Commit Graph

1585 Commits

Author SHA1 Message Date
Ying Li 8c895747c5 Add a doc about how to upgrade to v0.2.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-28 16:21:22 -08:00
Riyaz Faizullabhoy cd7274f1b9 Add additional tests with different delegation key format using role PEM header
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-28 15:49:09 -08:00
Riyaz Faizullabhoy 8f0a3c3975 Merge pull request #512 from HuKeping/tiny
Tiny refactor: to keep code style consistent
2016-01-28 14:20:26 -08:00
Riyaz Faizullabhoy 9c59af1397 passwd command and tests
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-28 10:36:05 -08:00
Riyaz Faizullabhoy 2964e8c6f4 add integration test for adding/listing/removing targets from roles
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-28 10:20:27 -08:00
Riyaz Faizullabhoy 41643d4a9c make -1 read up to 100MB of data, use for non-timestamps. Reduce
timestamp to 1MB max

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-28 10:17:17 -08:00
Riyaz Faizullabhoy 660c4a5f23 Add slow tests for downloading very large snapshot and targets meta files, comment on max size const
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-28 10:16:19 -08:00
Riyaz Faizullabhoy a6159a45d1 ensure filestore GetMeta only returns up to size bytes. Standardize constant for max size
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-28 10:16:19 -08:00
Riyaz Faizullabhoy bb9ef929de Add --roles flags to targets commands
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-28 09:59:04 -08:00
HuKeping 6b31789fe5 Tiny refactor: to keep code style consistent
The other CLI commands about tuf are all begin with cmdTufXXX
which I think `verify` should be the same too.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-28 20:13:39 +08:00
David Lawrence a5df40762d Merge pull request #510 from endophage/better_401
return a better error message if the HTTP status code was 401
2016-01-27 16:04:21 -08:00
David Lawrence 6fa388b467 return a better error message if the HTTP status code was 401
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-27 11:52:23 -08:00
Diogo Mónica c4277dd221 Merge pull request #508 from docker/log-level
move verifier and update logs down to debug level
2016-01-27 08:55:44 -08:00
Diogo Mónica f4311b3a27 Merge pull request #509 from docker/reject-short-keys
Add check for RSA key len before adding delegation
2016-01-27 08:54:27 -08:00
Ying Li c90e1bd8c8 Merge pull request #500 from docker/speed-up-tests
Don't run all the tests with yubikey
2016-01-27 08:53:45 -08:00
Riyaz Faizullabhoy 83c5ed255b Add check for RSA key len before adding
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-26 23:27:06 -08:00
Riyaz Faizullabhoy ceca4c233e move verifier and update logs down to debug level
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-26 23:02:54 -08:00
Diogo Mónica 7eb86f7a64 Merge pull request #493 from docker/delegation-cli-text
delegations CLI UX improvements
2016-01-26 15:32:20 -08:00
Ying Li c1f3550b54 Merge pull request #499 from jfrazelle/update-url
change url from jfrazelle/go to docker/go
2016-01-26 10:53:26 -08:00
Jessica Frazelle a64db12c04
change url from jfrazelle/go to docker/go
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2016-01-26 08:43:38 -08:00
Ying Li c583063014 Do not run all the tests when testing yubikey hardware.
The tests take forever, since it *cannot* be parallelized at all, and there
can only be one build at a time.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-25 22:03:39 -08:00
Riyaz Faizullabhoy 87cc809f18 Merge pull request #491 from docker/tuf-update-logs
allow for configurable log level, change default for CLI
2016-01-25 17:24:32 -08:00
Riyaz Faizullabhoy 774b66c9fe delegations CLI UX improvements
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-25 16:14:02 -08:00
Riyaz Faizullabhoy 12d3eb49ae Change default log level to fatal, change verbose to error level and add
debug flag for debug level

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-25 16:13:42 -08:00
Diogo Mónica ffe603a968 Merge pull request #498 from docker/integration-test-fix
Root is always on disk unless restored from backup, in which case it may only be on a yubikey
2016-01-25 15:56:35 -08:00
Ying Li a1aa4d7078 Attempt to simplify pushing to codecov, since codecov can do merges.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-25 15:18:24 -08:00
Ying Li b51d1e8cf8 Root is always on disk unless restored from backup.
(In which case if Yubikey is available, it will only be on the Yubikey and not on disk.)

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-25 13:37:39 -08:00
Riyaz Faizullabhoy 20648f18e9 Merge pull request #497 from HuKeping/work-branch
Tiny refactor
2016-01-25 09:21:06 -08:00
HuKeping 3cd3614de6 Tiny refactor
Just to keep consistent with the others.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-25 15:14:08 +08:00
David Lawrence 3c874f3080 Merge pull request #474 from endophage/consistent
Consistent TUF Files
2016-01-24 11:10:31 -08:00
David Lawrence d38d7ceb89 moving checksum after role in urls. We're breaking with spec for an easier to manage filename system
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-24 10:38:55 -08:00
David Lawrence adfbe6938e cleaning up logging
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-24 10:38:55 -08:00
David Lawrence 27961b010e negative tests for get by checksum
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-24 10:38:55 -08:00
David Lawrence 4738760794 get by checksum
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-24 10:38:55 -08:00
David Lawrence 6f7acb6ddf adding server logic for clients to request consistent TUF files
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-24 10:38:55 -08:00
Diogo Mónica 341bd335f5 Merge pull request #475 from docker/repo-info-lib
get all current role information for a repo
2016-01-22 16:31:28 -08:00
Ying Li 08deb7f8ef Merge pull request #484 from docker/update-when-server-error-tests
Add tests for when the server 404's or 50X's when updating
2016-01-22 15:37:45 -08:00
Ying Li 499d5a7c0c Add an extra targets/b delegation chain to the tests.
Also, shorten some of the options (do not specify false, since that's default).

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-21 16:34:53 -08:00
Diogo Mónica e579f101e7 Merge pull request #486 from endophage/fix_offline
tokenAuth should also 'succeed' if we get a 401
2016-01-21 13:36:49 -08:00
Ying Li e79839b216 Add better error reporting for update tests.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-21 13:23:30 -08:00
Ying Li dde9531b4a Fix an error where we get a JSON syntax error on server 404 or 50X.
We were testing to see if the cached metadata was nil, but we actually
set it to an empty data.Signed object, but didn't always set it to nil
if we failed to get local metadata.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-21 13:23:30 -08:00
Ying Li 36684a3290 Use cached timestamp if we get a 404 when updating timestamp.
We use the cached timestamp for all other errors, so this makes the
error consistent.  The only special metadata is the root.json, where a 404
signifies that the repository doesn't exist.  Also update the message
when a cached timestamp is used.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-21 13:23:16 -08:00
David Lawrence 6389c8cf75 tokenAuth should also 'succeed' if we get a 401, which will result in attempting futher authentication later
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-21 11:44:00 -08:00
Riyaz Faizullabhoy 25a1e9aed7 change to ListRoles, and GetAllLoadedRoles
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-20 15:58:55 -08:00
Ying Li 803205d8bf Update and add tests for what happens if the remote repo 404's or 500's on root.json.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-20 14:41:54 -08:00
Riyaz Faizullabhoy a052d9e105 client library for retrieving keys and signatures for all roles
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-20 12:00:09 -08:00
Diogo Mónica 60e6d254b3 Merge pull request #477 from docker/swizzler
Update tests while messing up metadata
2016-01-20 11:05:34 -08:00
Ying Li df53f51b0b Refactor swizzler to not produce a repo itself, but to just take some initial metadata.
Updated the testutils/repo.go utility to be able to produce a repository with delegations
and to export metadata from said repo instead.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-20 10:02:14 -08:00
Ying Li 3c72ef762b Merge pull request #482 from docker/random-lint-fix
Add some comments about the notary constants, and other lint fixes.
2016-01-19 23:39:11 -08:00
Diogo Mónica b6b5acb0a1 Merge pull request #469 from endophage/fixing_468
Offline operation when server not reachable
2016-01-19 17:18:19 -08:00