Commit Graph

1585 Commits

Author SHA1 Message Date
Riyaz Faizullabhoy 10865d2310 addressing review comments
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-15 22:38:41 -08:00
Riyaz Faizullabhoy 1d9e375680 add delegation role methods, more tests
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-15 22:38:41 -08:00
Riyaz Faizullabhoy affd18f3d5 limit role methods
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-15 22:38:41 -08:00
Riyaz Faizullabhoy dcbdc258c1 update the path validation
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-15 22:38:41 -08:00
Riyaz Faizullabhoy d379f9918c add GetBaseRole and GetDelegationRole with path validation
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-15 22:38:41 -08:00
Riyaz Faizullabhoy a754574b85 add stronger role types for internal use
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-15 22:38:41 -08:00
Diogo Mónica 9010989a20 Merge pull request #536 from docker/nonroot-import
Non-root key import and export CLI
2016-02-11 17:39:10 -08:00
Diogo Mónica 35013dc925 Merge pull request #567 from moxiegirl/remove-tutorials
Updating Dockefile
2016-02-11 15:14:20 -08:00
Ying Li b673a15a49 Merge pull request #555 from docker/remove-kdb-from-verify
Remove keyDB from signed.Verify
2016-02-11 11:36:15 -08:00
Ying Li ac265186ee Rename repo.GetRole to repo.GetRoleWithNames and use the Keys data structure more.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-11 09:51:08 -08:00
Mary Anthony 5867409a46 Updating Dockefile
Signed-off-by: Mary Anthony <mary@docker.com>
2016-02-10 21:15:44 -08:00
Riyaz Faizullabhoy 3229592f0c Merge pull request #565 from endophage/readme_coverage
adding codecov badge to readme
2016-02-10 15:45:57 -08:00
Ying Li c88461d485 Change the client to pass the RoleWithKeys to signed.Verify instead of a KeyDB.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-10 15:21:05 -08:00
Ying Li 3b3cc3f152 Update server handlers to pass the RoleWithKeys to signed.Verify instead of KeyDB.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-10 15:21:05 -08:00
Ying Li b7eea5f611 Refactor signed.Verify to no longer take a KeyDB, but a RoleWithKeys object.
Also removes several uncovered and unused functions (Unmarshal and UnmarshalTrusted)
of signed/verify.go.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-10 15:20:54 -08:00
David Lawrence f52535762f adding codecov badge to readme
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-10 13:49:23 -08:00
Diogo Mónica f62a8b3078 Merge pull request #535 from endophage/official_mysql_image
Use official mariadb image
2016-02-08 16:16:10 -08:00
David Lawrence 7a751e5f78 lots of final minor improvements to setup.
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-08 14:18:07 -08:00
Riyaz Faizullabhoy 27c8737bdc refactor ImportRoleKey, simplify integration test code, update constants
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:40:02 -08:00
Riyaz Faizullabhoy 0fdb2d1891 update positive tests
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:40:02 -08:00
Riyaz Faizullabhoy c66584989e add checks to CLI command for role and gun
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy caa9581bcc add tests, consts and fixup
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy 690fcb96da rework import key
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy 12fd5aa246 rework export key
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Diogo Mónica 3b3026c121 Merge pull request #542 from docker/passwd-nonroot
add non-root passwd functionality
2016-02-08 10:21:38 -08:00
David Lawrence 3cf000a852 use named volume and fix env service names
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-05 17:40:23 -08:00
Diogo Mónica 8d2029bc89 Merge pull request #545 from docker/use-go-connections
Use go-connections, and TLS flags for notary client
2016-02-05 14:02:41 -08:00
David Lawrence e891420d53 make better use of the repo already copied into the containers
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 18:02:19 -08:00
Diogo Mónica d4971ddb0c Merge pull request #546 from docker/notary0.1-fixture-fix
Notary0.1 fixture fix - delay metadata and certificate expiry to occur far far in the future
2016-02-04 17:44:20 -08:00
Ying Li 77cc1a0028 Add tests for the TLS command line flags in notary.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 17:24:26 -08:00
Ying Li aaef008706 Add test function to ensure that fixture expiry dates are all far far in the future.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 17:14:00 -08:00
Ying Li 85c2fbea6a Change the fixture to have all the metadata and certs expire 100 years in the future.
Signed-off-by: Ying Li <ying.li@docker.com>

Conflicts:
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/root.json
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/snapshot.json
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/targets.json
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/timestamp.json
2016-02-04 17:11:30 -08:00
Ying Li 60ee270a2b Use docker/go-connections/tlsconfig to set up TLS for notary client/server/signer
This adds some command line flags and configuration for the notary client:
--tlscacert
--tlscert
--tlskey

This enables the notary client to do mutual authentication with the notary server.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 14:02:35 -08:00
Ying Li a9164e66ec Merge pull request #540 from docker/downloads-backwards-compatible-metadata
Downloads backwards compatible metadata
2016-02-04 13:55:44 -08:00
Ying Li e2d127393f Merge pull request #530 from endophage/static_build
adding additional 'make static' command
2016-02-04 13:03:58 -08:00
Ying Li 008c923b58 Merge pull request #544 from docker/upgrade-cobra
Bump the cobra requirement, since they have some nice usage printing fixes
2016-02-04 12:59:06 -08:00
David Lawrence 18ab95c65f add check for darwin (doesn't support static builds)
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 11:54:51 -08:00
Ying Li 00203f7785 Update the previous backwards compatibility test, and add a new test for downloading.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 11:51:20 -08:00
Ying Li 1074e11881 Bump the cobra requirement, since they have some nice usage printing fixes.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 11:43:19 -08:00
Riyaz Faizullabhoy 1c4d02455b add non-root passwd functionality
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-04 11:20:11 -08:00
Ying Li 70c7a8a16d Merge pull request #543 from moxiegirl/add-docker-to-title
Change Notary to show Docker Notary in menu
2016-02-04 11:12:43 -08:00
David Lawrence 3cf25b9bbb automigrate when using compose file
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 10:39:40 -08:00
David Lawrence 6442640718 switching over to offical mariadb image
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 10:39:40 -08:00
Mary Anthony 261d358c79 Change Notary to show Docker Notary in menu
Signed-off-by: Mary Anthony <mary@docker.com>
2016-02-04 08:50:44 -08:00
Diogo Mónica 78dda3d16d Merge pull request #514 from docker/delg-empty-path
Ensure empty string path is properly handled, add --all-paths flag
2016-02-03 17:11:11 -08:00
Riyaz Faizullabhoy f654216b06 sort paths, more tests with all paths
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 16:46:08 -08:00
Riyaz Faizullabhoy 7d2b174098 adding more complex paths to test
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 16:30:39 -08:00
Ying Li d2bc1634d4 Re-check in a notary0.1 file, because we *do* want the timestamp file to test downloads.
This also has a target in the targets file, and also has a changelist object.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-03 16:02:45 -08:00
Riyaz Faizullabhoy f6c703e44d Rename to ClearAllPaths, add comment for delegationAdd
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 15:48:54 -08:00
Riyaz Faizullabhoy bac2d78b9d Adds --all-paths flag (requires new TUF delegation key for removes), also print <all paths> in addition to "" on CLI
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 15:46:03 -08:00