Commit Graph

1430 Commits

Author SHA1 Message Date
Riyaz Faizullabhoy 36c33e6732 Update integration test to exclude yubikeys from importing/exporting non-root
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-16 17:10:28 -08:00
Diogo Mónica 9010989a20 Merge pull request #536 from docker/nonroot-import
Non-root key import and export CLI
2016-02-11 17:39:10 -08:00
Diogo Mónica 35013dc925 Merge pull request #567 from moxiegirl/remove-tutorials
Updating Dockefile
2016-02-11 15:14:20 -08:00
Ying Li b673a15a49 Merge pull request #555 from docker/remove-kdb-from-verify
Remove keyDB from signed.Verify
2016-02-11 11:36:15 -08:00
Ying Li ac265186ee Rename repo.GetRole to repo.GetRoleWithNames and use the Keys data structure more.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-11 09:51:08 -08:00
Mary Anthony 5867409a46 Updating Dockefile
Signed-off-by: Mary Anthony <mary@docker.com>
2016-02-10 21:15:44 -08:00
Riyaz Faizullabhoy 3229592f0c Merge pull request #565 from endophage/readme_coverage
adding codecov badge to readme
2016-02-10 15:45:57 -08:00
Ying Li c88461d485 Change the client to pass the RoleWithKeys to signed.Verify instead of a KeyDB.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-10 15:21:05 -08:00
Ying Li 3b3cc3f152 Update server handlers to pass the RoleWithKeys to signed.Verify instead of KeyDB.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-10 15:21:05 -08:00
Ying Li b7eea5f611 Refactor signed.Verify to no longer take a KeyDB, but a RoleWithKeys object.
Also removes several uncovered and unused functions (Unmarshal and UnmarshalTrusted)
of signed/verify.go.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-10 15:20:54 -08:00
David Lawrence f52535762f adding codecov badge to readme
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-10 13:49:23 -08:00
Diogo Mónica f62a8b3078 Merge pull request #535 from endophage/official_mysql_image
Use official mariadb image
2016-02-08 16:16:10 -08:00
David Lawrence 7a751e5f78 lots of final minor improvements to setup.
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-08 14:18:07 -08:00
Riyaz Faizullabhoy 27c8737bdc refactor ImportRoleKey, simplify integration test code, update constants
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:40:02 -08:00
Riyaz Faizullabhoy 0fdb2d1891 update positive tests
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:40:02 -08:00
Riyaz Faizullabhoy c66584989e add checks to CLI command for role and gun
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy caa9581bcc add tests, consts and fixup
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy 690fcb96da rework import key
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Riyaz Faizullabhoy 12fd5aa246 rework export key
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-08 13:38:42 -08:00
Diogo Mónica 3b3026c121 Merge pull request #542 from docker/passwd-nonroot
add non-root passwd functionality
2016-02-08 10:21:38 -08:00
David Lawrence 3cf000a852 use named volume and fix env service names
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-05 17:40:23 -08:00
Diogo Mónica 8d2029bc89 Merge pull request #545 from docker/use-go-connections
Use go-connections, and TLS flags for notary client
2016-02-05 14:02:41 -08:00
David Lawrence e891420d53 make better use of the repo already copied into the containers
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 18:02:19 -08:00
Diogo Mónica d4971ddb0c Merge pull request #546 from docker/notary0.1-fixture-fix
Notary0.1 fixture fix - delay metadata and certificate expiry to occur far far in the future
2016-02-04 17:44:20 -08:00
Ying Li 77cc1a0028 Add tests for the TLS command line flags in notary.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 17:24:26 -08:00
Ying Li aaef008706 Add test function to ensure that fixture expiry dates are all far far in the future.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 17:14:00 -08:00
Ying Li 85c2fbea6a Change the fixture to have all the metadata and certs expire 100 years in the future.
Signed-off-by: Ying Li <ying.li@docker.com>

Conflicts:
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/root.json
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/snapshot.json
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/targets.json
	fixtures/compatibility/notary0.1/tuf/docker.com/notary0.1/samplerepo/metadata/timestamp.json
2016-02-04 17:11:30 -08:00
Ying Li 60ee270a2b Use docker/go-connections/tlsconfig to set up TLS for notary client/server/signer
This adds some command line flags and configuration for the notary client:
--tlscacert
--tlscert
--tlskey

This enables the notary client to do mutual authentication with the notary server.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 14:02:35 -08:00
Ying Li a9164e66ec Merge pull request #540 from docker/downloads-backwards-compatible-metadata
Downloads backwards compatible metadata
2016-02-04 13:55:44 -08:00
Ying Li e2d127393f Merge pull request #530 from endophage/static_build
adding additional 'make static' command
2016-02-04 13:03:58 -08:00
Ying Li 008c923b58 Merge pull request #544 from docker/upgrade-cobra
Bump the cobra requirement, since they have some nice usage printing fixes
2016-02-04 12:59:06 -08:00
David Lawrence 18ab95c65f add check for darwin (doesn't support static builds)
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 11:54:51 -08:00
Ying Li 00203f7785 Update the previous backwards compatibility test, and add a new test for downloading.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 11:51:20 -08:00
Ying Li 1074e11881 Bump the cobra requirement, since they have some nice usage printing fixes.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-04 11:43:19 -08:00
Riyaz Faizullabhoy 1c4d02455b add non-root passwd functionality
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-04 11:20:11 -08:00
Ying Li 70c7a8a16d Merge pull request #543 from moxiegirl/add-docker-to-title
Change Notary to show Docker Notary in menu
2016-02-04 11:12:43 -08:00
David Lawrence 3cf25b9bbb automigrate when using compose file
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 10:39:40 -08:00
David Lawrence 6442640718 switching over to offical mariadb image
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-02-04 10:39:40 -08:00
Mary Anthony 261d358c79 Change Notary to show Docker Notary in menu
Signed-off-by: Mary Anthony <mary@docker.com>
2016-02-04 08:50:44 -08:00
Diogo Mónica 78dda3d16d Merge pull request #514 from docker/delg-empty-path
Ensure empty string path is properly handled, add --all-paths flag
2016-02-03 17:11:11 -08:00
Riyaz Faizullabhoy f654216b06 sort paths, more tests with all paths
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 16:46:08 -08:00
Riyaz Faizullabhoy 7d2b174098 adding more complex paths to test
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 16:30:39 -08:00
Ying Li d2bc1634d4 Re-check in a notary0.1 file, because we *do* want the timestamp file to test downloads.
This also has a target in the targets file, and also has a changelist object.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-03 16:02:45 -08:00
Riyaz Faizullabhoy f6c703e44d Rename to ClearAllPaths, add comment for delegationAdd
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 15:48:54 -08:00
Riyaz Faizullabhoy bac2d78b9d Adds --all-paths flag (requires new TUF delegation key for removes), also print <all paths> in addition to "" on CLI
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 15:46:03 -08:00
Riyaz Faizullabhoy 6ffde51d89 Ensure empty string path is properly handled, make default for adding delegation
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-02-03 15:31:26 -08:00
Diogo Mónica 9de2486488 Merge pull request #537 from docker/refactor-notary-cli
Refactor the notary command line to not use global mutable state
2016-02-03 15:19:52 -08:00
Ying Li 718002acea Add some more tests for notary CLI
Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-03 13:21:32 -08:00
Diogo Mónica dac785d0b5 Merge pull request #539 from docker/update-go-connections
Bump go-connections version.  Looks like I had previously vendored a …
2016-02-03 12:05:43 -08:00
Ying Li d67a7e128c Refactor the notary command line to not use global mutable state, and to not exit on error.
This way we can test the command more easily (we want to test the error, as opposed to
just killing the test).

Signed-off-by: Ying Li <ying.li@docker.com>
2016-02-03 12:01:16 -08:00