David Lawrence
658a25c4ef
Merge pull request #724 from HuKeping/cli
...
Feature: Introduce some flags on notary verify
2016-05-10 09:04:40 -07:00
David Lawrence
90d767b27c
Merge pull request #728 from twistlock/automate_password
...
Enable using notary client list op with user name/passwords in scripts
2016-05-10 09:01:35 -07:00
Liron Levin
019b4b02e1
Add is terminal check to tuf.go (enable using notary client with username/passwords in scripts)
...
Same behavior as `/passphrase/passphrase.go` (line 104)
Signed-off-by: Liron Levin <liron@twistlock.com >
2016-05-10 10:46:13 +03:00
HuKeping
31a5ebcf4b
From riyazdf's review
...
Prior to this patch, if we provide a value to the output flag, we
write both to the file as well as stdout which is not consistent
with the flag description and also not the intended.
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-05-10 09:51:45 +08:00
HuKeping
0f5d22f95f
Add test for those helper functions
...
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-05-10 09:51:45 +08:00
HuKeping
3b2d9e969f
Add a file to keep all the helper functions
...
To prevent the tuf.go growing even more bigger, and refactor some code.
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-05-10 09:51:45 +08:00
HuKeping
747a296e86
Introduce flag --quiet on notary verify
...
If --quiet(-q for short) was provided, we output nothing except errors.
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-05-10 09:51:45 +08:00
HuKeping
75ac7f6f72
Introduce flag --output on notary verify
...
If --output(-o for short) was provided, we write to a file,
instead of STDOUT.
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-05-10 09:51:45 +08:00
HuKeping
e48b027ac3
Introduce flag --input on notary verify
...
If --input(-i for short) was provided, we read the from a file,
instead of STDIN.
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-05-10 09:51:45 +08:00
Riyaz Faizullabhoy
eadda460db
Merge pull request #726 from docker/rethink-timeouts
...
Increase timeout for RethinkDB (default is 0), remove extra wait
2016-05-09 14:38:18 -07:00
Ying Li
6081e96224
Merge pull request #727 from cyli/save-root-role-only-on-rotate
...
Do not save old root roles until the first root rotation
2016-05-09 14:35:24 -07:00
Ying Li
2699ced85e
Simplify even further and only save the previous role during a root rotation
...
so that in the saved roles named "root.version", the version is the latest
version for which that root role was valid.
Signed-off-by: Ying Li <ying.li@docker.com >
2016-05-09 14:10:25 -07:00
Riyaz Faizullabhoy
6c87dbe4c6
Remove wait after dbCreate
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-09 13:25:07 -07:00
Ying Li
2f43fa66cc
Shift the code that saves the roles around to be slightly more clear what
...
roles it's saving and why.
Signed-off-by: Ying Li <ying.li@docker.com >
2016-05-09 12:02:48 -07:00
Ying Li
9d717780d2
Do not save old root roles until the first root rotation
...
Signed-off-by: Ying Li <ying.li@docker.com >
2016-05-09 11:30:08 -07:00
Riyaz Faizullabhoy
a69f9b85e4
Make default 60s timeout for rethindkb (default is 0)
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-06 17:46:17 -07:00
David Lawrence
61ac085a26
Merge pull request #709 from docker/passphrase-caching-delegation
...
Be less strict for password caching for delegation keys
2016-05-05 17:03:15 -07:00
David Lawrence
64290ecfa9
Merge pull request #721 from docker/rethink-ca-flag
...
Add driver-tls-ca flag for rethink
2016-05-05 17:01:40 -07:00
Riyaz Faizullabhoy
b3ac5b62dc
Add driver-tls-ca flag for rethink
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-05 15:52:49 -07:00
David Lawrence
905736adc7
Merge pull request #708 from docker/signer-rethink-cleanup
...
Allow for configurable notary signer db name, check allowed backends
2016-05-05 15:29:00 -07:00
David Lawrence
3dd79962fa
Merge pull request #715 from docker/rethink-bump
...
Update RethinkDB to 2.3.0, gorethink to v2
2016-05-05 11:39:58 -07:00
David Lawrence
be2020b484
Merge pull request #719 from docker/rethink-client-certs
...
Add client key and cert to rethink client tls config
2016-05-05 11:30:13 -07:00
Ying Li
1f8e5d5863
Merge pull request #718 from twistlock/static_compile
...
Enable notary client static compile
2016-05-05 10:50:14 -07:00
Liron Levin
26cbc805e1
Enable notary client static compile
...
Update pkcs11 package (missing -ldl in LDFLAGS)
Signed-off-by: Liron Levin <liron@twistlock.com >
2016-05-05 11:12:50 +03:00
Riyaz Faizullabhoy
29e65f6d9a
Add client key and cert to rethink client tls config
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-04 20:49:31 -07:00
Riyaz Faizullabhoy
8d08576222
Merge pull request #716 from cyli/fix-signer-interface
...
Fix signer interface to conform to expected cryptoservice behavior
2016-05-04 12:04:25 -07:00
Riyaz Faizullabhoy
7977c6a965
Merge pull request #713 from twistlock/list_targets_basic_auth
...
Enable basic authentication for list command
2016-05-04 11:50:57 -07:00
Ying Li
b10e89e0c0
Fix signer to conform to expected signed.CryptoService behavior.
...
In interface tests, account for the fact that the signer doesn't keep track of roles yet.
Signed-off-by: Ying Li <ying.li@docker.com >
2016-05-04 11:45:40 -07:00
Liron Levin
f5ce3d1eb0
Enable providing username/password for read operations
...
Currently notary fails to authenticate private Docker repositories.
That is, notary fetch a token from `auth.docker.io` but receives 401
(since basic authentication is required to fetch the bearer token for
private Docker repositories).
Since the `AuthenticationHandler` succeed, we must retry the entire flow
with a different handler.
Signed-off-by: Liron Levin <liron@twistlock.com >
2016-05-04 19:43:45 +03:00
Riyaz Faizullabhoy
6bd4f94199
add positive test for passphrase caching
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-03 18:10:48 -07:00
Ying Li
b83fd7842b
Add a general interface test for signed.CryptoService specifying expected interface behavior.
...
Apply it to cryptoservice.CryptoService and signed.client.NotarySigner.
Signed-off-by: Ying Li <ying.li@docker.com >
2016-05-03 17:00:55 -07:00
Riyaz Faizullabhoy
d08ecc770f
Update RethinkDB to 2.3.0, gorethink to v2
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-03 15:47:30 -07:00
Riyaz Faizullabhoy
46a37c0fa7
Allow for password caching for delegation keys with non-delegation PEM names
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-02 10:28:54 -07:00
Riyaz Faizullabhoy
5659554801
Allow for configurable notary signer db name, actually check allowed backends on setup
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-05-02 10:11:01 -07:00
Ying Li
134bdbcb90
Merge pull request #698 from docker/codecov.yml
...
Add a codecov config file that disables project and changes statuses
2016-04-29 14:24:01 -07:00
Riyaz Faizullabhoy
35010659eb
Merge pull request #695 from docker/size-const
...
Add const for max size -1 for GetMeta
2016-04-29 09:53:10 -07:00
Ying Li
f2f9e6169a
Add a codecov config file that disables project and changes statuses
...
Signed-off-by: Ying Li <ying.li@docker.com >
2016-04-29 09:42:29 -07:00
Riyaz Faizullabhoy
7e6c15d7e1
Rename constant
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-04-29 09:33:45 -07:00
Riyaz Faizullabhoy
fa1ead35e2
More occurrences of -1 and fixup comments
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-04-29 09:32:10 -07:00
Riyaz Faizullabhoy
4bd5c10fc8
Add const for max size -1 for GetMeta
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-04-29 09:31:02 -07:00
Ying Li
c2219d664e
Merge pull request #705 from docker/docs-fix
...
Docs fix
2016-04-28 18:00:59 -07:00
Ying Li
177711137f
Fix service architecture tables that were misformatted, and re-link sequence diagram.
...
Signed-off-by: Ying Li <ying.li@docker.com >
2016-04-28 13:19:03 -07:00
Ying Li
27469f01fe
Fix metadata sequence diagram that was missing arrows.
...
Signed-off-by: Ying Li <ying.li@docker.com >
2016-04-28 13:18:24 -07:00
Ying Li
2166f84543
Merge pull request #704 from SvenDowideit/use-docs-base-oss
...
convert docs Dockerfiles to use docs/base:oss
2016-04-28 10:56:56 -07:00
Riyaz Faizullabhoy
b54934f353
Merge pull request #703 from SvenDowideit/fix-image-path
...
Use markdown to link to image, so the published result shows it
2016-04-28 09:11:28 -07:00
Sven Dowideit
8ab3937e9f
convert docs Dockerfiles to use docs/base:oss
...
Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au >
2016-04-28 12:57:26 +00:00
Sven Dowideit
52e6017dcb
Use markdown to link to image, so the published result shows it
...
Signed-off-by: Sven Dowideit <SvenDowideit@home.org.au >
2016-04-28 03:17:12 +00:00
Ying Li
9da826a775
Merge pull request #694 from HuKeping/docs-fix
...
Docs: some review
2016-04-27 19:57:20 -07:00
HuKeping
5b78101dca
Revert "Docs: review service_architecture.md"
...
This reverts commit 76698409744c8a02e2fb7a5d1843d8425f9ba417.
Relative discussion:
https://github.com/docker/notary/pull/694#discussion-diff-60949918R30
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-04-28 09:27:05 +08:00
HuKeping
5c2faf0da8
Docs: update some tips and comments
...
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-04-28 09:27:05 +08:00