98 Commits (9533f4e5edfded577b67d08f7778a8a1704132f2)

Author	SHA1	Message	Date
Morris Jobke	9533f4e5ed	Clean up single user mode ... Single user mode basically disables WebDAV, OCS and cron execution. Since we heavily rely on WebDAV and OCS also in the web UI it's basically useless. An admin only sees a broken interface and can't even change any settings nor sees any files. Also sharing is not possible. As this is at least the case since Nextcloud 9 and we haven't received any reports for this it seems that this feature is not used at all so I removed it. The encryption commands now rely on the well tested maintenance mode. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Jörn Friedrich Dreyer	817729dc3f	add upgrade command before repair, handle NeedsUpgradeExcaption better	9 years ago
Thomas Müller	a7245ea082	Fixing ctor call	9 years ago
Morris Jobke	cc28f82b36	Add config option to update charset of mysql to utf8mb4 ... * fully optional * requires additional options set in the database	9 years ago
Thomas Müller	67d3574bdf	Don't parse info.xml but reuse already cached app infos - fixes #25603 (#25968) ... * Don't parse info.xml but reuse already cached app infos - fixes #25603 * Use === in InfoParser. Fixes test * InfoParser should not depend on UrlGenerator - fixes issue with session being closed too early	9 years ago
Joas Schilling	5551c63110	Register the auto completion basic ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Thomas Pulzer	ba3f4f118e	Changed logtype to file instead of owncloud. ... - Updated the config sample to point to log_type='file' - Renamed the Class for logfile logging to File in namespace 'OC\Log\'. Changed the occurrences of 'OC\Log\Owncloud' to 'OC\Log\File'. - Renamed the Class for log:file command to File in namespace 'OC\Core\Command\Log\File'. Changed registration of the command to use 'OC\Core\Command\Log\File'. - Changed default Syslog tag to Nextcloud - Retained backwards compatibility for configs with 'logtype' => 'owncloud' - Adjusted tests for the new file log. Closes #490.	10 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Robin Appelman	586c58efa7	add occ command to show user information	10 years ago
Robin Appelman	3d874c407d	Add commands to add/remove users to/from groups	10 years ago
Robin Appelman	413d577b29	add command to list groups	10 years ago
Robin Appelman	b44d439010	add occ command to list users	10 years ago
Joas Schilling	b96f0c99b0	Add a occ command to list/get user preferences	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Christoph Wurst	847bbc51b6	add OCC command to enable/disable 2FA for a user	10 years ago
Lukas Reschke	52add798d4	Do not automatically try to enable index.php-less URLs (#24539) ... The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.	10 years ago
Thomas Müller	9c9fec36dd	Add occ commands to enable and disable a user + a disabled user can no longer login - fixes #23838	10 years ago
Thomas Müller	cdcd49b473	Adding progress to occ maintenance:repair	10 years ago
Thomas Müller	d0030aad6c	Remove deprecated HTTPHelper from InfoParser	10 years ago
Roeland Jago Douma	a2c8597b00	Add occ command for updating the data-fingerprint	10 years ago
Lukas Reschke	933f60e314	Update author information ... Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	10 years ago
Victor Dubiniuk	fef7fc1248	CLI commands to check app and core signatures	10 years ago
Lukas Reschke	ea367b598a	Use path instead of app id ... This change requires the usage of a path instead of the App ID when signing code. This has the advantage that developers can also sign code under a different location to make it easier. (e.g. remove `.git`, …) Also it adds an example command usage as well as a link to the documentation	10 years ago
Joas Schilling	56184f799e	Make it possible to enable apps for groups only via occ	10 years ago
Joas Schilling	78a02d1b2f	Make it possible to disable apps via the console, which are not enabled for the current user	10 years ago
Joas Schilling	d2285113a8	Make sure to list "group enabled" apps as enabled ... also when they are not enabled for the current user	10 years ago
Robin Appelman	c67a09112b	Add occ commands to manager trusted certificates	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Victor Dubiniuk	b59285d0d0	Add occ command to get app path	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Thomas Müller	4cb5970947	Always pass in ILogger	10 years ago
Morris Jobke	8366ce2767	deduplicate @xenopathic	10 years ago
Morris Jobke	b945d71384	update licence headers via script	10 years ago
Morris Jobke	9b652ed5d5	[App Code Check] add check for version and mandatory fields ... * ref #17598 * including unit tests for mandatory fields/versions	10 years ago
Bjoern Schiessle	9bd4f2d41e	occ script to disable encryption and to decrypt all files again	10 years ago
Robin McCorkell	19830e6c24	Introduce mimetype DB update occ command	11 years ago
Robin McCorkell	79fceeff33	Move maintenance:mimetypesjs to sublocation, cleanup code	11 years ago
Bjoern Schiessle	289e9130f3	make system root of key storage configurable	11 years ago
Bjoern Schiessle	8c08dd0ac2	occ tool to encrypt all files	11 years ago
Robin McCorkell	07e119a3f8	Introduce occ command to manage owncloud log backend ... log:owncloud can set/display the log filename and log file rotation size	11 years ago
Robin McCorkell	67536e71aa	Introduce occ command for logging management ... log:manage can set/display the log backend, log level and log timezone	11 years ago
Morris Jobke	08afce3d7e	[command] single user mode - use config object & add tests	11 years ago
Joas Schilling	2b86eb0b29	Add commands to get, set and delete app config values	11 years ago
Joas Schilling	86952f88cb	Add a command to import an json array into the config	11 years ago
Joas Schilling	bc084c40a6	Add a command to delete a system config	11 years ago
Joas Schilling	3608c1007e	Add a command to get a config value	11 years ago
Joas Schilling	a83eac3762	Add a command to set a system config value	11 years ago
Joas Schilling	6763637773	Add a command to list existing configs	11 years ago
Joas Schilling	6d4cb1b480	Sort registration of commands alphabetically	11 years ago