summaryrefslogtreecommitdiffstats
path: root/core/register_command.php
Commit message (Collapse)AuthorAgeFilesLines
* add upgrade command before repair, handle NeedsUpgradeExcaption betterJörn Friedrich Dreyer2016-10-241-3/+3
|
* Fixing ctor callThomas Müller2016-10-191-1/+1
|
* Add config option to update charset of mysql to utf8mb4Morris Jobke2016-10-191-1/+1
| | | | | * fully optional * requires additional options set in the database
* Don't parse info.xml but reuse already cached app infos - fixes #25603 (#25968)Thomas Müller2016-10-071-1/+1
| | | | | | | | * Don't parse info.xml but reuse already cached app infos - fixes #25603 * Use === in InfoParser. Fixes test * InfoParser should not depend on UrlGenerator - fixes issue with session being closed too early
* Register the auto completion basicJoas Schilling2016-09-291-0/+1
| | | | Signed-off-by: Joas Schilling <coding@schilljs.com>
* Changed logtype to file instead of owncloud.Thomas Pulzer2016-07-221-1/+1
| | | | | | | | | | | | | | - Updated the config sample to point to log_type='file' - Renamed the Class for logfile logging to File in namespace 'OC\Log\'. Changed the occurrences of 'OC\Log\Owncloud' to 'OC\Log\File'. - Renamed the Class for log:file command to File in namespace 'OC\Core\Command\Log\File'. Changed registration of the command to use 'OC\Core\Command\Log\File'. - Changed default Syslog tag to Nextcloud - Retained backwards compatibility for configs with 'logtype' => 'owncloud' - Adjusted tests for the new file log. Closes #490.
* Update with robinJoas Schilling2016-07-211-1/+1
|
* Fix othersJoas Schilling2016-07-211-3/+4
|
* add occ command to show user informationRobin Appelman2016-07-191-0/+1
|
* Add commands to add/remove users to/from groupsRobin Appelman2016-07-191-0/+2
|
* add command to list groupsRobin Appelman2016-07-191-0/+2
|
* add occ command to list usersRobin Appelman2016-07-191-0/+1
|
* Add a occ command to list/get user preferencesJoas Schilling2016-07-131-0/+1
|
* Update license headersLukas Reschke2016-05-261-2/+4
|
* add OCC command to enable/disable 2FA for a userChristoph Wurst2016-05-231-0/+7
|
* Do not automatically try to enable index.php-less URLs (#24539)Lukas Reschke2016-05-121-0/+1
| | | | | | | | | | | | | | | | | The current logic for mod_rewrite relies on the fact that people have properly configured ownCloud, basically it reads from the `overwrite.cli.ur l` entry and then derives the `RewriteBase` from it. This usually works. However, since the ownCloud packages seem to install themselves at `/owncloud` (because subfolders are cool or so…) _a lot_ of people have just created a new Virtual Host for it or have simply symlinked the path etc. This means that `overwrite.cli.url` is wrong, which fails hard if it is used as RewriteBase since Apache does not know where it should serve files from. In the end the ownCloud instance will not be accessible anymore and users will be frustrated. Also some shared hosters like 1&1 (because using shared hosters is so awesome… ;-)) have somewhat dubious Apache configurations or use versions of mod_rewrite from the mediveal age. (because updating is money or so…) Anyhow. This makes this explicitly an opt-in configuration flag. If `htaccess.RewriteBase` is set then it will configure index.php-less URLs, if admins set that after installation and don't want to wait until the next ownCloud version they can run `occ maintenance:update:htaccess`. For ownCloud 9.0 we also have to add a repair step to make sure that instances that already have a RewriteBase configured continue to use it by copying it into the config file. That way all existing URLs stay valid. That one is not in this PR since this is unneccessary in master. Effectively this reduces another risk of breakage when updating from ownCloud 8 to ownCloud 9. Fixes https://github.com/owncloud/core/issues/24525, https://github.com/owncloud/core/issues/24426 and probably some more.
* Add occ commands to enable and disable a user + a disabled user can no ↵Thomas Müller2016-05-021-0/+2
| | | | longer login - fixes #23838
* Adding progress to occ maintenance:repairThomas Müller2016-04-281-1/+3
|
* Remove deprecated HTTPHelper from InfoParserThomas Müller2016-04-221-1/+1
|
* Add occ command for updating the data-fingerprintRoeland Jago Douma2016-04-181-0/+1
|
* Update author informationLukas Reschke2016-03-011-0/+1
| | | | Probably nice for the people that contributed to 9.0 to see themselves in the AUTHORS file :)
* CLI commands to check app and core signaturesVictor Dubiniuk2016-02-051-0/+7
|
* Use path instead of app idLukas Reschke2016-01-201-1/+2
| | | | | | This change requires the usage of a path instead of the App ID when signing code. This has the advantage that developers can also sign code under a different location to make it easier. (e.g. remove `.git`, …) Also it adds an example command usage as well as a link to the documentation
* Make it possible to enable apps for groups only via occJoas Schilling2016-01-191-1/+1
|
* Make it possible to disable apps via the console, which are not enabled for ↵Joas Schilling2016-01-191-1/+1
| | | | the current user
* Make sure to list "group enabled" apps as enabledJoas Schilling2016-01-191-1/+1
| | | | also when they are not enabled for the current user
* Add occ commands to manager trusted certificatesRobin Appelman2016-01-131-0/+4
|
* Happy new year!Thomas Müller2016-01-121-2/+4
|
* Add occ command to get app pathVictor Dubiniuk2015-12-091-0/+1
|
* Add code integrity checkLukas Reschke2015-12-011-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release :wink:). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF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\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following: ![2015-11-04_12-02-57](https://cloud.githubusercontent.com/assets/878997/10936336/6adb1d14-82ec-11e5-8f06-9a74801c9abf.png) As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.
* Always pass in ILoggerThomas Müller2015-10-091-1/+1
|
* deduplicate @xenopathicMorris Jobke2015-10-061-1/+0
|
* update licence headers via scriptMorris Jobke2015-10-051-0/+2
|
* [App Code Check] add check for version and mandatory fieldsMorris Jobke2015-09-241-1/+2
| | | | | * ref #17598 * including unit tests for mandatory fields/versions
* occ script to disable encryption and to decrypt all files againBjoern Schiessle2015-09-151-0/+7
|
* Introduce mimetype DB update occ commandRobin McCorkell2015-09-041-1/+2
|
* Move maintenance:mimetypesjs to sublocation, cleanup codeRobin McCorkell2015-09-011-1/+1
|
* make system root of key storage configurableBjoern Schiessle2015-08-301-0/+17
|
* Merge pull request #18423 from owncloud/occ_encrypt_allBjörn Schießle2015-08-281-0/+1
|\ | | | | occ command line tool to encrypt all files
| * occ tool to encrypt all filesBjoern Schiessle2015-08-261-0/+1
| |
* | Introduce occ command to manage owncloud log backendRobin McCorkell2015-08-191-0/+1
| | | | | | | | log:owncloud can set/display the log filename and log file rotation size
* | Introduce occ command for logging managementRobin McCorkell2015-08-191-0/+2
|/ | | | log:manage can set/display the log backend, log level and log timezone
* [command] single user mode - use config object & add testsMorris Jobke2015-07-091-1/+1
|
* Add commands to get, set and delete app config valuesJoas Schilling2015-07-071-0/+3
|
* Add a command to import an json array into the configJoas Schilling2015-07-071-0/+1
|
* Add a command to delete a system configJoas Schilling2015-07-071-0/+1
|
* Add a command to get a config valueJoas Schilling2015-07-071-0/+1
|
* Add a command to set a system config valueJoas Schilling2015-07-071-0/+1
|
* Add a command to list existing configsJoas Schilling2015-07-071-0/+2
|
* Sort registration of commands alphabeticallyJoas Schilling2015-07-071-13/+17
|