilling	c55da1fc8d	Add a warning to the app:check-code if the version is missing	10 years ago
Morris Jobke	190cc2bb67	Remove OC_DB::getConnection	10 years ago
Björn Schießle	58b1221ad3	don't show previous log level in upgrade message	10 years ago
Morris Jobke	ed98cdf532	Use OCP\Util::getVersion instead of the internal private implementation	10 years ago
Victor Dubiniuk	b59285d0d0	Add occ command to get app path	10 years ago
Morris Jobke	d39b018893	Allow occ install on OS X - same behaviour as web setup	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Victor Dubiniuk	8d9353a640	Add cmdline key to show shipped/non-shipped apps only	10 years ago
Joas Schilling	fe04451cb1	Do not allow two different version requirements	10 years ago
Morris Jobke	f46d531a4f	Replace some OC_Config calls with ILogger methods	10 years ago
Joas Schilling	e5a7e3124a	Add a repair step that checks for group membership on shares	10 years ago
Morris Jobke	3b249f1967	Revert "setting to skip migration tests by default" ... This reverts commit 7cbdd9b90b.	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Joas Schilling	9200bbeaba	Update: state which step we are going to start and warn if it might be slow	10 years ago
Thomas Müller	4cb5970947	Always pass in ILogger	10 years ago
Morris Jobke	8366ce2767	deduplicate @xenopathic	10 years ago
Morris Jobke	b945d71384	update licence headers via script	10 years ago
Morris Jobke	7cbdd9b90b	setting to skip migration tests by default ... * if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default	10 years ago
Morris Jobke	5acb38b5b3	[upgrade] switch to debug logging on upgrade ... * resets afterwards * adds output about the previous log level	10 years ago
Joas Schilling	faba02564a	Move the filtering of sensitive data to the config class	10 years ago
Morris Jobke	5a3e57c2f5	encode arrays as string	10 years ago
Morris Jobke	9b652ed5d5	[App Code Check] add check for version and mandatory fields ... * ref #17598 * including unit tests for mandatory fields/versions	10 years ago
Bjoern Schiessle	03e05d5dbc	improve description and help output for the encrypt-all and decrypt-all command	10 years ago
Joas Schilling	5472a5f455	Also catch exceptions on encryptAll and reset trashbin and singleUser mode	10 years ago
Joas Schilling	2f102c1f0d	Do not set single user in constructor	10 years ago