12 Commits (a0b34dfd2f5e6ed1ea5e35692816acf73f3ede4e)

Author	SHA1	Message	Date
Vincent Petry	da0cea404d	Kill update simulation ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	5c34346479	Allow downgrades of maintenance accross vendors	10 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Joas Schilling	78da57466f	Add the background jobs after the table was updated	10 years ago
Joas Schilling	7f1b8f22d4	Make sure that installed is a boolean	10 years ago
Christoph Wurst	46bdf6ea2b	fix PHPDoc and other minor issues	10 years ago
Christoph Wurst	2fa5e0a24e	invalidate (delete) session token on logout ... add 'last_activity' column to session tokens and delete old ones via a background job	10 years ago
Thomas Müller	e049953d1a	OC_Installer -> \OC\Installer	10 years ago
Roeland Jago Douma	f52c5b31b6	Move more from \OC to PSR-4 ... * \OC\OCSClient * \OC\Preview * \OC\PreviewManager * \OC\Repair * \OC\RepairException * \OC\Search * \OC\ServerContainer * \OC\ServerNotAvailableException * \OC\ServiceUnavailableException * \OC\Setup * \OC\Streamer * \OC\SubAdmin * \OC\SystemConfig * \OC\TagManager * \OC\Tags * \OC\TempManager * \OC\TemplateLayout * \OC\URLGenerator * \OC\Updater	10 years ago
Thomas Müller	bbd2a07525	Remove emitter from class Repair	10 years ago
Thomas Müller	3aa77960ef	Adding pre- and post-migration repair steps	10 years ago
Thomas Müller	5c3183cedd	Move version check code out of class Updater	10 years ago
Joas Schilling	444343dc2b	Do not abort with an exception when a default app can not be enabled	10 years ago
Thomas Müller	ad6238c808	Install new shipped apps after upgrading all existing apps	10 years ago
Thomas Müller	7bf658ab18	Before installing new shipped apps we need to load authentication apps - fixes #22508	10 years ago
Joas Schilling	349f3bf54a	More fixes	10 years ago
Scrutinizer Auto-Fixer	08f0dc9067	Scrutinizer Auto-Fixes ... This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com	10 years ago
Lukas Reschke	08e73d2c8f	Add hidden config switch to disable code integrity checking ... This adds a hidden config flag that allows somebody to disable the code integrity check. If `integrity.check.disabled` is set to `true` in the config file: 1. The integrity check functions will return always an empty result 2. The integrity check is not performed when installing apps 3. The integrity check is not performed when updating apps 4. The integrity check is not performed when updating the core Furthermore this adds support for a list of channels that the code checker will run on. At the moment this is only stable because I didn't want to break any build scripts that we have. Once we have a proper CA setup and updated the build process to sign the releases we can add the RC, alpha, beta as well as daily releases. So everything except "git" basically.	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Joas Schilling	fd7ed93937	Allow downgrades for our brave developers, that switch between branches	10 years ago
Morris Jobke	ed98cdf532	Use OCP\Util::getVersion instead of the internal private implementation	10 years ago
Thomas Müller	b3c8e9ca32	Clear xml errors in updater	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Thomas Müller	d8276af301	Install new shipped apps on upgrade -fixes #19925	10 years ago
Joas Schilling	9200bbeaba	Update: state which step we are going to start and warn if it might be slow	10 years ago
Thomas Müller	4cb5970947	Always pass in ILogger	10 years ago
Thomas Müller	bd21e5925c	Clean code	10 years ago
Thomas Müller	38143d670b	Catch exceptions during app upgrade - fixes #16240	10 years ago
Morris Jobke	5acb38b5b3	[upgrade] switch to debug logging on upgrade ... * resets afterwards * adds output about the previous log level	10 years ago
Lukas Reschke	a8e8a9dfb9	Move certificate bundle into resources/config/	10 years ago
Vincent Petry	6ccbf4bce6	Improved update version detection logic	11 years ago
Vincent Petry	3b37c20319	Simplify comparison algo	11 years ago
Vincent Petry	2b08659f7d	Restrict upgrades to explicit allowed version ... version.php now contains the previous ownCloud version from which upgrades are allowed. Any other upgrades will show a message that the upgrade/downgrade is not supported.	11 years ago
Lukas Reschke	40b87b1394	Add warning for not existing CA bundle when updating ... For newer releases we shall use an integrity check. But that's a good alternative for now.	11 years ago
Lukas Reschke	04fe9e05f0	Use new updater URL + add unit tests ... Uses the new updater url "https://updates.owncloud.com/server/"	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Morris Jobke	5ff536b45a	[upgrade] add verbosity check and show repair info & steps	11 years ago
Morris Jobke	c86e129ce9	[updater] keep maintenance active on failure and mark failure in red	11 years ago
Morris Jobke	1ba9fd3ada	[upgrade] print update message before running the update code ... * otherwise you don't know during which app update something failed	11 years ago
Morris Jobke	fe42553e8a	[updater] propagate error case properly ... * add $success to the updateEnd hook * add new return code for a update failure * add exception class to failure hook message	11 years ago
Steffen Lindner	48040c46cb	Skip disable3rdParty Apps	11 years ago
Morris Jobke	064f5204cc	Persist the state of the maintenance after an upgrade ... * if maintenance mode was enabled before an upgrade it will be enabled afterwards too * fixes #16429	11 years ago
Morris Jobke	fbba7a61cb	Use internally \OCP\ILogger instead of \OC\Log ... * this is the preparation for some upcoming logger related changes * also fixes an issue in the public interface where we request an internal class as parameter	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Morris Jobke	17b10ef9b4	Add spaces	11 years ago
Thomas Müller	0bd2b3cb0c	[WIP] upgrade app store apps during console upgrade	11 years ago
Lukas Reschke	c3c993446e	Run `updateDataDirectory` after Update ... Fixes https://github.com/owncloud/core/issues/13731	11 years ago