28 Commits (bcddca9a64fb980019df052a99bc08fbef14b577)

Author	SHA1	Message	Date
Joas Schilling	e1b5d20b3b	Fix updating from some 11 versions when people didn't update ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Joas Schilling	dd6c9cb03d	Allow migrating from ownCloud 10.0.0 ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Morris Jobke	caa0ae94e8	Proper logging for appstore updates ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Joas Schilling	538d32fe87	Automatic injection into the Fetchers ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Roeland Jago Douma	e79424932a	Make sure the AppFetcher fetches the new applist from the appstore ... When in the upgrade process the version in the config is still the old version. (Since we only upgrade it after the upgrade is complete). However the app list fetched from the appstore must be the new list. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	9 years ago
Lukas Reschke	47cd976035	Add app bundles ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Morris Jobke	252858ec5e	Do not double cherck app update ... In base.php the apps are already checked for an update. No need to repeat this during loading of the app. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Morris Jobke	b8c749b903	Fix return value of getAllowedPreviousVersions() ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Joas Schilling	18d7701d09	Prevent migration from ownCloud 11 to Nextcloud 12 ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Lukas Reschke	776f5bcd34	Don't disable apps on update if PHP >= 7.0.0 ... When PHP in a version higher than 7.0.0 is used we catch fatal exceptions in app.php and gracefully already disable the app. There is thus no need to also disable the apps on updates. This has been requested by Jan to fix because that is "the most annoying thing ever" :TM:. – I'd say we give it a try and if that causes problems in the future we can consider alternative approaches. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Morris Jobke	3620d81184	Log all events that happen during an update ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	9 years ago
Bjoern Schiessle	8f33d9d1c0	update system address book if the user change the personal settings ... Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	9 years ago
Joas Schilling	224dfaf1e6	Use a better error message and point the users to the support channels ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Joas Schilling	9b66e8f7d9	Throw an exception when a shipped app was not replaced before the update ... Signed-off-by: Joas Schilling <coding@schilljs.com>	9 years ago
Lukas Reschke	8acb54aa0b	Add update support ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Vincent Petry	da0cea404d	Kill update simulation ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Joas Schilling	5c34346479	Allow downgrades of maintenance accross vendors	10 years ago
Joas Schilling	0215b004da	Update with robin	10 years ago
Joas Schilling	ba87db3fcc	Fix others	10 years ago
Lukas Reschke	aba539703c	Update license headers	10 years ago
Joas Schilling	78da57466f	Add the background jobs after the table was updated	10 years ago
Joas Schilling	7f1b8f22d4	Make sure that installed is a boolean	10 years ago
Christoph Wurst	46bdf6ea2b	fix PHPDoc and other minor issues	10 years ago
Christoph Wurst	2fa5e0a24e	invalidate (delete) session token on logout ... add 'last_activity' column to session tokens and delete old ones via a background job	10 years ago
Thomas Müller	e049953d1a	OC_Installer -> \OC\Installer	10 years ago
Roeland Jago Douma	f52c5b31b6	Move more from \OC to PSR-4 ... * \OC\OCSClient * \OC\Preview * \OC\PreviewManager * \OC\Repair * \OC\RepairException * \OC\Search * \OC\ServerContainer * \OC\ServerNotAvailableException * \OC\ServiceUnavailableException * \OC\Setup * \OC\Streamer * \OC\SubAdmin * \OC\SystemConfig * \OC\TagManager * \OC\Tags * \OC\TempManager * \OC\TemplateLayout * \OC\URLGenerator * \OC\Updater	10 years ago
Thomas Müller	bbd2a07525	Remove emitter from class Repair	10 years ago
Thomas Müller	3aa77960ef	Adding pre- and post-migration repair steps	10 years ago
Thomas Müller	5c3183cedd	Move version check code out of class Updater	10 years ago
Joas Schilling	444343dc2b	Do not abort with an exception when a default app can not be enabled	10 years ago
Thomas Müller	ad6238c808	Install new shipped apps after upgrading all existing apps	10 years ago
Thomas Müller	7bf658ab18	Before installing new shipped apps we need to load authentication apps - fixes #22508	10 years ago
Joas Schilling	349f3bf54a	More fixes	10 years ago
Scrutinizer Auto-Fixer	08f0dc9067	Scrutinizer Auto-Fixes ... This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com	10 years ago
Lukas Reschke	08e73d2c8f	Add hidden config switch to disable code integrity checking ... This adds a hidden config flag that allows somebody to disable the code integrity check. If `integrity.check.disabled` is set to `true` in the config file: 1. The integrity check functions will return always an empty result 2. The integrity check is not performed when installing apps 3. The integrity check is not performed when updating apps 4. The integrity check is not performed when updating the core Furthermore this adds support for a list of channels that the code checker will run on. At the moment this is only stable because I didn't want to break any build scripts that we have. Once we have a proper CA setup and updated the build process to sign the releases we can add the RC, alpha, beta as well as daily releases. So everything except "git" basically.	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Joas Schilling	fd7ed93937	Allow downgrades for our brave developers, that switch between branches	10 years ago
Morris Jobke	ed98cdf532	Use OCP\Util::getVersion instead of the internal private implementation	10 years ago
Thomas Müller	b3c8e9ca32	Clear xml errors in updater	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Lukas Reschke	8f09d5b67c	Update license headers	10 years ago
Thomas Müller	d8276af301	Install new shipped apps on upgrade -fixes #19925	10 years ago
Joas Schilling	9200bbeaba	Update: state which step we are going to start and warn if it might be slow	10 years ago
Thomas Müller	4cb5970947	Always pass in ILogger	10 years ago
Thomas Müller	bd21e5925c	Clean code	10 years ago
Thomas Müller	38143d670b	Catch exceptions during app upgrade - fixes #16240	10 years ago
Morris Jobke	5acb38b5b3	[upgrade] switch to debug logging on upgrade ... * resets afterwards * adds output about the previous log level	10 years ago
Lukas Reschke	a8e8a9dfb9	Move certificate bundle into resources/config/	10 years ago
Vincent Petry	6ccbf4bce6	Improved update version detection logic	10 years ago
Vincent Petry	3b37c20319	Simplify comparison algo	10 years ago