docker/docs
1
0
Fork 0
mirror of https://github.com/docker/docs.git synced 2026-11-06 12:54:24 +03:00
Code Activity
497 Commits 92 Branches 28 Tags
bdd6760c69cc339ad863d41c2be4eda946a072b0
Commit Graph

167 Commits

Author SHA1 Message Date
Diogo Monica
bdd6760c69 Changing key removal message 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-28 13:30:41 -07:00
Diogo Monica
5a57f5e970 Rebased off of master, working removes 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-28 11:55:53 -07:00
Diogo Monica
e7fb8ab46c Fixing golint 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-28 11:47:14 -07:00
Diogo Monica
579f51866b Removed all local keystores, added configurable trust dir 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-28 11:47:14 -07:00
David Lawrence
0f322c69a2 fixing remove 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2015-07-28 10:21:14 -07:00
David Lawrence
70f9f3277a viper config for notary signer 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2015-07-27 17:33:11 -07:00
Diogo Monica
4546ded7e0 Adding support for passphrases from env 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-27 12:07:03 -07:00
Diogo Monica
a2472a5a72 Addressed comments, changed to PBES2, added key rotation 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-26 09:18:08 -07:00
Diogo Monica
e568babc0a Added one more test, and fixed delete bug 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-24 06:47:04 -07:00
Diogo Monica
37bced3efa Changed signer to use DB, added initial SQL for private_keys 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-24 05:49:02 -07:00
Aaron Lehmann
2db2764874 Only skip TLS certificate verification if this is explicitly specified in the config 
Fixes #111

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 2015-07-21 17:45:38 -07:00
Nathan McCauley
6ffcb134d7 fix hash compare on verfy to be bytewise 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 17:58:46 -07:00
Derek McGowan
c35c1ea254 Move passphrase logic to its own package 
The logic to retrieve passphrase is generic and may be used by directly by clients.

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
 2015-07-20 13:02:05 -07:00
Nathan McCauley
6b23e7d249 review feedback 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 11:10:13 -07:00
Nathan McCauley
75ae5b65df remove incorrect TODO comment 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 11:00:24 -07:00
Nathan McCauley
bc939bdf1f basic caching of root password for notary cli 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 11:00:24 -07:00
Nathan McCauley
f07876602f add test for passphraseRetriever 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 11:00:24 -07:00
Nathan McCauley
0642da80f1 review feedback 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 11:00:24 -07:00
Nathan McCauley
38fe6bd45b gofmt across the baord 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 11:00:24 -07:00
Nathan McCauley
de6f65b7e7 many testing fixups to support key aliasing 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 11:00:22 -07:00
Nathan McCauley
f239757dfd keystore aliasing, take 2 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 10:58:20 -07:00
Nathan McCauley
5df1eb21f3 keystore aliasing, take 1 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 10:58:20 -07:00
Nathan McCauley
23b7e8c6af Update keyfilestore to use passwordRetriever 
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
 2015-07-20 10:58:16 -07:00
David Lawrence
7db33797a8 fixing timestamp errors on list 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2015-07-20 10:35:40 -07:00
David Lawrence
d453c6548d client side of multi TUF file atomic update 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2015-07-17 17:48:06 -07:00
Diogo Mónica
552ccf411a Merge pull request #80 from docker/test-publish 
Add a unit test for publish
 2015-07-17 16:53:45 -07:00
Aaron Lehmann
afc331b930 Add a unit test for publish 
This instantiates a temporary server, publishes some targets to it, and
makes sure we can pull back the correct targets from the server.

Also fixes a few problems with the client unit tests, error reporting in
the client, and logging in the server.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 2015-07-17 16:27:31 -07:00
Diogo Monica
58e6544d0a Adding Cert retrieval by common name, and renaming KeyID to CertID 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-17 14:28:30 -07:00
Nathan McCauley
88e7346782 Merge pull request #71 from docker/unify-cryptoservice 
Unify cryptoservice
 2015-07-17 11:10:59 -07:00
Aaron Lehmann
125d72fd77 Big refactor to make signer use cryptoservices 
- Add MemoryFileStore, a partial FileStore implementation that doesn't
  persist on disk.

- Create a KeyStore interface that allows pluggable key store types. Use
  this interface in the cryptoservice implementation.

- Add KeyMemoryStore, which uses MemoryFileStore to provide a KeyStore.

- Add GetKey and DeleteKey functions to cryptoservice.CryptoService.

- Refactor the hardware RSA signing service as a CryptoService.

- Replace custom ed25519 code with cryptoservice.CryptoService.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 2015-07-17 09:33:19 -07:00
Richard Scothern
e5d6180276 Enable remote signing service 
Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
 2015-07-16 11:16:40 -07:00
Richard Scothern
df18a541e2 Fix the staging deployment. 
Add a service name and ephemeral ports to notary server.
Remove certs as TLS is terminated in the ELB.

Signed-off-by: Richard Scothern <richard.scothern@gmail.com>
 2015-07-16 09:50:52 -07:00
Diogo Mónica
0ed6072a4a Merge pull request #67 from docker/adding-certs 
Adding new certificates
 2015-07-15 22:35:54 -07:00
Richard Scothern
8eafc998f7 Merge pull request #63 from endophage/fix_sql 
fixing database queries
 2015-07-15 22:33:48 -07:00
Diogo Monica
3debfbca10 Reissued all certs with correct SANs 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-15 21:42:24 -07:00
Diogo Monica
ddfcd50471 Changing .pem to .crt everywhere 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-15 20:44:09 -07:00
Diogo Monica
cdee810942 Changed notary-server to point at new certs 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-15 19:45:34 -07:00
Aaron Lehmann
167a07c894 Change notary-signer to use gotuf's key types 
This causes notary-signer to use gotuf's Key interface instead of
defining its own redundant types.

We can go further with this in the future by removing the redundant
ED25519 implementation. This would be refactored into the cryptoservice
package, and notary-signer would be changed to use that package's
cryptoservice for key creation and signing operations.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 2015-07-15 17:22:46 -07:00
David Lawrence
72d7d35221 fixing database queries 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2015-07-15 16:19:14 -07:00
Aaron Lehmann
a16581ecc7 Move CryptoService and UnlockedCryptoService into a cryptoservice package 
Move GenRootKey and GetRootCryptoService to KeyStoreManager, now that
they don't depend on client-specific types.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 2015-07-14 18:39:38 -07:00
Aaron Lehmann
d5c7c40955 Introduce a KeyStoreManager to abstract management of root and non-root key storage 
This structure encapsulates what used to be "rootKeyStore" and
"privKeyStore". These are being moved out of NotaryRepository, so that
operations like listing keys, importing keys, and exporting keys aren't
tied to a NotaryRepository structure.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 2015-07-14 18:39:38 -07:00
Diogo Monica
321b155596 Godeps update, removed dependency on rufus 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-14 00:39:03 -07:00
Diogo Monica
f03626a10e Refactored Rufus API 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-14 00:23:38 -07:00
Diogo Monica
9a4c2dc744 Initial copy of notary-signer 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-14 00:23:22 -07:00
Diogo Mónica
935b9a9366 Merge pull request #47 from docker/cryptoservice-refactor 
Refactor crypto service
 2015-07-13 15:29:59 -07:00
Aaron Lehmann
e4704f9729 Update notary for removal of signed.Signer 
We now deal with CryptoServices directly instead of passing around
Signers.

UnlockedSigner becomes UnlockedCryptoService because it no longer
contains a Signer.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 2015-07-13 15:18:02 -07:00
David Lawrence
da59198191 adding htpasswd auth to support the same set of mechanisms as distribution 
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
 2015-07-13 14:17:24 -07:00
Diogo Monica
765a2cf661 Refactor crypto service 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-13 13:53:47 -07:00
Diogo Monica
ba94fdd19d Signature/key types are now used correcty and are represented by constants. 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-12 22:21:29 -07:00
Diogo Monica
085c613527 Refactored fingerprint cert and added better debugging 
Signed-off-by: Diogo Monica <diogo@docker.com>
 2015-07-12 22:21:29 -07:00