Commit Graph

80 Commits

Author SHA1 Message Date
Ying Li 8696c64d12 Add prometheus as a dependency
Signed-off-by: Ying Li <ying.li@docker.com>
2015-10-28 20:21:45 -07:00
David Lawrence 2833a88292 adding gotuf to notary
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-10-27 16:36:06 -07:00
Diogo Monica efb71c9ef1 Update gotuf
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-10-21 12:15:23 -07:00
David Lawrence 8a996f417a updating godeps and notary for some syntax changes in gotuf brought on by golint
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-10-20 23:56:35 -07:00
David Lawrence 15b07101c0 updating gotuf dependency
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-10-15 14:52:18 -07:00
Ying Li f49b74675d Update Gotuf to the latest version (sqlite3 dependency changed) and clean up some old
Godep dependencies that are no longer needed.

Signed-off-by: Ying Li <ying.li@docker.com>
2015-10-14 10:53:07 -07:00
David Lawrence 98cde51f18 working basic key rotation for targets and snapshot key. Command is 'notary key rotate [GUN]'
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-10-09 20:35:06 -07:00
Ying Li 77fa33f737 Update godeps
Signed-off-by: Ying Li <ying.li@docker.com>
2015-10-07 21:00:20 -07:00
Joe Beda 87b1b2efbc Add new dependency: github.com/mitchellh/go-homedir
Signed-off-by: Joe Beda <joe.github@bedafamily.com>
2015-09-10 16:07:38 -07:00
Jessica Frazelle 74b4ef064c change canonical json package
update godeps for gotuf and canonical json

Signed-off-by: Jessica Frazelle <acidburn@docker.com>
2015-09-03 20:11:49 -07:00
Derek McGowan e50e750fb0 Update vendor to add distribution client authentication
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-08-19 13:48:16 -07:00
David Lawrence 6616bed616 validation tests
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-08-06 17:38:37 -07:00
David Lawrence 0ece438313 server side validation during updates
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-08-05 14:00:07 -07:00
Derek McGowan 4adcfa2b2f Update notary godeps
Updated to master of gotuf
Fix awkward docker/docker dependency

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-31 14:08:59 -07:00
Diogo Mónica 149ba6fd0f Merge pull request #157 from docker/configurable_key_algo
make key algorithm configurable for local development with in memory …
2015-07-30 13:36:01 -07:00
David Lawrence 2bf3acd493 adding bugsnag
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-30 12:03:47 -07:00
Derek McGowan ac5feeb82a Update gotuf
Update gotuf for timestamp expiration change

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-29 17:09:26 -07:00
Aaron Lehmann f8dc88a372 Updating godeps
The github.com/docker/distribution/registry/api/v2 package needs to be
vendored now that it's used by notary-server.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-27 14:53:31 -07:00
Diogo Monica 0fb0877c3c Adding new jose dependency, fixing nits
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-26 20:32:47 -07:00
David Lawrence 47f651ef8a fixing timestamp key retrieval
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-24 18:05:46 -07:00
Diogo Monica 9e11389b53 Adding new godeps
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-24 05:45:52 -07:00
David Lawrence 94de318202 ErrSigVerifyFail isn't used, we should be retrying on ErrRoleThreshold which means we didn't have enough keys to validate the signatures
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-23 11:57:40 -07:00
David Lawrence 8a97c99c1e updating gotuf
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-22 19:37:23 -07:00
David Lawrence 6fd60f88d1 add ErrExpired to notary client to translate from gotuf ErrExpired
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-22 18:54:00 -07:00
David Lawrence 1fc3257f6e updating gotuf dep with some better http error handling.
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-22 13:19:52 -07:00
David Lawrence 1f53e171bc updating vendored gotuf with updating signing error messages
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-21 14:04:05 -07:00
David Lawrence 8b2888d122 latest vendored gotuf
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-21 13:57:21 -07:00
David Lawrence b44e835275 update default expiry times to those agreed on
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-20 14:59:19 -07:00
David Lawrence 0e2fe2137b updating gotuf dep
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-20 11:23:07 -07:00
Diogo Monica 7de1acfc04 Bump gotuf
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-18 01:48:06 -07:00
David Lawrence b561f347ed updating errors to use distribution's errcode package
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-17 18:02:56 -07:00
David Lawrence d453c6548d client side of multi TUF file atomic update
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-17 17:48:06 -07:00
Aaron Lehmann d2ea9cc0d5 Updates to notary for gotuf's split of PublicKey and PrivateKey interfaces
Functions should now take data.PublicKey or data.PrivateKey instead of
data.Key.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-17 11:35:22 -07:00
Aaron Lehmann 125d72fd77 Big refactor to make signer use cryptoservices
- Add MemoryFileStore, a partial FileStore implementation that doesn't
  persist on disk.

- Create a KeyStore interface that allows pluggable key store types. Use
  this interface in the cryptoservice implementation.

- Add KeyMemoryStore, which uses MemoryFileStore to provide a KeyStore.

- Add GetKey and DeleteKey functions to cryptoservice.CryptoService.

- Refactor the hardware RSA signing service as a CryptoService.

- Replace custom ed25519 code with cryptoservice.CryptoService.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-17 09:33:19 -07:00
Diogo Monica 321b155596 Godeps update, removed dependency on rufus
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-14 00:39:03 -07:00
David Lawrence 81ab80d0bf adding sqlmock godep
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 18:19:31 -07:00
Diogo Mónica 935b9a9366 Merge pull request #47 from docker/cryptoservice-refactor
Refactor crypto service
2015-07-13 15:29:59 -07:00
Diogo Monica 8dcea65731 Adding new gotuf
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-13 15:28:33 -07:00
Aaron Lehmann ea298b4999 Update gotuf to 875881b1d0ce625f54318e3ebfd79414a6b5e285
This brings in the Signer removal.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-13 14:42:24 -07:00
David Lawrence da59198191 adding htpasswd auth to support the same set of mechanisms as distribution
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 14:17:24 -07:00
Derek McGowan c87caf3979 Use uuid library from distribution
Distribution updated context library to use its own uuid library which does not panic on entropy exhaustion.
Updated to use latest context library from distribution.
Updated auth to match context and uuid library version.

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-13 10:09:06 -07:00
Diogo Monica 373e4f6c76 Adding term as new dependency
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 23:00:20 -07:00
Diogo Monica 2522b3f6df Updating gotuf
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:49:35 -07:00
Diogo Monica 5a7e1ca7f2 Vendoring new gotuf
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-10 15:17:44 -07:00
David Lawrence d1b09962f1 using roundtripper in notary client
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-10 10:02:38 -07:00
Diogo Monica 1ae9cf057e Removing dangling temp test directories 2015-07-09 21:03:54 -07:00
Diogo Monica 9ae667c9aa Adding new vendored gotuf
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-09 18:57:53 -07:00
David Lawrence 3bcc0e1d4d updating wo make notary work with rufus again
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-09 17:58:09 -07:00
Diogo Monica e66dc12eca More refactor 2015-07-09 17:58:08 -07:00
David Lawrence 89379a728c adding timestamping and some general cleanup
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-03 15:38:09 -07:00