nextcloud

Commit Graph

Author	SHA1	Message	Date
Lukas Reschke	aba539703c	Update license headers	8 years ago
Christoph Wurst	12431aa399	list user's auth tokens on the personal settings page	8 years ago
Lukas Reschke	933f60e314	Update author information Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	8 years ago
Thomas Müller	682821c71e	Happy new year!	8 years ago
Robin Appelman	c15cab7ed6	Allow admins to add system wide root certificates	8 years ago
Lukas Reschke	4971015544	Add code integrity check This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release :wink:). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF\nBQAwIzEhMB8GA1UECgwYb3duQ2xvdWQgQ29kZSBTaWduaW5nIENBMB4XDTE1MTAx\nNDEzMTcxMFoXDTE2MTAxNDEzMTcxMFowEzERMA8GA1UEAwwIY29udGFjdHMwgZ8w\nDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANoQesGdCW0L2L+a2xITYipixkScrIpB\nkX5Snu3fs45MscDb61xByjBSlFgR4QI6McoCipPw4SUr28EaExVvgPSvqUjYLGps\nfiv0Cvgquzbx/X3mUcdk9LcFo1uWGtrTfkuXSKX41PnJGTr6RQWGIBd1V52q1qbC\nJKkfzyeMeuQfAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAvF/KIhRMQ3tYTmgHWsiM\nwDMgIDb7iaHF0fS+/Nvo4PzoTO/trev6tMyjLbJ7hgdCpz/1sNzE11Cibf6V6dsz\njCE9invP368Xv0bTRObRqeSNsGogGl5ceAvR0c9BG+NRIKHcly3At3gLkS2791bC\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates Note: The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following: ![2015-11-04_12-02-57](https://cloud.githubusercontent.com/assets/878997/10936336/6adb1d14-82ec-11e5-8f06-9a74801c9abf.png) As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	8 years ago
Roeland Jago Douma	0265bcfdae	Moved changedisplayname to usercontroller Killed the old static route to change a users display name and moved it to a properly testable controller.	8 years ago
Vincent Petry	781bca2437	Fix everyone count for subadmins Also moved the logic to the UsersController	8 years ago
Morris Jobke	f63915d0c8	update license headers and authors	9 years ago
Lukas Reschke	20a6073a9f	Migrate personal certificate handling into AppFramework controllers Also added unit-tests and better error-handling	9 years ago
Bjoern Schiessle	d2ef73367c	allow user to start migration in admin settings if no external user back-ends are enabled	9 years ago
Thomas Müller	bf809ac85a	Removing left overs from old encryption app	9 years ago
Lukas Reschke	0816cf9142	Add experimental applications switch Allows administrators to disable or enabled experimental applications as well as show the trust level.	9 years ago
Lukas Reschke	65202d2a18	Add check for activated local memcache Also used the opportunity to refactor it into an AppFramework controller so that we can unit test it. Fixes https://github.com/owncloud/core/issues/14956	9 years ago
Jenkins for ownCloud	b585d87d9d	Update license headers	9 years ago
Lukas Reschke	bbd5f28415	Let users configure security headers in their Webserver Doing this in the PHP code is not the right approach for multiple reasons: 1. A bug in the PHP code prevents them from being added to the response. 2. They are only added when something is served via PHP and not in other cases (that makes for example the newest IE UXSS which is not yet patched by Microsoft exploitable on ownCloud) 3. Some headers such as the Strict-Transport-Security might require custom modifications by administrators. This was not possible before and lead to buggy situations. This pull request moves those headers out of the PHP code and adds a security check to the admin settings performed via JS.	9 years ago
Morris Jobke	06aef4e8b1	Revert "Updating license headers" This reverts commit `6a1a4880f0`.	9 years ago
Jenkins for ownCloud	6a1a4880f0	Updating license headers	9 years ago
Lukas Reschke	7e45f5d27b	Remove unused function and correct PHPDoc	9 years ago
Georg Ehrke	f579f2bd94	add Download logfile button to admin settings add logSettingsController add download logfile button move getEntries to LogSettingsController move set log level to logsettingscontroller.php add warning if logfile is bigger than 100MB add unit test for set log level fix typecasting, add new line at EoF show log and logfile download only if log_type is set to owncloud add unit test for getFilenameForDownload	9 years ago
Morris Jobke	5913af8a72	Mail address of users is now changable in the user management * introduced new route settings/users/{id}/mailAddress * kept old responses * better error messages * dropped lostpassword.php from settings/ajax * cleaned up the UserList.add() and hand in user object instead of each attribute as another parameter * check for change permission of mail address * proper response messages	9 years ago
Lukas Reschke	fe7d9a7ca0	Add REST route for user & group management First step of a somewhat testable user management. - I know, the JSON returns are in an ugly format but the JS expects it that way. So let's keep it that way until we have time to fix the JS in the future.	9 years ago
Lukas Reschke	e73ccbd4ca	Migrate "setsecurity.php" to the AppFramework Add switch to enforce SSL for subdomains Add unit tests Add test for boolean values Camel-case Fix ugly JS	9 years ago
Lukas Reschke	e4227658d9	Migrate new app settings to AppFramework Let's migrate those two new files.	9 years ago
Thomas Müller	b091394a90	introduce new app page layout filter installed and not-installed apps properly kill unneeded file load category 'Installed' on page load adding documentation links new apps mgmt: first style adjustment apps mgmt: only show license and preview if they exist adding buttons new apps mgmt: fix for mobile use app icon if available new apps mgmt: position enable/disable toggle to the right new apps mgmt: proper display of icons or previews new apps mgmt: fix loading spinner reenable group selection for apps new apps mgmt: position enable button normally again new apps mgmt: clarify wording from 'Installed' to 'Enabled' reintroduce enable/disable Move rating image path generation to client-side Move expression outside of l10n fix group handling add buttons for 'More apps' and 'Add your app' again disable changed date of app for now adding recommended label style 'Recommended' app tag fixing php warning sort by rating adding meta-category 'Recommended' Only show existing documentation links lacy loading of screenshots making group based app activation work again adding support to get the app icon not only by the app name but also simply by the fixed name 'app.svg' adding app.svg for all core apps query string '?installed' is not longer needed update and uninstall is back + error feedback remove unneeded parameter fix alignment of 'recommended' label	10 years ago
Lukas Reschke	13b1b45ee4	Refactor MailSettings controller - Do not store the password (fixes https://github.com/owncloud/core/issues/11385) - Refactor to AppFramework - Add unit tests Conflicts: settings/admin/controller.php	9 years ago
Vincent Petry	e65ceb08fc	Moved WebDAV and internet checks to client side JS - Added setup checks in JavaScript - Moved isWebDAVWorking to JS using SetupChecks - Moved internet connection checks to an ajax call that goes through the server	10 years ago
Clark Tomlinson	6a56e03d48	Using countUsers method to return true count of users	10 years ago
Robin Appelman	1361bbb1e6	Cleanup routes	10 years ago
Robin Appelman	c1b11571ea	Move certificate management interface from files_external to core	10 years ago
Arthur Schiwon	249e42c4cd	enable group filtering	10 years ago
raghunayyar	970f899726	Initial Commit : Changes Storage to Quota, Implements GroupName editing.	10 years ago
raghunayyar	b506388b75	Reverts last commit, implements user in group count.	10 years ago
raghunayyar	b2ca595509	Add GroupList Ajax to Users.	10 years ago
Georg Ehrke	020255b4e5	add button for properly uninstalling apps	10 years ago
Bjoern Schiessle	12338e0ef0	allow admin to disable sharing for specific groups of users	10 years ago
Bjoern Schiessle	a9ac11718e	backup the encryption key after the encryption was disabled so that the user can restore them if needed	10 years ago
Thomas Müller	4900ad9119	update type hint in PHPDoc	10 years ago
Joas Schilling	5b8cde48dc	Add button to send a test mail after changing the email settings Fix #7175	10 years ago
Thomas Müller	1291303c5a	Replace OC.Router.generate() with OC.generateUrl()	10 years ago
Lukas Reschke	16262e3fd2	Move isadmin to template and rename it to oc_isadmin	10 years ago
Joas Schilling	8387cd8ae3	Add option to change email settings in admin section Fix issue #7166	10 years ago
kondou	18da2f9cf7	Improve changepassword route naming	10 years ago
kondou	306a8681c5	Move ajax/changepassword to changepassword/controller to use autoloading	10 years ago
kondou	f6faec0e0b	Use a controller instead of two files for changepassword.php	11 years ago
kondou	a21376480d	Split personal and user-mgmt password change logic	11 years ago
kondou	81cadd5ea3	Remove gravatar and no-avatar functionality, prepare for default avatars even more and reword some stuff	11 years ago
kondou	0a4febf1eb	Integrate newavatar.php into avatar.php by using GET, POST & DELETE	11 years ago
kondou	fac671b14e	Modularize get(), async getAvatar, avatars @ usermgmt And other small improvements	11 years ago
kondou	4a08f7d710	Add basic avatars and gravatar	11 years ago

1 2

70 Commits (0552933770501061ba34f72955176a2f0ecd3f46)