27 Commits (69ae7abe72fd032adbec1c7dc01fca64aea2fbe8)

Author	SHA1	Message	Date
Christoph Wurst	5bf3d1bb38	Update license headers ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at>	6 years ago
Joas Schilling	0c77cd21f9	Make sure maintenance mode is always casted to bool ... Signed-off-by: Joas Schilling <coding@schilljs.com>	7 years ago
Morris Jobke	f5a1f4bc1b	Revert "Wait for cron to finish before running upgrade command" ... This reverts commit 18e9631810. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Joas Schilling	6eb2653897	Use ellipsis instead of triple dot ... Signed-off-by: Joas Schilling <coding@schilljs.com>	8 years ago
Morris Jobke	18e9631810	Wait for cron to finish before running upgrade command ... * fixes #9562 Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	d3d045dd5c	Remove unused import statements ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	c70927eaa0	Remove not needed 3rdparty app disabling during upgrade for PHP 5.x ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	f22e02cd79	Refactor method to check if update is needed ... There was only one call, that actually needed the parameter to be set to true. So this change moved the print of the page to that location and replaces all other occurences with a direct call to the underlying OCP API. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0e2f00ec59	Get the Installer via DI ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	0eebff152a	Update license headers ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	caa0ae94e8	Proper logging for appstore updates ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	aa10cca61b	Do not disable 3rdparty apps on occ upgrade ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Vincent Petry	ae1000e045	Remove removed --dry-run command from occ help (#26352) ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Lukas Reschke	3b7f548b0f	Remove unused and undefined use statement ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Vincent Petry	da0cea404d	Kill update simulation ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Robin Appelman	e783006fe2	make disabled apps more clear during upgrade	10 years ago
Jürgen Haas	aeb5dfa4ac	Exit from upgrade without reporting error ... As reported at https://help.nextcloud.com/t/silent-mode-for-occ-upgrade/2120 we should exit with a return value of 0 (zero) if the current instance is already up to date so that automatic deployment tools don't recognize that as an error.	10 years ago
Sander Ruitenbeek	06fd2e7d5a	Revert (c) back to ownCloud, Inc. ... To be dealt with later	10 years ago
sanderr	a7f998a454	Update Upgrade.php	10 years ago
Sander Ruitenbeek	3101f9e234	Rebranded to Nextcloud for the occ command line tool	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Thomas Pulzer	90b7f74da7	Changed name of default logfile from owncloud.log to nextcloud.log.	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Thomas Müller	7ad1d491f4	Adding progress to occ upgrade	10 years ago
Thomas Müller	5c3183cedd	Move version check code out of class Updater	10 years ago
Lukas Reschke	a4b19a5b1e	Rename files to be PSR-4 compliant	10 years ago
Thomas Müller	4b79fb10a2	Fix verbose output of upgrade command - not progressbar in this case and the schema migration test has one progressbar now for all tables - before we had one progressbar for each table	10 years ago
Thomas Müller	15339efd60	Limit the message to the console to the first 30 characters in order to not break the progress bar	10 years ago
Thomas Müller	1bf4c75e8b	Show individual sql schema migration steps during upgrade - on web as well as on the command line	10 years ago
Morris Jobke	0a66734416	Revert "setting to skip migration tests by default"	10 years ago
Morris Jobke	2e444e6e37	setting to skip migration tests by default ... * if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default	10 years ago
Morris Jobke	e7aab8f31f	Print output for integrity check during ./occ upgrade	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Björn Schießle	58b1221ad3	don't show previous log level in upgrade message	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Morris Jobke	3b249f1967	Revert "setting to skip migration tests by default" ... This reverts commit 7cbdd9b90b.	10 years ago
Joas Schilling	9200bbeaba	Update: state which step we are going to start and warn if it might be slow	10 years ago
Thomas Müller	4cb5970947	Always pass in ILogger	10 years ago
Morris Jobke	b945d71384	update licence headers via script	10 years ago
Morris Jobke	7cbdd9b90b	setting to skip migration tests by default ... * if you install owncloud via package it is not possible to skip migration tests * this also allows to disable migration tests for an instance by default	10 years ago
Morris Jobke	5acb38b5b3	[upgrade] switch to debug logging on upgrade ... * resets afterwards * adds output about the previous log level	10 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Morris Jobke	5ff536b45a	[upgrade] add verbosity check and show repair info & steps	11 years ago
Joas Schilling	dba5d5e205	Use a OutputFormatter instead of hacking into writeln()	11 years ago
Joas Schilling	d8b9f6ac23	Use logtimezone and logdateformat	11 years ago
Morris Jobke	0137a3c5e0	[upgrade] show timestamp for output during upgrade ... * added --show-timestamp option	11 years ago
Morris Jobke	c86e129ce9	[updater] keep maintenance active on failure and mark failure in red	11 years ago
Morris Jobke	1ba9fd3ada	[upgrade] print update message before running the update code ... * otherwise you don't know during which app update something failed	11 years ago
Morris Jobke	fe42553e8a	[updater] propagate error case properly ... * add $success to the updateEnd hook * add new return code for a update failure * add exception class to failure hook message	11 years ago
Steffen Lindner	48040c46cb	Skip disable3rdParty Apps	11 years ago