76 Commits (fef7fc12480207f13732f68f097d28dfbd84b2d5)

Author	SHA1	Message	Date
Victor Dubiniuk	fef7fc1248	CLI commands to check app and core signatures	10 years ago
Lukas Reschke	ea367b598a	Use path instead of app id ... This change requires the usage of a path instead of the App ID when signing code. This has the advantage that developers can also sign code under a different location to make it easier. (e.g. remove `.git`, …) Also it adds an example command usage as well as a link to the documentation	10 years ago
Joas Schilling	56184f799e	Make it possible to enable apps for groups only via occ	10 years ago
Joas Schilling	78a02d1b2f	Make it possible to disable apps via the console, which are not enabled for the current user	10 years ago
Joas Schilling	d2285113a8	Make sure to list "group enabled" apps as enabled ... also when they are not enabled for the current user	10 years ago
Robin Appelman	c67a09112b	Add occ commands to manager trusted certificates	10 years ago
Thomas Müller	682821c71e	Happy new year!	10 years ago
Victor Dubiniuk	b59285d0d0	Add occ command to get app path	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Thomas Müller	4cb5970947	Always pass in ILogger	10 years ago
Morris Jobke	8366ce2767	deduplicate @xenopathic	10 years ago
Morris Jobke	b945d71384	update licence headers via script	10 years ago
Morris Jobke	9b652ed5d5	[App Code Check] add check for version and mandatory fields ... * ref #17598 * including unit tests for mandatory fields/versions	10 years ago
Bjoern Schiessle	9bd4f2d41e	occ script to disable encryption and to decrypt all files again	10 years ago
Robin McCorkell	19830e6c24	Introduce mimetype DB update occ command	10 years ago
Robin McCorkell	79fceeff33	Move maintenance:mimetypesjs to sublocation, cleanup code	10 years ago
Bjoern Schiessle	289e9130f3	make system root of key storage configurable	10 years ago
Bjoern Schiessle	8c08dd0ac2	occ tool to encrypt all files	11 years ago
Robin McCorkell	07e119a3f8	Introduce occ command to manage owncloud log backend ... log:owncloud can set/display the log filename and log file rotation size	11 years ago
Robin McCorkell	67536e71aa	Introduce occ command for logging management ... log:manage can set/display the log backend, log level and log timezone	11 years ago
Morris Jobke	08afce3d7e	[command] single user mode - use config object & add tests	11 years ago
Joas Schilling	2b86eb0b29	Add commands to get, set and delete app config values	11 years ago
Joas Schilling	86952f88cb	Add a command to import an json array into the config	11 years ago
Joas Schilling	bc084c40a6	Add a command to delete a system config	11 years ago
Joas Schilling	3608c1007e	Add a command to get a config value	11 years ago
Joas Schilling	a83eac3762	Add a command to set a system config value	11 years ago
Joas Schilling	6763637773	Add a command to list existing configs	11 years ago
Joas Schilling	6d4cb1b480	Sort registration of commands alphabetically	11 years ago
Roeland Jago Douma	c8145cdbd6	Javascript mimetype icon resolver ... This makes it possible to retrieve the icon for mimetypes in javascript. It makes no additional queries to the server to retrieve the mimetype. * config/mimetypealiases.json added * mimetype.js: this is where the logic resides to convert from mimetype to icon url * mimetypelist.js: generated file with a list of mimetype mapping (aliases) and the list of icon files * ./occ maintenance:mimetypesjs : new command for occ to gernerate mimetypes.js * unit tests updated and still work * javascript tests added * theming support * folder of the theme is now present in javascript (OC.theme.folder)	11 years ago
Morris Jobke	f63915d0c8	update license headers and authors	11 years ago
Joas Schilling	5180c2398d	Add an occ command to get the status of encryption	11 years ago
Joas Schilling	10144bd7f5	Display a message when there is a problem with the default module	11 years ago
Joas Schilling	f6d4bdb1fd	Add occ commands to manage the encryption modules	11 years ago
Joas Schilling	eec92a16d6	Unify the output of the user commands and use DI	11 years ago
Thomas Müller	f099c9883e	Adding check command to validate server environment - fixes #15429	11 years ago
Robin McCorkell	cbbff87d0c	Allow app:check-code and l10n:createjs commands when not installed	11 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	11 years ago
Joas Schilling	b1ff21ee28	Add a console command user:add to create users over the console	11 years ago
Christian Kampka	83e0f84fef	Allow configuring background job mode from the console	11 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" ... This reverts commit 6a1a4880f0.	11 years ago
Thomas Müller	bcd10d3dc5	implement command maintenance:install	11 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	11 years ago
Thomas Müller	d74662df7d	implement php code checker to detect usage of not allowed private APIs - including console command to check local code to be used by developers	11 years ago
Arthur Schiwon	ae9c9a46b8	inject and use user manager to delete command instead of using old static oc_user way	11 years ago
Arthur Schiwon	4fa39250e7	LDAP User Cleanup: Port from stable7 without further adjustements ... LDAP User Cleanup background job for user clean up adjust user backend for clean up register background job remove dead code dependency injection make Helper non-static for proper testing check whether it is OK to run clean up job. Do not forget to pass arguments. use correct method to get the config from server methods can be private, proper indirect testing is given no automatic user deletion make limit readable for test purposes make method less complex add first tests let preferences accept limit and offset for getUsersForValue DI via constructor does not work for background jobs after detecting, now we have retrieving deleted users and their details we need this method to be public for now finalize export method, add missing getter clean up namespaces and get rid of unnecessary files helper is not static anymore cleanup according to scrutinizer add cli tool to show deleted users uses are necessary after recent namespace change also remove user from mappings table on deletion add occ command to delete users fix use statement improve output big fixes / improvements PHP doc return true in userExists early for cleaning up deleted users bump version control state and interval with one config.php setting, now ldapUserCleanupInterval. 0 will disable it. enabled by default. improve doc rename cli method to be consistent with others introduce ldapUserCleanupInterval in sample config don't show last login as unix epoche start when no login happend less log output consistent namespace for OfflineUser rename GarbageCollector to DeletedUsersIndex and move it to user subdir fix unit tests add tests for deleteUser more test adjustements Conflicts: apps/user_ldap/ajax/clearMappings.php apps/user_ldap/appinfo/app.php apps/user_ldap/lib/access.php apps/user_ldap/lib/helper.php apps/user_ldap/tests/helper.php core/register_command.php lib/private/preferences.php lib/private/user.php add ldap:check-user to check user existance on the fly Conflicts: apps/user_ldap/lib/helper.php forgotten file PHPdoc fixes, no code change and don't forget to adjust tests	11 years ago
Morris Jobke	8ae8eb4734	drop dependency of some commands on old config object	11 years ago
Thomas Müller	2f19de11e4	adding console command to generate javascript translation files based on existing php translation files ... read server side translations from json files	11 years ago
Thomas Müller	a348a6f450	no loner use deprecated class \OC_Config	11 years ago
Vincent Petry	ca690c4d02	Added RepairStep interface and default repair step lists ... The updater is using "before update" repair steps and "regular" repair steps. The "regular" repair steps are also used by the CLI tool. Currently no steps exist but can be added later in the static methods in the \OC\Repair class. Added unit test to test messaging, error and exception cases.	12 years ago
Andreas Fischer	f81ee94cad	Move resetpassword into user: command space.	12 years ago