nextcloud

Commit Graph

Autor	SHA1	Mensaje	Fecha
Joas Schilling	f772b7b4dd	Add autocomplete to migration commands Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 6 años
Joas Schilling	17a26dfcc1	Validate the info.xml against the appstore schema file Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 6 años
Bjoern Schiessle	41ee23a054	make occ command more generic Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	hace 6 años
Bjoern Schiessle	fda98ee917	add occ command to add a index to share_with at the share table Signed-off-by: Bjoern Schiessle <bjoern@schiessle.org>	hace 6 años
Morris Jobke	0e2f00ec59	Get the Installer via DI Signed-off-by: Morris Jobke <hey@morrisjobke.de>	hace 6 años
Morris Jobke	0eebff152a	Update license headers Signed-off-by: Morris Jobke <hey@morrisjobke.de>	hace 6 años
Morris Jobke	dd192e5df9	Use proper DI for repair command Signed-off-by: Morris Jobke <hey@morrisjobke.de>	hace 6 años
Joas Schilling	e2ec6b33ea	Add a command to manually migrate to big ints Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 6 años
sualko	3e62a25155	add occ app:install command Signed-off-by: Klaus Herberth <klaus@jsxc.org>	hace 7 años
Joas Schilling	0a0dbbdf15	Remove generate change script which doesnt work with migrations anymore Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 7 años
Joas Schilling	f6c48b1548	Add a script to generate a migration from database.xml Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 7 años
Joas Schilling	8c39e66619	Do not allow to go back on productive systems Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 7 años
Joas Schilling	15eec7b83c	Start migrations Fixme: - Install and update of apps - No revert on live systems (debug only) - Service adjustment to our interface - Loading via autoloader Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 7 años
Julius Härtl	2e47210d6f	Add command to apply updates to custom themes Signed-off-by: Julius Härtl <jus@bitgrid.net>	hace 7 años
Morris Jobke	713f684a8b	Adding tests for 4 byte unicode characters * success on SQLite and Postgres * failure on MySQL due to the limited charset that only supports up to 3 bytes Add config option to update charset of mysql to utf8mb4 * fully optional * requires additional options set in the database only disable unicode test on mysql Fixing ctor call Adding docker based unit test execution for mysql utf8mb4 Add mysqlmb4 test configuration to Jenkinsfile fix collation on utf8mb4 Properly setup charset and collation in the doctrine connection Allow files containing 4-byte chars in case the database supports it During setup of a mysql database we try to detect if charset 'utf8mb4' can be used Fix mysql settings Add console command to migrate the charset Set ROW_FORMAT before setting collation to mb4 Also select tables with wrong collation Faster MySQL docker Signed-off-by: Morris Jobke <hey@morrisjobke.de>	hace 9 años
Morris Jobke	edd55b0ea9	Use SystemConfig instead of AllConfig for DB stuff * preparation for followup PRs to clean up the DB bootstrapping Signed-off-by: Morris Jobke <hey@morrisjobke.de>	hace 7 años
Morris Jobke	9533f4e5ed	Clean up single user mode Single user mode basically disables WebDAV, OCS and cron execution. Since we heavily rely on WebDAV and OCS also in the web UI it's basically useless. An admin only sees a broken interface and can't even change any settings nor sees any files. Also sharing is not possible. As this is at least the case since Nextcloud 9 and we haven't received any reports for this it seems that this feature is not used at all so I removed it. The encryption commands now rely on the well tested maintenance mode. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	hace 7 años
Jörn Friedrich Dreyer	817729dc3f	add upgrade command before repair, handle NeedsUpgradeExcaption better	hace 7 años
Thomas Müller	a7245ea082	Fixing ctor call	hace 8 años
Morris Jobke	cc28f82b36	Add config option to update charset of mysql to utf8mb4 * fully optional * requires additional options set in the database	hace 9 años
Thomas Müller	67d3574bdf	Don't parse info.xml but reuse already cached app infos - fixes #25603 (#25968) * Don't parse info.xml but reuse already cached app infos - fixes #25603 * Use === in InfoParser. Fixes test * InfoParser should not depend on UrlGenerator - fixes issue with session being closed too early	hace 7 años
Joas Schilling	5551c63110	Register the auto completion basic Signed-off-by: Joas Schilling <coding@schilljs.com>	hace 7 años
Thomas Pulzer	ba3f4f118e	Changed logtype to file instead of owncloud. - Updated the config sample to point to log_type='file' - Renamed the Class for logfile logging to File in namespace 'OC\Log\'. Changed the occurrences of 'OC\Log\Owncloud' to 'OC\Log\File'. - Renamed the Class for log:file command to File in namespace 'OC\Core\Command\Log\File'. Changed registration of the command to use 'OC\Core\Command\Log\File'. - Changed default Syslog tag to Nextcloud - Retained backwards compatibility for configs with 'logtype' => 'owncloud' - Adjusted tests for the new file log. Closes #490.	hace 8 años
Joas Schilling	0215b004da	Update with robin	hace 8 años
Joas Schilling	ba87db3fcc	Fix others	hace 8 años
Robin Appelman	586c58efa7	add occ command to show user information	hace 8 años
Robin Appelman	3d874c407d	Add commands to add/remove users to/from groups	hace 8 años
Robin Appelman	413d577b29	add command to list groups	hace 8 años
Robin Appelman	b44d439010	add occ command to list users	hace 8 años
Joas Schilling	b96f0c99b0	Add a occ command to list/get user preferences	hace 8 años
Lukas Reschke	aba539703c	Update license headers	hace 8 años
Christoph Wurst	847bbc51b6	add OCC command to enable/disable 2FA for a user	hace 8 años
Lukas Reschke	52add798d4	Do not automatically try to enable index.php-less URLs (#24539) The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.	hace 8 años
Thomas Müller	9c9fec36dd	Add occ commands to enable and disable a user + a disabled user can no longer login - fixes #23838	hace 8 años
Thomas Müller	cdcd49b473	Adding progress to occ maintenance:repair	hace 8 años
Thomas Müller	d0030aad6c	Remove deprecated HTTPHelper from InfoParser	hace 8 años
Roeland Jago Douma	a2c8597b00	Add occ command for updating the data-fingerprint	hace 8 años
Lukas Reschke	933f60e314	Update author information Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)	hace 8 años
Victor Dubiniuk	fef7fc1248	CLI commands to check app and core signatures	hace 8 años
Lukas Reschke	ea367b598a	Use path instead of app id This change requires the usage of a path instead of the App ID when signing code. This has the advantage that developers can also sign code under a different location to make it easier. (e.g. remove `.git`, …) Also it adds an example command usage as well as a link to the documentation	hace 8 años
Joas Schilling	56184f799e	Make it possible to enable apps for groups only via occ	hace 8 años
Joas Schilling	78a02d1b2f	Make it possible to disable apps via the console, which are not enabled for the current user	hace 8 años
Joas Schilling	d2285113a8	Make sure to list "group enabled" apps as enabled also when they are not enabled for the current user	hace 8 años
Robin Appelman	c67a09112b	Add occ commands to manager trusted certificates	hace 8 años
Thomas Müller	682821c71e	Happy new year!	hace 8 años
Victor Dubiniuk	b59285d0d0	Add occ command to get app path	hace 8 años
Lukas Reschke	4971015544	Add code integrity check This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release :wink:). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF\nBQAwIzEhMB8GA1UECgwYb3duQ2xvdWQgQ29kZSBTaWduaW5nIENBMB4XDTE1MTAx\nNDEzMTcxMFoXDTE2MTAxNDEzMTcxMFowEzERMA8GA1UEAwwIY29udGFjdHMwgZ8w\nDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANoQesGdCW0L2L+a2xITYipixkScrIpB\nkX5Snu3fs45MscDb61xByjBSlFgR4QI6McoCipPw4SUr28EaExVvgPSvqUjYLGps\nfiv0Cvgquzbx/X3mUcdk9LcFo1uWGtrTfkuXSKX41PnJGTr6RQWGIBd1V52q1qbC\nJKkfzyeMeuQfAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAvF/KIhRMQ3tYTmgHWsiM\nwDMgIDb7iaHF0fS+/Nvo4PzoTO/trev6tMyjLbJ7hgdCpz/1sNzE11Cibf6V6dsz\njCE9invP368Xv0bTRObRqeSNsGogGl5ceAvR0c9BG+NRIKHcly3At3gLkS2791bC\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates Note: The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following: ![2015-11-04_12-02-57](https://cloud.githubusercontent.com/assets/878997/10936336/6adb1d14-82ec-11e5-8f06-9a74801c9abf.png) As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	hace 8 años
Thomas Müller	4cb5970947	Always pass in ILogger	hace 8 años
Morris Jobke	8366ce2767	deduplicate @xenopathic	hace 8 años
Morris Jobke	b945d71384	update licence headers via script	hace 8 años

1 2 3

114 Commits (e11a523ce9c8920ae1e3bb1509f232af03e69562)