nextcloud-server

Commit Graph

Author	SHA1	Message	Date
Morris Jobke	6c7ccbecbf	Add setup check for missing UTF8MB4 on mysql Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Daniel Kesselberg	600bc22297	Warning if x-forwarded-host present but trusted_proxies empty Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Daniel Kesselberg	248e824f48	Remove check for outdated caches Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Morris Jobke	17b2827bbf	Add setup check for pending bigint conversion Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Morris Jobke	5b22225351	Update casing of PHP inside method name Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Morris Jobke	f5ad80fc57	Add setup check for recommended PHP modules (i.e. Imagick, intl) Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Sylvia van Os	935bb25639	Make connectivity check domains configurable Signed-off-by: Sylvia van Os <sylvia@hackerchick.me>	7 years ago
Morris Jobke	8e4f0f9d17	Use the proper default values Signed-off-by: Morris Jobke <hey@morrisjobke.de>	7 years ago
Kyle Fazzari	9561a7a1e2	Verify that isPhpMailerUsed uses config as expected Signed-off-by: Kyle Fazzari <kyrofa@ubuntu.com>	7 years ago
Daniel Kesselberg	5cf8f4a407	Update logic for forwardedForHeadersWorking As discussed in https://github.com/nextcloud/server/issues/11594 when discovering if x-forwarded-for is working properly its not possible to use getRemoteAddr because the "client ip" is returned. For this check the ip of the last hop would be required. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	7 years ago
Timo Förster	006e150c87	Change check if secure randomness is possible. Signed-off-by: Timo Förster <tfoerster@webfoersterei.de>	7 years ago
Michael Weimann	7aed47f776	Adds tests for the memory checks Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Michael Weimann	1d2bc9c45e	Adds tests for the setup memory limit checks Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Michael Weimann	3f790bb85b	Excludes not writable app roots from the directory permission check Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Michael Weimann	0017cbe18a	Adds a test for the app directory permission check. Signed-off-by: Michael Weimann <mail@michael-weimann.eu>	7 years ago
Morris Jobke	7c6c3d0d76	Fix tests Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Roeland Jago Douma	6a0c54d5bf	Add warning to setup checks if the default mailer is still php Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	def12a9be9	Fix tests Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	9c4aecb539	Merge all setup checks into one controller * renamed hasMissingIndexes to missingIndexes Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	4a0b7aaf6c	Merge tips & tricks section into setup checks Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	393d9aae74	Add a hint that some indexes are not added yet * gives the admin a chance to discover the missing indexes and improve the performance of the instance without digging through the manual * nicely integrated in the setup checks where this kind of hints belong to * also adds an option to integrate this from an app based on events * fix style of setting warnings Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Roeland Jago Douma	176b4d6832	Ping more privacy respecting organizations Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Robin Appelman	a80f72c6c8	fix controller test Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Robin Appelman	9b25ff9fcb	adjust httpclient to guzzle6 Signed-off-by: Robin Appelman <robin@icewind.nl>	8 years ago
Roeland Jago Douma	ee20741526	Add tests Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Morris Jobke	43e498844e	Use ::class in test mocks Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Bjoern Schiessle	e964f83f28	fix url Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	8 years ago
Morris Jobke	582fb5d129	Update the URLs in tests to use example.org Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Joas Schilling	06e60f88c5	Don't assume the admin didn't configure Opcache correctly... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Roeland Jago Douma	bb2ec51bbb	Fix unit tests of master Follow up to #3802 Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Morris Jobke	cee8853658	Show info in admin settings about PHP opcache if disabled Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Thomas Müller	0c637c8d73	[9.2] Add missing unit tests (#25936 ) * Adjust unit test execution after folder rename * Adjust login controller tests to match current behavior * Fix broken unit tests	9 years ago
Joas Schilling	7c0951244a	Deprecate getEditionString()	9 years ago
Lukas Reschke	910176c540	Fix CheckSetupController tests	10 years ago
Lukas Reschke	c16c411275	Add new dependency	10 years ago
Lukas Reschke	7ffb7b0d84	Use MockBuilder instead of createMock CI uses an older PHPUnit	10 years ago
Lukas Reschke	8a7a0f3287	Add unit tests	10 years ago
Joas Schilling	c58d174616	Move tests/settings to PSR-4	10 years ago
Lukas Reschke	4b90429178	Add note if integrity check is disabled Our issue template states that users should post the output of `/index.php/settings/integrity/failed`, at the moment it displays that all passes have been passed if the integrity checker has been disabled. This is however a wrong approach considering that some distributions are gonna package Frankenstein releases and makes it harder for us to detect such issues. Thus if the integrity code checker is disabled (using the config switch) it displays now: `Appcode checker has been disabled. Integrity cannot be verified.` This is not displayed anywhere else in the UI except these URL used for us for debugging purposes.	10 years ago
Vincent Chan	faf48e42b7	Move data protection check to javascript fixes #20199	10 years ago
Lukas Reschke	4971015544	Add code integrity check This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates Note: The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following: ![2015-11-04_12-02-57](https://cloud.githubusercontent.com/assets/878997/10936336/6adb1d14-82ec-11e5-8f06-9a74801c9abf.png) As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Lukas Reschke	12181aa6de	Don't perform checks for outdated TLS libs when no internet connection This change makes the check return a positive result when: - The instance has been configured to not use the internet AND/OR - S2S AND the appstore is disabled	10 years ago
Morris Jobke	b519965408	[admin] check for correct PHP memcached module	10 years ago
Morris Jobke	c86cac6a2b	use config.php value instead of version string	10 years ago
Robin McCorkell	2579999373	Add setup check for reverse proxy header configuration	11 years ago
Roeland Jago Douma	72ba67815e	Display warning in security & setup warnings if php version is EOL	11 years ago
Lukas Reschke	0d515de13e	Detect old NSS and OpenSSL versions This will detect old NSS and OpenSSL versions and show appropriate errors in the admin interface. Fixes https://github.com/owncloud/core/issues/17901	11 years ago
Joas Schilling	d3e3a84cae	Move the helpful method to the TestCase class	11 years ago
Lukas Reschke	bc6d17ed74	Add check for availability of /dev/urandom Without /dev/urandom being available to read the medium RNG will rely only on the following components on a Linux system: 1. MicroTime: microtime() . memory_get_usage() as seed and then a garbage collected microtime for loop 2. MTRand: chr((mt_rand() ^ mt_rand()) % 256) 3. Rand: chr((rand() ^ rand()) % 256) 4. UniqId: Plain uniqid() An adversary with the possibility to predict the seed used by the PHP process may thus be able to predict future tokens which is an unwanted behaviour. One should note that this behaviour is documented in our documentation to ensure that users get aware of this even without reading our documentation this will add a post setup check to the administrative interface. Thanks to David Black from d1b.org for bringing this again to our attention.	11 years ago
Joas Schilling	81ec1c8a1a	Remove hardcoded link to performance docs	11 years ago

40 Commits (6c7ccbecbf6af5037a6c7bf2046bbf4d3bf91e2f)