Граф коммитов

39 Коммитов

Автор SHA1 Сообщение Дата
Julien Vehent 6eac3b1827 [minor] move list of available modules into global mig conf 2014-11-24 12:50:50 -05:00
Julien Vehent f97c6c4252 [doc] client package example 2014-11-07 09:38:48 -05:00
Julien Vehent 671afba33a [major] PGP authentication of API clients, includes client code refactoring
This is a major change to the client code and the API. All API calls now require
a HTTP header called X-PGPAUTHORIZATION that contains a signature from a
known investigator. This work is also the opportunity to split up the API client
part of the MIG console into a new package called mig/client. This will facilitate
code reuse, particularly for standalone command line utilities.
2014-11-06 23:13:15 -05:00
Julien Vehent e7b5e3630f [doc] add comments on sample api conf 2014-11-03 13:37:22 -05:00
Julien Vehent b536525f52 [minor] split up api pgp code into separate file 2014-10-30 19:30:47 -04:00
Julien Vehent 245e533609 [major] refactor scheduler PGP keyring management
Similar to the work done on the api, instead of managing investigator's keys
with a gpg keyring on disk, pull the keys from the database and manage a
keyring in memory.
The addition here is the management of the scheduler's own investigator
identity, that's used during the upgrade protocol to kill old agents. That private
key is also stored in the database, with permissions that limit the access to the
column to the schedulers themselves.
2014-10-30 19:30:08 -04:00
Julien Vehent 2b9ecda3cf [minor] add support for custom tags in agent conf 2014-09-15 17:05:19 -04:00
Julien Vehent 0926c738d3 [major] rewrite of connected module in netstat module, support all OSes 2014-09-14 13:19:52 -04:00
Julien Vehent 48a2f22f8d [medium] make max number of DB connections configurable in scheduler 2014-08-25 13:51:10 -04:00
Julien Vehent 3a9c058ce9 [doc] complete rewrite of module documentation, with full example module 2014-08-22 13:51:07 -04:00
Julien Vehent 870c591d9b [major] refactor module support to use self registration 2014-08-22 09:54:32 -04:00
Julien Vehent 9eadf2fe2e [medium] discover endpoint IP addresses, both local and public (via stun) 2014-08-22 09:53:16 -04:00
Julien Vehent 8132129386 [doc] use short license header in source files 2014-08-13 12:30:53 -04:00
Julien Vehent f8486bf673 [medium] load agent configuration from external file 2014-08-04 11:39:46 -04:00
Julien Vehent 8f63a71b5c [medium] agent stat socket 2014-07-30 16:40:37 -04:00
Julien Vehent 7be40fbb61 [minor] add support for pre-configured proxies in agent 2014-07-21 11:13:46 -04:00
Julien Vehent cc0658b338 [medium] add CONNECT proxy support to the agent
Use the env variables HTTP_PROXY and HTTPS_PROXY for the agent to
automatically attempt to connect using HTTP CONNECT proxy tunneling
2014-07-20 14:08:57 -04:00
Julien Vehent 1ab3cd3947 [medium] Immortality achievement completed (for mig-agent)
Also fixing a nasty issue when calling os.exec inside a goroutine causes the process
to become unkillable.
2014-06-26 20:32:46 -04:00
Julien Vehent d2f302cbd0 [major] f*** gpgme, use Go's own openpgp and Camlistore's gpgagent/pinentry instead 2014-06-14 14:15:12 -04:00
Julien Vehent 5d9411b110 [minor] configurable detection of multiple agents in Scheduler 2014-05-09 18:07:14 -04:00
Julien Vehent 92c0246e7b [doc] update/fix the configuration doc, added script to create remote postgres db 2014-05-09 13:29:06 -04:00
Julien Vehent ca8df4f485 [major] postgres migration, take 2 2014-05-08 14:51:49 -04:00
Julien Vehent 51d6c6789d [major] migration to postgres, bye bye mongodb
This commit is a giant refactoring of the data model of MIG. Moving from
mongo to postgres introduced a number of constraints in order to fit action,
commands, agents and investigators into a relational database. The result is
a much cleaner, much easier to query, database backend that will let us
create reports much more easily.

Plus, postgresql json support is awesome!
2014-05-07 18:07:21 -04:00
Julien Vehent dec89541dd [medium] API uses absolute path to resources, makes links clickables in browser 2014-05-03 21:11:28 -04:00
Julien Vehent ec511e7e6b [medium] Add support for self-installable agent service 2014-04-21 17:43:23 -04:00
Julien Vehent 439660d6ff [major] Scheduler logic to control upgrade and cleanup of agents 2014-04-17 14:06:50 -04:00
Julien Vehent 1581098450 [medium] AgentDestroy module: kills an agent and deletes its binary 2014-04-17 14:06:50 -04:00
Julien Vehent 99b854ea4a [medium] Change Permission format to support weight system 2014-04-14 19:43:12 -04:00
Julien Vehent dfbc9a13e5 [doc] ACL documentation 2014-04-09 11:43:44 -04:00
Julien Vehent 73ad9078e5 [doc] change default collector freq to something in hours (duration don't support `d`) 2014-03-26 15:31:13 -04:00
Julien Vehent fecd37c85b [medium] Add Collector routing to the scheduler 2014-03-26 14:57:04 -04:00
Julien Vehent 4f0eda23ec [minor] Make collector frequency configurable 2014-03-25 13:12:50 -04:00
Julien Vehent 5aef24f64c [minor] make API listening IP and Port configurable 2014-02-12 23:51:55 -05:00
Julien Vehent 9378846a2d [medium] base API structure and endpoint for creating actions 2014-02-12 17:20:08 -05:00
Julien Vehent 372f7bf184 [minor] make AMQP timeout for agent and scheduler configurable 2014-02-10 15:15:05 -05:00
Julien Vehent 486f3c86f4 [minor/bug] fix name of CACERT variable in agent 2014-02-07 23:45:27 -05:00
Julien Vehent c11457f072 [medium] add TLS support for AMQPS in the Scheduler 2014-02-07 23:43:02 -05:00
Julien Vehent 706b3773e4 [minor] add rabbitmq vhost support in scheduler 2014-02-07 17:13:27 -05:00
Julien Vehent 42d0cbb205 [doc] explain configuration of agent 2014-02-05 13:30:19 -05:00