open-vault

Commit Graph

Author	SHA1	Message	Date
Jim Kalafut	2547d7fb6a	Simplify base62.Random (#5982 ) Also move existing base62 encode/decode operations to their only points of use.	2018-12-20 07:40:01 -08:00
Vishal Nayak	5818977dca	Deprecate SHA1 in token store (#770 ) * Deprecate SHA1 in token store * Fallback to SHA1 for user selected IDs * Fix existing tests * Added warning * Address some review feedback and remove root token prefix * Tests for service token prefixing * Salting utility tests * Adjust OTP length for root token generation * Fix tests * Address review feedback	2018-10-17 13:23:04 -07:00
Jeff Mitchell	d373b07f88	Fix root generation init not allowing empty input (#5495 )	2018-10-10 11:54:12 -04:00
Jeff Mitchell	919b968c27	The big one (#5346 )	2018-09-17 23:03:00 -04:00
Vishal Nayak	28e3eb9e2c	Errwrap everywhere (#4252 ) * package api * package builtin/credential * package builtin/logical * package command * package helper * package http and logical * package physical * package shamir * package vault * package vault * address feedback * more fixes	2018-04-05 11:49:21 -04:00
Jeff Mitchell	33b68ebf3d	Remove context from a few extraneous places	2018-01-19 03:44:06 -05:00
Brian Kassouf	2f19de0305	Add context to storage backends and wire it through a lot of places (#3817 )	2018-01-19 01:44:44 -05:00
Chris Hoffman	9e79e9b397	generate token functions to share common names (#3576 )	2017-11-13 15:44:26 -05:00
Brian Kassouf	ab3b625a3b	Add API methods for creating a DR Operation Token and make generate root accept strategy types (#3565 ) * Add API and Command code for generating a DR Operation Token * Update generate root to accept different token strategies	2017-11-10 10:19:42 -08:00
Jeff Mitchell	cd73714ff9	Fix error message grammar	2017-03-14 17:10:43 -04:00
Thomas Soëte	c29e5c8bad	Use 'http.MaxBytesReader' to limit request size (#2131 ) Fix 'connection reset by peer' error introduced by 300b72e	2016-12-01 10:59:00 -08:00
Jeff Mitchell	62c69f8e19	Provide base64 keys in addition to hex encoded. (#1734 ) * Provide base64 keys in addition to hex encoded. Accept these at unseal/rekey time. Also fix a bug where backup would not be honored when doing a rekey with no operation currently ongoing.	2016-08-15 16:01:15 -04:00
Jeff Mitchell	afae46feb7	SealInterface	2016-04-04 10:44:22 -04:00
Jeff Mitchell	5f5542cb91	Return status for rekey/root generation at init time. This mitigates a (very unlikely) potential timing attack between init-ing and fetching status. Fixes #1054	2016-02-12 14:24:36 -05:00
Jeff Mitchell	973c888833	RootGeneration->GenerateRoot	2016-01-19 18:28:10 -05:00

15 Commits