1
0
mirror of https://github.com/minio/mc.git synced 2025-11-10 13:42:32 +03:00
Commit Graph

14 Commits

Author SHA1 Message Date
Harshavardhana
cf7e0ae050 generalize input for ctx.Command.Name (#4338) 2022-11-01 08:04:26 -07:00
Anis Elleuch
f85086b153 Use a pager for help output (#4245) 2022-09-28 11:28:02 -07:00
Harshavardhana
c7570bd54a introduce net.Conn deadlines to avoid hung connections (#4164)
fixes #4133
2022-07-27 08:21:05 -07:00
Harshavardhana
83d81ea590 fix: SubKeyId may not be same AuthorityKeyId for self-signed CA (#4093)
In situations when cert is its own CA the SubKeyId is not
same as AuthorityKeyId

Refer
https://cs.opensource.google/go/go/+/refs/tags/go1.18.2:src/crypto/x509/x509.go;l=1525

This PR handles this by validating the SubKeyId with correct value
that is expected, extends the current TOFU style.
2022-05-23 05:13:20 -07:00
Anis Elleuch
606cdd3453 Load proxy config when probing for server TLS certificate (#4052)
mc alias set recently started to probe the TLS certificate for
the remote server, however it should load the proxy environment
configuration if any.
2022-04-15 16:49:57 -07:00
Harshavardhana
84a7b83eda use globalRootCAs always do not initialize new certPools
automatic prompt for certs broke system trusted tls endpoints
since it ignored the currently loaded certs as trusted.

if they are available and we can establish TLS we should
proceed instead of failing and asking users to always use
`--insecure`
2022-03-17 12:56:43 -07:00
Anis Elleuch
de063f9252 Fix alias add when --insecure is passed in a non tty (#4025)
--insecure does not have an effect when running mc in a non-terminal. This
commit fixes the behavior by ignoring the prompt from trusting self
signed certificate when --insecure is passed as well.
2022-03-17 10:35:24 -07:00
Andreas Auernhammer
3252573ed2 alias: fetch peer certificate when adding an alias (#4010)
This commit adds an extension to the `alias set`
command. When adding an alias fails due to a TLS
trust error - i.e. remote peer certificate verification
fails - `mc` fetches the remote peer certificate,
computes the public key fingerprint and asks the user
to confirm the fingerprint.

When the user confirms the fingerprint, the certificate
is added to the `CAs` directory.

This allows users to use a TOFU authentication with
self-signed certificates - similar to SSH.

Signed-off-by: Andreas Auernhammer <hi@aead.dev>
2022-03-16 10:00:25 -07:00
jinapurapu
548dc0fd99 Added help message if no arguments passed to mc alias set command (#3963) 2022-02-09 03:14:03 -08:00
Harshavardhana
91efd0c066 migrate mc to minio/pkg (#3731)
remove all dependency for minio/minio
2021-05-29 09:30:33 -07:00
Harshavardhana
1402987ccb change license to AGPLv3 2021-05-11 17:45:08 -07:00
Anis Elleuch
d4fbfb5975 Show better looking help when a wrong flag is passed (#3461) 2020-12-02 22:19:26 -08:00
Anis Elleuch
d93b7f7638 More fixes in the doc for mc alias command (#3327) 2020-07-28 15:04:27 -07:00
Anis Elleuch
90dc31f6ba Move from mc config host to alias command (#3311)
```
mc alias set
   alias remove
   alias list
```

are new commands that replace mc config host sub-commands.

mc config host will still be available but hidden for backward
compatiblity. The JSON output is also kept if the user is running mc
config host command.
2020-07-28 10:26:41 -07:00