Commit Graph

170 Commits

Author SHA1 Message Date
Joshua Kroll
96c07919bb Fix the usage string, example systemd files, and README for breaking flags change. 2015-10-15 12:41:10 -07:00
Joshua Kroll
883ec0d8fb Merge the functionality of multiple keys/certs and single keys/certs into single flags.
This makes configuration easier, as the same flag is used regardless of how many keys/certs are being provided.
2015-10-15 10:54:06 -07:00
Joshua Kroll
1c9bccbfcc Modify Red October to listen with multiple certificates.
This allows a single Red October instance to have multiple names,
which is useful for load-balancing across multiple instances (e.g.,
one can have a fleet of instances (ro1, ro2, ...) and also a logical
name (redoctober.example.com) and have working access via both names
thanks to the magic of SNI.
2015-10-13 21:44:30 -07:00
Nick Sullivan
309f6021e2 Merge pull request #88 from cloudflare/jkroll/listen-systemd
Add the ability to listen to systemd-provided sockets.
2015-10-10 15:35:47 -07:00
Nick Sullivan
1b7bc1fb07 Merge pull request #94 from j-delaney/test-passvault
Add tests for passvault ChangePassword, NumRecords, and GetSummary
2015-10-10 15:34:31 -07:00
J Delaney
a909e17694 Add tests for passvault ChangePassword, NumRecords, and GetSummary 2015-10-10 14:54:26 -07:00
Nick Sullivan
15600b08ff Merge pull request #92 from j-delaney/create-user-readme
Update README to explain the UserType option in create-user API
2015-10-10 12:05:38 -07:00
J Delaney
3eab302f81 Update README to explain what the UserType option is for in the create-user API 2015-10-10 11:32:19 -07:00
Nick Sullivan
a196ecaa99 Merge pull request #89 from wl2002/updating_passvault_test
MakeRevokeAdmin, DeleteRecord tests
2015-10-09 13:28:12 -07:00
Nick Sullivan
a580acccda Merge pull request #90 from j-delaney/create-user-api
Dedicated API endpoint for creating users
2015-10-09 13:27:50 -07:00
J Delaney
51f74f29e2 Update README to include documentation on create user API 2015-10-09 13:06:32 -07:00
J Delaney
f3c8ec98e6 Add tests for dedicated user creation API 2015-10-09 13:00:45 -07:00
J Delaney
2cb02e33bc Update web interface to use dedicated user creation API 2015-10-09 13:00:33 -07:00
J Delaney
9443fdbf7a Add dedicated API for creating users 2015-10-09 13:00:08 -07:00
William Lewis
1fc30e968e MakeRevokeAdmin, DeleteRecord tests 2015-10-09 12:41:07 -07:00
Joshua Kroll
638a25bbbc Add the ability to listen to systemd-provided sockets.
Add a new flag, -systemdfds, which causes Red October to expect to be
provisioned on launch with file descriptors for sockets opened by
systemd. This is useful for socket activation, but also allows systemd
to bind privileged ports for us. I've included example systemd
configuration files that successfully start Red October as a service
user without admin rights but bound to 443 in a Jessie VM for me. They
need to be installed where systemd expects them, which on Jessie is
/etc/systemd/system/redoctober.service and
/etc/systemd/system/sockets.target.wants/redoctober.socket.
2015-10-09 11:24:08 -07:00
Nick Sullivan
69359bf035 Merge pull request #84 from j-delaney/j-delaney/TestValidateName
Add test for validateName function
2015-10-09 11:22:14 -07:00
Nick Sullivan
7a90555624 Merge pull request #86 from wl2002/updating_passvault_test
Adding TestChangePassword to passvault_test.go
2015-10-09 10:48:57 -07:00
Nick Sullivan
3cf9ac90df Merge pull request #87 from cloudflare/nick/readme
Fix README
2015-10-09 10:48:49 -07:00
Nick Sullivan
9ba021c622 Fix README 2015-10-09 10:48:23 -07:00
Nick Sullivan
f1610842d7 Merge pull request #85 from cloudflare/nick/cover
Add coverage information through cover.io
2015-10-09 10:39:24 -07:00
William Lewis
83d4792bc9 Adding TestChangePassword to tests 2015-10-09 10:35:53 -07:00
Nick Sullivan
62d79f2503 Add coverage information through cover.io 2015-10-09 10:35:29 -07:00
J Delaney
018b541e20 Add test for validateName function 2015-10-09 10:11:08 -07:00
Kyle Isom
f8ed334437 Merge pull request #83 from cloudflare/zi/fix-response-parsing
Zi/fix response parsing
2015-09-28 16:17:25 -07:00
Zi Lin
fa395ea5b7 add a TODO for formatted summary output in ro cli 2015-09-28 15:33:22 -07:00
Zi Lin
d2246f5111 check response status before parse the response bytes 2015-09-28 15:31:13 -07:00
Kyle Isom
e79b5c9057 Merge pull request #79 from cloudflare/zi/re-encrypt
Add new operation: re-encrypt
2015-08-12 08:22:40 -07:00
Zi Lin
b1ac8b4cc0 Add new operation: re-encrypt
're-encrypt' allows us to re-encrypt an RO encryption to a different set
of owners and labels. Currently two delegations are sufficient to carry
out this operation.
2015-08-11 16:43:28 -07:00
Kyle Isom
ce47aa1ecd Merge pull request #78 from cloudflare/zi/cli-client
Add a CLI client
2015-07-30 13:13:18 -07:00
Zi Lin
4de443946c Add a CLI client
* vendored code.google.com/p/gopass as package cmd/ro/gopass
2015-07-30 13:02:56 -07:00
Zi Lin
c3a9c83f9c Merge pull request #77 from cloudflare/dullgiulio-dullgiulio/purge-delegations
Dullgiulio dullgiulio/purge delegations
2015-07-21 12:44:14 -07:00
Kyle Isom
209df8d9a6 Add purge command to clear delegations. Closes #48. 2015-07-21 00:03:22 -07:00
Giulio Iotti
6e4957554c Implement purge action to remove all delegates, closes #48 2015-07-20 23:48:16 -07:00
Nick Sullivan
b5f83e9061 Merge pull request #76 from cloudflare/kyle/fix-core
Don't discard result of errors.New.
2015-07-20 16:00:50 -07:00
Kyle Isom
9ae97534ff Don't discard result of errors.New. 2015-07-20 15:52:24 -07:00
Kyle Isom
03a92365ba Merge pull request #75 from cloudflare/kyle/travis-containerise
Migrate Travis to containerised builds; bump Go version
2015-07-20 15:47:36 -07:00
Kyle Isom
b555918a19 Merge pull request #74 from cloudflare/kyle/more-logging
Consistent and more thorough logging.
2015-07-20 15:47:27 -07:00
Kyle Isom
e0e6b260a0 Note the component that a log entry originates from.
Instead of just 'init', use 'core.init' for core commands. Likewise,
in the HTTP server, note log entries originate from the server.
2015-07-20 09:54:51 -07:00
Kyle Isom
e37be3a12a Consistent and more thorough logging.
This PR makes log entries consistent in their format, and ensures
that all the core functions are logged.
2015-07-20 09:54:04 -07:00
Kyle Isom
12e19f8401 Add @lziest to Travis emails. 2015-07-17 15:20:15 -07:00
Kyle Isom
fc4ecb24b1 Migrate Travis to containerised builds; bump Go version
- Migrate Travis: see http://docs.travis-ci.com/user/migrating-from-legacy/
- Bump Go version from 1.2 to 1.4: Go 1.2 is outdated
2015-07-17 15:14:06 -07:00
Kyle Isom
ca85567296 Merge pull request #73 from psanford/update-readme
README.md: fix permission info on api endpoints
2015-07-16 11:54:54 -07:00
Peter Sanford
68c9b46d1c README.md: fix permission info on api endpoints
This updates the docs to match how permissions work since
the delegation model changed in 8e910c20.
2015-07-16 09:44:40 -05:00
Zi Lin
570b882f66 Merge pull request #71 from cloudflare/kyle/http-log-fix
Report the correct endpoint in http logging.
2015-07-15 12:17:58 -07:00
Kyle Isom
df0db2f926 Report the correct endpoint in http logging. 2015-07-10 15:03:31 -07:00
Nick Sullivan
27477addba Merge pull request #66 from cloudflare/kyle/export
Add export endpoint, permitting backing up the vault.
2015-07-10 14:13:33 -07:00
Nick Sullivan
6645088e73 Merge pull request #70 from cloudflare/kyle/improved-core-logging
Improve logging for various actions in the core package.
2015-07-10 14:13:21 -07:00
Kyle Isom
6c2bc7c773 Improve logging for various actions in the core package. 2015-07-09 15:27:43 -07:00
Kyle Isom
ead76f2c30 Add export endpoint, permitting backing up the vault. 2015-07-09 13:28:18 -07:00