Граф коммитов

379 Коммитов

Автор SHA1 Сообщение Дата
Amaury Chamayou 1bbf8886f3
Cose signing authn (#4306)
* .

* wip

* wip

* wip

* wip

* tag=True does not do anything because it is default

* attach, detach...

* gov

* deps

* fix

* wip

* .

* wip

* wip

* checks

* wip

* .

* verifier

* verifier

* plug stuff in

* fmt

* .

* wip

* fix

* rest

* move test

* fix

* tweaks

* cmake

* cmake_fix

* schema

* Update include/ccf/common_auth_policies.h

Co-authored-by: Eddy Ashton <ashton.eddy@gmail.com>

* feedback

* span span span

* .

* Turn off colours in the governance test

Co-authored-by: Eddy Ashton <ashton.eddy@gmail.com>
2022-10-18 10:01:54 +00:00
Eddy Ashton 1dd0f69b45
Fix formatting of IPv6 addresses (#4339) 2022-10-18 08:20:34 +00:00
Eddy Ashton f6fec034df
Remove `ENABLE_HTTP2` compile-time flag (#4317) 2022-10-06 17:19:59 +00:00
Eddy Ashton a221771673
Initial implementation of KV service, basic gRPC sample app (#4257) 2022-09-30 09:01:55 +00:00
Julien Maffre 17b9e24394
Also install `.inc` files (#4266) 2022-09-26 14:16:58 +00:00
Julien Maffre 5318885490
Add basic gRPC support to external executor app (#4183) 2022-09-05 11:32:13 +01:00
Eddy Ashton 04b146a0f2
Initial commit of external executor app (#4173) 2022-08-26 13:49:00 +01:00
Eddy Ashton dafcd67024
Mitigations for potential stale reads from Legacy xAPIC (#4127) 2022-08-16 16:46:47 +00:00
Julien Maffre 4bb77b4ce0
Move attestation report generation/verification to `Pal` (#4083) 2022-08-09 20:19:08 +00:00
Eddy Ashton 28d71b666b
Deprecate old logging macros from application code (#4039) 2022-07-15 17:01:00 +01:00
Eddy Ashton a4244022b8
Add support for tagged loggers and app-specific logging macros (#4024) 2022-07-15 09:16:26 +01:00
Julien Maffre 8a41971203
Add experimental support for HTTP/2 (#4010) 2022-07-14 14:37:10 +00:00
Julien Maffre b21c981044
Infra: Fix node version detection (#4004) 2022-07-01 10:52:39 +01:00
Amaury Chamayou 20a9f62c59
Add unit test for check_kv_map_access (#3992) 2022-06-29 18:54:02 +00:00
Christoph M. Wintersteiger c734789723
Add ACME client for globally endorsed TLS certificates (#3877)
Co-authored-by: Amaury Chamayou <amaury@xargs.fr>
Co-authored-by: Maik Riechert <maik.riechert@arcor.de>
2022-06-15 17:06:32 +00:00
Eddy Ashton 265ee5b85f
Ensure `crypto::Pem`s contain PEM encoded contents (#3918) 2022-06-14 15:24:56 +01:00
Amaury Chamayou a50212e415
Unsafe different project (#3894) 2022-06-13 20:50:13 +01:00
Renato Golin 9cebcefddf
QUIC OpenSSL library in CCF (#3396)
Creates a new QUICTLS build into an Azure Universal Package repository,
and adds a way to retrieve it from the CCF build, making sure we include
and link to the right objects in the pre-built QUIC version of OpenSSL
for the enclave side.

It should not change the host side (still using the system's OpenSSL),
but we also need to guarantee that the versions are compatible (ie. have
the same version and backports, ex. 1.1.1f or 1.1.1o, etc).

Because Universal Packages version is strct, we can't have the final
patch letter in the end, so we make sure the packages uploaded there are
a match with the currently supported version of the Linux distro we use.

If we decide to support multiple distros in the future, we can move that
to a blob storage and do the name resolution at the Yaml/CMake level on
both building and importing sides.

MAJOR ISSUE: We can't get the 1.1.1f version that is the same as OE
because the quictls-openssl repo deletes branches too aggressively, all
we have access is from `h` onward. We're using `o` in hope it's backward
compatible but that too will soon disappear. We should NOT use this for
anything serious before we can solve this problem.
2022-05-27 19:37:53 +00:00
Amaury Chamayou 62df013fb8
Fix cmake install prefix (#3883) 2022-05-24 15:38:42 +01:00
Julien Maffre 684954467a
Asynchronous execution of start of recovery transaction (#3791) 2022-04-29 15:00:40 +01:00
Eddy Ashton 8e0b2c91cf
Restore public `ccf::Receipt` type (#3793) 2022-04-29 12:03:22 +00:00
Eddy Ashton 44a1e0644b
Pin `testssl` to v3.0.7 (#3736) 2022-04-05 10:03:04 +01:00
Eddy Ashton 5140e0f7ae
Move private headers to separate folder in install (#3716) 2022-03-29 08:25:43 +00:00
Eddy Ashton 79ad3f8b1f
Fix Raft partition test (#3672) 2022-03-22 17:37:21 +00:00
Amaury Chamayou 363a63b43d
Disable LTS tests for Unsafe build (#3655) 2022-03-14 14:05:59 +00:00
Eddy Ashton 952df50c75
Add ALPN extension to CCF servers, advertising HTTP/1.1 (#3643) 2022-03-11 11:02:16 +00:00
Eddy Ashton 978dce6e5d
Make `EnclaveAttestationProvider` public (#3626) 2022-03-04 09:10:42 +00:00
Eddy Ashton 8be03eeea2
Remove dependency on `TxReceipt` from public API (#3610) 2022-03-01 09:46:16 +00:00
Eddy Ashton ba0914bc2c
Fix Daily Build (#3595) 2022-02-24 09:10:51 +00:00
Eddy Ashton e30c6fb0ad
Separate public KV headers from implementation details (#3578) 2022-02-23 16:50:49 +00:00
Eddy Ashton c4ea8dfff2
Public header cleanup, part 2 (#3543) 2022-02-14 17:52:04 +00:00
Eddy Ashton 0208ca2483
Enable auth e2e test in V8 (#3502) 2022-02-03 09:17:12 +00:00
Amaury Chamayou fb1ff3ac23
Run only one LTS (#3493) 2022-02-01 18:04:11 +00:00
Eddy Ashton 4ee0d1579a
Add system for offloading index to disk (#3444) 2022-01-31 19:29:03 +00:00
Julien Maffre 8bd22a05c2
Fix `lts_compatibility` test in preparation for 2.0 release (#3457) 2022-01-28 10:06:03 +00:00
Julien Maffre 2f9078a3aa
JSON schema for `cchost` configuration file (#3446) 2022-01-27 11:57:49 +00:00
Julien Maffre 544d99e841
Add 1tx to 2tx reconfiguration migration to LTS test (#3442) 2022-01-24 15:27:17 +00:00
Christoph M. Wintersteiger b114701d4d
Handle UBSAN failures in connections test (#3433) 2022-01-24 12:15:52 +00:00
Eddy Ashton 135bfbe3cf
Add initial implementation of Indexing system (#3280) 2022-01-14 15:49:56 +00:00
Eddy Ashton 21cd9b9674
Move constitutions to samples directory (#3401) 2022-01-13 18:31:53 +00:00
Eddy Ashton 4b67651af3
Remove `proposal_generator.py` (#3400) 2022-01-13 17:14:37 +00:00
Julien Maffre f302ddade3
Move Python client code out of `ccf` package and back to infra (#3386) 2022-01-12 09:32:26 +00:00
Julien Maffre 8a2e99a990
Infra: cleanup `e2e_logging.py` (#3333) 2021-12-20 17:29:35 +00:00
Maik Riechert 918d1d4d37
Experimental V8 app (#3258) 2021-12-16 14:55:29 +00:00
Julien Maffre 80b8103a0c
Add option to link in `nghttp2` library (#3287) 2021-12-08 09:41:14 +00:00
Julien Maffre c63e7d6967
JSON configuration: size strings (#3272) 2021-12-06 16:56:05 +00:00
Renato Golin e99636e980
Simple TLS tests (#3270) 2021-12-01 13:15:16 +00:00
Eddy Ashton f0a7d405ec
Historical queries: Add support for fetching sets of seqnos (#3221) 2021-12-01 09:25:42 +00:00
Julien Maffre eb3c8407a7
Add `--check` option to `cchost` to verify configuration file (#3264) 2021-11-29 15:52:24 +00:00
Renato Golin d28a544f6e
Move crypto tests in tls to crypto (#3242) 2021-11-26 13:32:09 +00:00