summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Release version 0.1.0Simo Sorce2015-08-014-4/+8
|
* add docs/source/_static to fix sphinx build errorChristian Heimes2015-07-271-0/+1
| | | | | | Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com> Closes #7
* Add travis CI supportChristian Heimes2015-07-271-0/+21
| | | | | | | | | | | The .travis.yml configures Travis CI. We only need Python 2.7 as the rest is handled by different tox environments. In order to enable Travis CI, please read http://docs.travis-ci.com/user/getting-started/ and do step 1) and step 2). Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com> Closes #6
* kill() and waitpid() custodia processChristian Heimes2015-07-271-4/+2
| | | | | | | | | | The test suite leaves child processes behind. The teardown class method now call Popen.kill() and Popen.wait() to kill and wait for its child process. Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com> Closes #5
* Make KEMClient actually check the replySimo Sorce2015-07-091-18/+24
| | | | | | | | | Uses the same method as the server, the request and response are quite symmetrical here. also fix a bug with the subject name missing in the replies. Adapt tests. Signed-off-by: Simo Sorce <simo@redhat.com>
* Use tox instead of nosetests in MakefileSimo Sorce2015-07-091-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add audit logSimo Sorce2015-07-093-5/+80
| | | | | | The Secrets class now logs any GET/SET/DEL of a key in a audit log file. Signed-off-by: Simo Sorce <simo@redhat.com>
* Unquote the path before processingSimo Sorce2015-07-081-2/+3
| | | | | | | This avoids issues where spaces get turned to %20 and then name matching comparisons (like for KEMHandler) fail. Signed-off-by: Simo Sorce <simo@redhat.com>
* Automatic testing with py.test, coverage and toxChristian Heimes2015-07-084-0/+86
| | | | | | | | | | The patch provides test automation with tox. Just run 'tox' in the source root to create virtual envs, install custodia from the sources and run the tests on Python 2.7 and 3.4. Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com> Closes: #4
* Fix typos in tests and add cleanupChristian Heimes2015-07-082-3/+11
| | | | | | | | | The patch fixes to typos in the tear down function of two test suites. The tests now cleanup and remove temporary files like Unix socket and test databases. Reviewed-by: Simo Sorce <simo@redhat.com> Closes: #3
* Fix setup.py and dependenciesChristian Heimes2015-07-085-5/+8
| | | | | | | | | | | setup.py now correctly references LICENSE instead of COPYING. README.md has been renamed to README and a symbolic link README -> README.md has been added. distutils is unable to handle a symbolic link as README. The six package is listed in requirements.txt, too. Reviewed-by: Simo Sorce <simo@redhat.com> Closes: #2
* Fix Python 3 portablility issuesSimo Sorce2015-06-072-3/+3
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Use reasonable algorithms based on key typeSimo Sorce2015-06-051-8/+11
| | | | | | | If 'signing_algorithms' is not explicitly set in the configuration file use a reasonable default based on the server key type. Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix name checking for kem backendSimo Sorce2015-06-052-4/+7
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Change KEMClient to be able to encrypt requestsSimo Sorce2015-06-051-30/+50
| | | | | | | Also fix errors in handling encrypted requests, as well errors in the test suite. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add basic debugging capabilitiesSimo Sorce2015-06-057-18/+63
| | | | | | | If debug is set to True, then custodia's own Exception handlers will print a stack trace to standard output to aid debugging. Signed-off-by: Simo Sorce <simo@redhat.com>
* Assume keys are JWK objectsSimo Sorce2015-06-041-5/+7
| | | | | | | | This way clients that already have JWK key objects do not have to export/import them. Other clients can simply call JWK upfront like in the modified test. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add client class to build and parse kem tokensSimo Sorce2015-06-041-5/+32
| | | | | | This makes it easier to build clients. Signed-off-by: Simo Sorce <simo@redhat.com>
* Change KEM Parsing to actually check claimsSimo Sorce2015-06-046-21/+33
| | | | | | | The name ('sub') and the time ('exp') must be checked before letting the reuqest proceed. Signed-off-by: Simo Sorce <simo@redhat.com>
* Do not use the same key for encryption and signingSimo Sorce2015-06-032-38/+95
| | | | | | | | | | using the same key for signing and encryption is generally a frown upon approach in the scirty community as it may lead to some attacks. Change the code to use key pairs, where the first key is the signing key and the second one is the encryption key. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add pylint/pep8 checks to ./tests tooSimo Sorce2015-05-292-1/+6
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Use str to give back more human readable messagesSimo Sorce2015-05-281-2/+2
| | | | | | | These messages are returned as is by the HTTP server as the status code reason, str() returns a more human readable format. Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix packages in setup.pySimo Sorce2015-05-271-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Properly handle inputs from a query stringSimo Sorce2015-05-261-9/+21
| | | | | | | parse_qs will always return lists even for single-valued parameters, check for it in the Validator and properly handle the case. Signed-off-by: Simo Sorce <simo@redhat.com>
* List special configuration names in one placeSimo Sorce2015-05-261-3/+6
| | | | | | | This way checks and hives are created from the same list and will not get out of sync (they are before this commit). Signed-off-by: Simo Sorce <simo@redhat.com>
* Add server_socket [global] configuration optionSimo Sorce2015-05-261-1/+4
| | | | | | | This allows admins to configure where the socket needs to be created ithout forcing to change the cwd of the daemon to the same place. Signed-off-by: Simo Sorce <simo@redhat.com>
* Make the socket world accessible by defaultSimo Sorce2015-05-261-0/+2
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Remove pylint star-args exceptionsSimo Sorce2015-05-264-7/+7
| | | | | | | | | | | Newer pylint version completely removed the star-args warning, including recognizing the exception in the source code. Remove it from all source code to avoid annoyinf pylint errors about unrecognized exceptions, and add a general exception in the pylint makefile invocation, as apparently it is ok there. This will avoid warnings if older versions of pylint are used. Signed-off-by: Simo Sorce <simo@redhat.com>
* We do not require cherrypySimo Sorce2015-04-281-1/+0
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add tests and fixes for 'simple' keysSimo Sorce2015-04-272-4/+30
| | | | | | | A missing query would not lead to the default 'simple' type being selected. Add tests for PUT/GET/DELETE of a simple key. Signed-off-by: Simo Sorce <simo@redhat.com>
* Basic custodia testingSimo Sorce2015-04-273-1/+58
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add support for signed/encrypted messagesSimo Sorce2015-04-278-7/+355
| | | | | | | | | The new 'kem' type allows the backend to authorize access to keys based on a signed request where the key mus be whitelisted in advance in a kemkeys database. The reply is encrypted with the client public key. Signed-off-by: Simo Sorce <simo@redhat.com>
* Move message parsing and validationSimo Sorce2015-04-208-26/+168
| | | | | | Create a message module to deal with message types and validation. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add skeleton docs dirSimo Sorce2015-04-164-1/+480
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add Simple encrypted store.Simo Sorce2015-04-154-0/+57
| | | | | | | | | | | This uses JWCrypto to encrypt any key stored in the sqlite database with a master key. The master key is stored in a file and must be provided by the configuration. A sample key and configuration is provided too. Signed-off-by: Simo Sorce <simo@redhat.com>
* Allow to filter by keytype on key GETSimo Sorce2015-04-082-0/+20
|
* Return only key/containers names on LIST operationSimo Sorce2015-04-083-60/+45
|
* Always initialize db on store class instantiationSimo Sorce2015-04-082-15/+19
| | | | | | | | This will precreate the default tale if it doesn't exist and fail early if there are general database issues. Also change all CSStoreError events to report a 500 error and not silently transform them into innocuous 'no such data' errors.
* Move authz checks from Secrets to own classSimo Sorce2015-04-082-73/+124
| | | | | Add a Namespace authorization class to use in the pipeline instead of performing authorization within the Secrets class
* Move pipeline from server class to request handlerSimo Sorce2015-04-081-79/+80
| | | | | Doesn't really make sense to have it on the server class, just snatch the config from it.
* Add basic framework for authorization pluginsSimo Sorce2015-04-085-34/+91
|
* Change authenticators to return a resultSimo Sorce2015-04-073-16/+27
| | | | | | | | | Authenticators will not signal anymore validity by adding a request attributes. Instead they can return on of three values: - True, indicates positive authentication - False, indicate explicit failure - None, inicates neither success nor failure, not applicable
* Python3 compatibility fixesSimo Sorce2015-04-071-8/+8
|
* Mute lintSimo Sorce2015-04-071-2/+2
|
* Initial API definitionsSimo Sorce2015-04-071-0/+147
| | | | Very much a work in progress, but it is a start
* Add detection of conflicts when creating elementsSimo Sorce2015-04-071-1/+26
|
* Add explicit exception for storage conflictsSimo Sorce2015-04-072-2/+8
|
* Add functions to create and destroy containersSimo Sorce2015-04-071-15/+132
|
* Add code and tests to delete keysSimo Sorce2015-04-071-0/+49
|
* Add interface to remove data from storeSimo Sorce2015-04-072-0/+30
|
generated by cgit (git 2.34.1) at 2024-05-07 15:03:32 +0000