luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/vault
History
Jeff Mitchell 1c7157e632 Reintroduce the ability to look up obfuscated values in the audit log 
with a new endpoint '/sys/audit-hash', which returns the given input
string hashed with the given audit backend's hash function and salt
(currently, always HMAC-SHA256 and a backend-specific salt).

In the process of adding the HTTP handler, this also removes the custom
HTTP handlers for the other audit endpoints, which were simply
forwarding to the logical system backend. This means that the various
audit functions will now redirect correctly from a standby to master.
(Tests all pass.)

Fixes #784
 		2015-11-18 20:26:03 -05:00
..
acl.go vault: Handle exact vs glob match, deny has highest precedence 2015-07-05 17:31:30 -06:00
acl_test.go vault: adding another ACL test 2015-07-05 17:34:34 -06:00
audit.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
audit_test.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
auth.go Rearchitect MountTable locking and fix rollback. 2015-11-11 11:54:52 -05:00
auth_test.go Run preSeal if postUnseal fails. 2015-11-02 13:29:33 -05:00
barrier.go vault: adding ability to reload master key 2015-05-29 14:29:55 -07:00
barrier_aes_gcm.go Bump AESGCM version; include path in the GCM tags. 2015-09-19 17:04:37 -04:00
barrier_aes_gcm_test.go Bump AESGCM version; include path in the GCM tags. 2015-09-19 17:04:37 -04:00
barrier_test.go vault: adding ability to reload master key 2015-05-29 14:29:55 -07:00
barrier_view.go vault: Split SecurityBarrier interface to BarrierStorage 2015-04-10 16:43:35 -07:00
barrier_view_test.go vault: Adding ClearView method 2015-04-02 11:18:05 -07:00
core.go Rearchitect MountTable locking and fix rollback. 2015-11-11 11:54:52 -05:00
core_test.go Add no-default-policy flag and API parameter to allow exclusion of the 2015-11-09 17:30:50 -05:00
dynamic_system_view.go Rename core's 'policy' to 'policyStore' for clarification 2015-11-06 12:07:42 -05:00
expiration.go Fix removing secondary index from exp manager. 2015-11-04 10:50:31 -05:00
expiration_test.go Fix removing secondary index from exp manager. 2015-11-04 10:50:31 -05:00
keyring.go Fixed comment spelling mistake and removed unnecessary variable allocation 2015-10-15 14:51:30 -04:00
keyring_test.go vault: attempt to resolve #303 2015-06-02 22:55:18 +02:00
logical_cubbyhole.go Directly pass the cubbyhole backend to the token store and bypass logic in router 2015-09-15 13:50:37 -04:00
logical_cubbyhole_test.go Use split-out hashicorp/uuid 2015-10-12 14:07:12 -04:00
logical_passthrough.go Check TTL provided to generic backend on write 2015-10-29 11:05:21 -04:00
logical_passthrough_test.go Add revocation/renewal functions in all cases in the generic backend. 2015-10-07 11:42:23 -04:00
logical_system.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
logical_system_helpers.go Fix a logic bug around setting both a mount default and max at the same time. Ping #688. 2015-10-12 14:57:43 -04:00
logical_system_test.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
mount.go Rearchitect MountTable locking and fix rollback. 2015-11-11 11:54:52 -05:00
mount_test.go Move more cubby logic outside of router into auth setup 2015-09-15 13:50:37 -04:00
policy.go Fix warnings returned by `make vet` 2015-09-26 21:17:39 -07:00
policy_store.go Create a "default" policy with sensible rules. 2015-11-09 15:44:09 -05:00
policy_store_test.go Fix warnings returned by `make vet` 2015-09-26 21:17:39 -07:00
policy_test.go vault: Adding precedence logic for conflicting policy 2015-07-05 17:30:19 -06:00
rollback.go Address feedback from review 2015-11-15 17:32:57 -05:00
rollback_test.go Address feedback from review 2015-11-15 17:32:57 -05:00
router.go Move more cubby logic outside of router into auth setup 2015-09-15 13:50:37 -04:00
router_test.go Use split-out hashicorp/uuid 2015-10-12 14:07:12 -04:00
testing.go Reintroduce the ability to look up obfuscated values in the audit log 2015-11-18 20:26:03 -05:00
token_store.go Add no-default-policy flag and API parameter to allow exclusion of the 2015-11-09 17:30:50 -05:00
token_store_test.go Add no-default-policy flag and API parameter to allow exclusion of the 2015-11-09 17:30:50 -05:00
util.go helper/uuid: single generateUUID definition 2015-06-30 12:38:32 -07:00
util_test.go helper/uuid: single generateUUID definition 2015-06-30 12:38:32 -07:00