Commit Graph

8 Commits

Author SHA1 Message Date
mpl 3c6daa2197 auth: allow for multiple modes
context: http://camlistore.org/issue/439

Change-Id: Ie52aa6eea797c37ca178c222a476626e9f30ec42
2014-05-21 18:43:41 +02:00
mpl cb648792cd auth: fix test from 21dda2b4ef
Change-Id: I3f22a1eb181ffccce2a1377ff0a780a9e07a7ce9
2014-05-09 00:49:38 +02:00
mpl 21dda2b4ef app/hello: dummy server application (hello world)
Change-Id: I6690b9459325af5a76d1de679d56701eefdd195e
2014-05-08 22:15:01 +02:00
Bill Thiede 738783ebf4 buildbot/master: add Basic Auth support.
Moved BasicAuth parsing and localhost detection code from pkg/auth ->
pkg/httputil for use by buildbot master.

Added user config file for remote access.  The file's name is
"masterbot-config.json" and is located in osutil.CamliConfigDir(),
which on Unix will resolve to $XDG_CONFIG_HOME/camlistore/, if
XDG_CONFIG_HOME set, or ~/.config/camlistore/.  On Windows it will be
under %APPDATA%\Camlistore\.  The expected format is a json object
with usernames as the keys and sha1 sums of the password as the
values, i.e.:

    {
        "user1": "1234567890abcdef12341234567890abcdef1234",
        "user2": "1234abcdef12345678901234abcdef1234567890"
    }

This file is polled at a 1 minute interval and reparsed if the file's
modification time is more recent then the previous parse attempt.  It
is ok for the file to go missing, it will zero out the remote user
list. A malformed file will result in the master exiting.

New commandline flags, -tlsCertFile & -tlsKeyFile, added.  Specifying
both will enable TLS on the listener specified by -host.  The go
source contains generate_cert.go in crypto/tls that can be used to
generate self-signed cert.pem and key.pem for testing.

Added -skiptlscheck commandline option to builder.  This allows the
builder to report to https:// addresses with self-signed certs as we
don't currently have a way to specify the cert chains to be used
for TLS verification.  This is a stop-gap solution.

When launching a master that listens for secure connections, we
currently need tell the builders to skip certificate validation. Add
'-builderopts="-skiptlscheck"' to the master's commandline to skip
cerfication verification.

Change-Id: I0750b5c9fa8f4def67fc05a841087b50abded2f7
2013-11-21 21:22:12 -08:00
Salman Aljammaz 5ee71afca3 auth: don't fail IPv6 test if host can't resolve localhost to [::1]
Change-Id: I3eade17e593da67d33be86563fe179ac6464c561
2013-10-21 21:20:43 +01:00
Brad Fitzpatrick e31a8531fb auth: maybe fix IPv6 test on IPv6-less Linux
Change-Id: I438388420854014e862587960bc549fbcc8f3f2d
2013-10-21 10:16:01 -07:00
Salman Aljammaz 10d67c6d20 localhost auth: resolve localhost to [::1] if using ipv6
http://camlistore.org/issue/238

Change-Id: Icab7d87fe651365fb44db4c2874d4976fa631ad6
2013-10-21 17:02:03 +01:00
Brad Fitzpatrick e20c7f44a8 auth: fix security problem where 'localhost' allowed all access.
Also, add tests. And remove CAMLI_ADVERTISED_PASSWORD, replacing it with explicit devauth mode.

Change-Id: I9cdfe2d537ecefcf75df0b9fb8538258703b1eb7
2013-08-31 13:44:44 -07:00