David Lawrence
b8674162f8
Merge pull request #44 from endophage/atomic_update
...
Atomic updates of metadata.
2015-07-13 20:23:01 -07:00
David Lawrence
0f26bdf956
adding errors if role is empty or bad
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 19:50:09 -07:00
David Lawrence
6dd18754b2
Merge pull request #48 from endophage/db_schema
...
refactoring database schema out into its own file
2015-07-13 18:45:45 -07:00
David Lawrence
81ab80d0bf
adding sqlmock godep
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 18:19:31 -07:00
David Lawrence
6533da1be4
tests for atomic update
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 18:19:31 -07:00
David Lawrence
5bcd3ff52d
reworking the insert check for TUF metadata in the database
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 18:18:33 -07:00
David Lawrence
40921a4bed
fixing lint and vet errors
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 18:18:33 -07:00
David Lawrence
ec08d28610
provide an additional handler to allow clients to update any set of TUF metadata atomically
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 18:18:33 -07:00
David Lawrence
c35eed7b36
Merge pull request #50 from dmcgowan/fix-token-type
...
Fix access controller resource type
2015-07-13 17:46:36 -07:00
Derek McGowan
e4bb29a669
Fix access controller resource type
...
The token server returns tokens with the type as "repository" not "repo".
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-13 16:22:05 -07:00
Diogo Mónica
935b9a9366
Merge pull request #47 from docker/cryptoservice-refactor
...
Refactor crypto service
2015-07-13 15:29:59 -07:00
Diogo Monica
8dcea65731
Adding new gotuf
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-13 15:28:33 -07:00
Aaron Lehmann
e4704f9729
Update notary for removal of signed.Signer
...
We now deal with CryptoServices directly instead of passing around
Signers.
UnlockedSigner becomes UnlockedCryptoService because it no longer
contains a Signer.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-13 15:18:02 -07:00
Aaron Lehmann
ea298b4999
Update gotuf to 875881b1d0ce625f54318e3ebfd79414a6b5e285
...
This brings in the Signer removal.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-13 14:42:24 -07:00
David Lawrence
bfdb5f72b0
refactoring database schema out into its own file for easier use outside of containers
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 14:41:51 -07:00
David Lawrence
76478a52ab
Merge pull request #11 from docker/authentication
...
Auth mechanisms
2015-07-13 14:33:11 -07:00
David Lawrence
12dd2c2273
challenge.ServeHTTP doesn't set Unauthorized status code
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 14:21:14 -07:00
David Lawrence
da59198191
adding htpasswd auth to support the same set of mechanisms as distribution
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-13 14:17:24 -07:00
Diogo Monica
a139807d89
Fixing lint
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-13 14:01:26 -07:00
Diogo Monica
765a2cf661
Refactor crypto service
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-13 13:53:47 -07:00
David Lawrence
17af21f00c
Merge pull request #46 from dmcgowan/use-distribution-uuid
...
Use uuid library from distribution
2015-07-13 10:56:13 -07:00
Derek McGowan
c87caf3979
Use uuid library from distribution
...
Distribution updated context library to use its own uuid library which does not panic on entropy exhaustion.
Updated to use latest context library from distribution.
Updated auth to match context and uuid library version.
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-13 10:09:06 -07:00
Diogo Mónica
3f5a78d235
Merge pull request #45 from docker/adding-ecdsa
...
Adding ECDSA support
2015-07-12 23:04:47 -07:00
Diogo Monica
373e4f6c76
Adding term as new dependency
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 23:00:20 -07:00
Diogo Monica
1f5d935cc8
Fixing lint
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:51:27 -07:00
Diogo Monica
2522b3f6df
Updating gotuf
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:49:35 -07:00
Diogo Monica
1a054d7741
Small nits
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:21:29 -07:00
Diogo Monica
ba94fdd19d
Signature/key types are now used correcty and are represented by constants.
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:21:29 -07:00
Diogo Monica
085c613527
Refactored fingerprint cert and added better debugging
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:21:29 -07:00
Diogo Monica
39482c2397
Working ECDSA implementation
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:21:29 -07:00
Diogo Monica
43d0ec8a75
Initial ECDSA trustmanager methods
...
Signed-off-by: Diogo Monica <diogo@docker.com>
Splitting CryptoService into ECDSA and RSA cryptoservices
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
Working ECDSA support
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-12 22:21:29 -07:00
Diogo Mónica
0e0605c6e2
Merge pull request #43 from dmcgowan/fix-fmt-lines
...
Use logrus instead of fmt.Println
2015-07-12 11:40:08 -07:00
Derek McGowan
f292b562e2
Use logrus instead of fmt.Println
...
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-10 17:10:23 -07:00
Diogo Mónica
cab1006568
Merge pull request #42 from docker/signing-methods
...
Signing methods
2015-07-10 15:21:21 -07:00
Diogo Monica
5a7e1ca7f2
Vendoring new gotuf
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-10 15:17:44 -07:00
Aaron Lehmann
f8e087a17a
Unify CryptoService and RootCryptoService
...
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-10 15:10:44 -07:00
Aaron Lehmann
81f5fd7461
Switch to RSA-PSS
...
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-10 15:10:19 -07:00
Aaron Lehmann
a45c3e3965
Modify TestAddTarget to make TestAddListTarget
...
This test now checks ListTargets and GetTargetByName as well. To do
this, it needs to expose signed metadata files over the internal HTTP
server. This means adding the timestamp private key to the key store and
exposing various json files as endpoints that serialize the necessary
data.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
2015-07-10 10:19:14 -07:00
David Lawrence
d1b09962f1
using roundtripper in notary client
...
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2015-07-10 10:02:38 -07:00
Diogo Mónica
436e02d390
Merge pull request #32 from dmcgowan/fix-default-loglevel
...
Fix default log level
2015-07-09 23:56:13 -07:00
Derek McGowan
bd61c9896f
Merge pull request #40 from dmcgowan/circle-remove-old
...
Remove circle old go version
2015-07-09 21:35:50 -07:00
Derek McGowan
338c781d48
Remove circle old go version
...
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-09 21:31:02 -07:00
Diogo Monica
1ae9cf057e
Removing dangling temp test directories
2015-07-09 21:03:54 -07:00
Diogo Mónica
d21823a825
Merge pull request #39 from imduffy15/patch-1
...
Fix example configuration file given in README.md
2015-07-09 20:48:26 -07:00
Ian Duffy
ed4454c9c9
Fix example configuration file given in README.md
...
The example configuration given in README.md is missing a comma character and doesn't form valid JSON.
This PR adds the comma as required.
Signed-off-by: Ian Duffy <ian@ianduffy.ie>
2015-07-10 04:35:02 +01:00
Diogo Monica
96069d3619
Removing uneeded file
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-09 19:27:25 -07:00
Diogo Mónica
7e467501a2
Merge pull request #37 from docker/tuf_rebase
...
Tuf rebase, ready to merge into master.
2015-07-09 19:21:03 -07:00
Diogo Mónica
92c7856627
Merge pull request #38 from dmcgowan/circle-new-go-only
...
Remove use of old version of Docker in circle build
2015-07-09 19:13:40 -07:00
Derek McGowan
885c59fa9e
Remove use of old version of Docker in circle build
...
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2015-07-09 19:08:09 -07:00
Diogo Monica
9ae667c9aa
Adding new vendored gotuf
...
Signed-off-by: Diogo Monica <diogo@docker.com>
2015-07-09 18:57:53 -07:00