custodia.git/custodia/store, branch master

etcdstore: prevent path traversal attacks

2015-10-19T16:17:58+00:00

A new internal method _absolute_key() is used to join key name and name
space. etcd treats the key space like a file system so the method checks
the key for '//', '.', and '..' to prevent invalid paths and path traversal
attacks.

Signed-off-by: Christian Heimes 
Signed-off-by: Simo Sorce

Implement ETCD based Store

2015-10-19T16:17:48+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Christian Heimes

Extend store interface to create namespaces

2015-10-19T16:17:42+00:00

Use a new verb, "span" to create namespaces/containers.
This will be needed for the Etcd plugin which need to distinguish between
a directory and a key.
The sqlite/enclite just pass the request to their set() method.

Signed-off-by: Simo Sorce 
Reviewed-by: Christian Heimes

Better error handling for enclite store

2015-10-19T16:17:24+00:00

The store as throwing an exception in case of an unesisting key.
Now it returns None as expected on missing keys, and properly
wraps encoding exceptions if the JWE can't be decoded.

Signed-off-by: Simo Sorce 
Reviewed-by: Christian Heimes

Remove filter option for directory listings

2015-10-19T16:17:07+00:00

This commit removes the option to pas a filter parameter.
It also changes the way database plugins are expected to return
results, results are now expected to be relative to the path
requested.

Signed-off-by: Simo Sorce 
Reviewed-by: Christian Heimes

Make tox pep8 happy

2015-10-19T16:16:52+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Christian Heimes

Add basic debugging capabilities

2015-06-05T14:56:29+00:00

If debug is set to True, then custodia's own Exception handlers will
print a stack trace to standard output to aid debugging.

Signed-off-by: Simo Sorce

Remove pylint star-args exceptions

2015-05-26T19:05:01+00:00

Newer pylint version completely removed the star-args warning, including
recognizing the exception in the source code.
Remove it from all source code to avoid annoyinf pylint errors about
unrecognized exceptions, and add a general exception in the pylint makefile
invocation, as apparently it is ok there. This will avoid warnings if older
versions of pylint are used.

Signed-off-by: Simo Sorce

Add Simple encrypted store.

2015-04-15T21:44:10+00:00

This uses JWCrypto to encrypt any key stored in the sqlite database
with a master key.
The master key is stored in a file and must be provided by the
configuration.

A sample key and configuration is provided too.

Signed-off-by: Simo Sorce

Return only key/containers names on LIST operation

2015-04-08T13:19:59+00:00