10 Commits (555ea93b1cfc19ead7e382297e4c8d5698652bc8)

Author	SHA1	Message	Date
Arthur Schiwon	d96e8f5810	adopt to Controller constructor changes	10 years ago
Arthur Schiwon	ceeb44bd04	Initial work on Apps page split: ... * interfaces for the Admin settings (IAdmin) and section (ISection) * SettingsManager service * example setup with LDAP app	10 years ago
Morris Jobke	5da813f477	Log exception that is thrown by internet connection check	10 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Joas Schilling	2c988ecbf4	Use the themed Defaults everywhere	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Christoph Wurst	6495534bcd	add button to add new device tokens	10 years ago
Christoph Wurst	12431aa399	list user's auth tokens on the personal settings page	10 years ago
Lukas Reschke	433c0160b6	Move OC\Core and OC\Settings to composer autoloader	10 years ago
Lukas Reschke	933f60e314	Update author information ... Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Robin Appelman	c15cab7ed6	Allow admins to add system wide root certificates	10 years ago
Roeland Jago Douma	a619629ac0	Only try to load avatars in the user list if there is any	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF\nBQAwIzEhMB8GA1UECgwYb3duQ2xvdWQgQ29kZSBTaWduaW5nIENBMB4XDTE1MTAx\nNDEzMTcxMFoXDTE2MTAxNDEzMTcxMFowEzERMA8GA1UEAwwIY29udGFjdHMwgZ8w\nDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANoQesGdCW0L2L+a2xITYipixkScrIpB\nkX5Snu3fs45MscDb61xByjBSlFgR4QI6McoCipPw4SUr28EaExVvgPSvqUjYLGps\nfiv0Cvgquzbx/X3mUcdk9LcFo1uWGtrTfkuXSKX41PnJGTr6RQWGIBd1V52q1qbC\nJKkfzyeMeuQfAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAvF/KIhRMQ3tYTmgHWsiM\nwDMgIDb7iaHF0fS+/Nvo4PzoTO/trev6tMyjLbJ7hgdCpz/1sNzE11Cibf6V6dsz\njCE9invP368Xv0bTRObRqeSNsGogGl5ceAvR0c9BG+NRIKHcly3At3gLkS2791bC\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Lukas Reschke	c6f6a8758b	Drop OC_SubAdmin and replace usages	10 years ago
Bjoern Schiessle	dc5e89e624	also block certificate management in the back-end if external storages are disabled for the user	11 years ago
Lukas Reschke	0d515de13e	Detect old NSS and OpenSSL versions ... This will detect old NSS and OpenSSL versions and show appropriate errors in the admin interface. Fixes https://github.com/owncloud/core/issues/17901	11 years ago
Bjoern Schiessle	3000f0125f	don't move keys if the key where already moved in a previous migration run	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Lukas Reschke	20a6073a9f	Migrate personal certificate handling into AppFramework controllers ... Also added unit-tests and better error-handling	11 years ago
Bjoern Schiessle	d2ef73367c	allow user to start migration in admin settings if no external user back-ends are enabled	11 years ago
Joas Schilling	81ec1c8a1a	Remove hardcoded link to performance docs	11 years ago
Lukas Reschke	0816cf9142	Add experimental applications switch ... Allows administrators to disable or enabled experimental applications as well as show the trust level.	11 years ago
Lukas Reschke	65202d2a18	Add check for activated local memcache ... Also used the opportunity to refactor it into an AppFramework controller so that we can unit test it. Fixes https://github.com/owncloud/core/issues/14956	11 years ago
Thomas Müller	b5545932e7	use StreamResponse to download the log file - fixes #14268	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Lukas Reschke	13486a5ada	Migrate to SwiftMail ... Replaces the OC_Mail and phpmailer with SwiftMail allowing us to mock it properly. Fixes the unit test execution on master on local machines and https://github.com/owncloud/core/issues/12014 Conflicts: 3rdparty lib/private/server.php lib/public/iservercontainer.php tests/lib/mail.php tests/settings/controller/mailsettingscontrollertest.php Conflicts: 3rdparty lib/private/mail.php lib/private/server.php lib/public/iservercontainer.php settings/ajax/lostpassword.php settings/application.php	11 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	11 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	11 years ago
Lukas Reschke	0f7634eadc	Switch to a factory and add unit tests	11 years ago
Lukas Reschke	7e7dd92f6b	Add unit tests	11 years ago
Morris Jobke	9fbeaf0fd9	Add value if restore of data is possible for a user ... * reason: nice to know before password change in user management * restore is possible: * encryption is disabled * encryption is enabled, admin and user has checked the restore option * if not possible: * highlight users row in red once the admin wants to change the password * show also a little tipsy	11 years ago
Lukas Reschke	b8b4df5425	Cache responses from the AppStore server ... Otherwise every time the AppStore was opened a lot of connections to the AppStore server were made which resulted in a terrible performance. This changeset will cache the response for a sensible time so that only the first request will be somewhat slow. Performance changes: - Loading a category took previously more than 3 seconds on my machine. Now for every follow-up request it takes less than 200ms, resulting in a performance gain of 1950% - Loading the category list took previously about 750ms - now it takes 154ms, a total performance gain of 395%	11 years ago
Georg Ehrke	f579f2bd94	add Download logfile button to admin settings ... add logSettingsController add download logfile button move getEntries to LogSettingsController move set log level to logsettingscontroller.php add warning if logfile is bigger than 100MB add unit test for set log level fix typecasting, add new line at EoF show log and logfile download only if log_type is set to owncloud add unit test for getFilenameForDownload	11 years ago
Morris Jobke	04e172c2ce	add unit tests for new user create mail	11 years ago
Morris Jobke	3b61f76ca0	Send mail for new users ... * supply mail address * send mail with username and URL to that mail address * option to temporary enable this feature	11 years ago
Lukas Reschke	fe7d9a7ca0	Add REST route for user & group management ... First step of a somewhat testable user management. - I know, the JSON returns are in an ugly format but the JS expects it that way. So let's keep it that way until we have time to fix the JS in the future.	11 years ago
Lukas Reschke	e73ccbd4ca	Migrate "setsecurity.php" to the AppFramework ... Add switch to enforce SSL for subdomains Add unit tests Add test for boolean values Camel-case Fix ugly JS	11 years ago
Lukas Reschke	e4227658d9	Migrate new app settings to AppFramework ... Let's migrate those two new files.	11 years ago
Lukas Reschke	13b1b45ee4	Refactor MailSettings controller ... - Do not store the password (fixes https://github.com/owncloud/core/issues/11385) - Refactor to AppFramework - Add unit tests Conflicts: settings/admin/controller.php	11 years ago