soledad.git - [soledad]

Age	Commit message (Collapse)	Author
2017-03-09	[bug] secrets version defaults to v1	Tulio Casagrande

2017-03-09	[bug] add default version when decrypting secrets	Tulio Casagrande
	Resolves: https://0xacab.org/leap/soledad/issues/8788
2017-03-02	[test] add comments explaining behaviour of upload/download benchmark	drebs

2017-03-02	[test] improve twistd startup and termination	drebs
	- use subprocess.check_call() to ensure any errors during twistd startup will properly show up on test reports. - use SIGTERM instead of SIGKILL to gracefully terminate twistd.
2017-03-02	[test] mark benchmark tests using their group names	drebs

2017-03-02	[test] bugfix: actually use an empty local db in download benchmarks	drebs
	We were previously not using an empty local db for download benchmark tests, so there was actually nothing to sync. This commit fixes that by adding a way to force an empty local db on soledad client instantiation.
2017-03-02	[test] use new way of indicating the tcp port for twisted web	drebs

2017-03-02	[test] fix test_sync_target for error handling	Victor Shyba
	It needs a defer.Deferred
2017-02-27	[feat] add configurable blobs path in server	drebs
	- Resolves: #8777
2017-02-25	[refactor] pass soledad object to client secrets api	drebs
	In order to be able to change passphrase, token and offline status of soledad from the bitmask client api, the secrets api also has to be able to use up-to-date values when encrypting/decrypting secrets and uploading/downloading them to the server. This commit makes public some soledad attributes that were previously "private" (i.e. used to start with "_" and were not meant to be accessed from outside), and passes the whole soledad object to the client secrets api. This makes the code cleaner and also allows for always getting newest values of soledad attributes.
2017-02-16	[style] add deprecation warning on legacy decoder	Victor Shyba

2017-02-16	[feature] add doc size to preamble	Victor Shyba
	That's necessary for blobs-io. Current code includes backwards compatibility branching and tests, which shall be removed on next releases.
2017-02-15	[tests] add tests for preamble encoding	Victor Shyba

2017-02-15	[style] pep8	Victor Shyba

2017-02-15	[tests] fix tests	Kali Kaneko

2017-02-13	[tests] conf format changed, no more nesting	Victor Shyba

2017-02-13	[tests] server parameter is gone, patch the module	Victor Shyba

2017-02-09	[test] move server url mapper tests to its own file	drebs

2017-02-09	[refactor] parametrize blobs toggling in soledad server resource	drebs

2017-02-09	[refacor] make proper use of twisted web dyamic resources in server	drebs

2017-02-09	[refactor] allow passing threadpool pool for server sync resource	drebs

2017-02-09	[refactor] move wsgi sync setup to its own module	drebs

2017-02-09	[test] add tests for server resource and server info	drebs

2017-02-09	[test] move server auth tests to its own file	drebs

2017-02-09	[feature] add server config option for blobs	drebs

2017-02-09	[refactor] allow passing threadpool pool for server sync resource	drebs
	Conflicts: server/src/leap/soledad/server/_resource.py testing/tests/server/test__resource.py
2017-02-09	[refactor] move wsgi sync setup to its own module	drebs
	Conflicts: server/src/leap/soledad/server/_wsgi.py server/src/leap/soledad/server/entrypoint.py server/src/leap/soledad/server/resource.py testing/tests/server/test__resource.py
2017-02-09	[test] fix session and auth tests	drebs

2017-02-09	[test] add tests for server auth session	drebs

2017-02-09	[test] add tests for server auth	drebs

2017-02-09	[test] split url mapper test in many smaller tests	drebs

2017-02-09	[refactor] remove leftover code from previous wsgi auth	drebs

2017-02-09	[refactor] separate url mapper, avoid hanging tests	drebs
	Because the wsgi resource has its own threadpool, tests might get confused when shutting down and the reactor may get clogged waiting for the threadpool to be stopped. By refactoring the URLMapper to its own module, server tests can avoid loading the resource module, where the wsgi threadpool resides, so the threapool will not be started.
2017-02-09	[feat] use twisted web http auth and creds	drebs

2017-02-09	[feat] reuse the url mapper instead of creating it for every request	drebs

2017-02-09	[bug] disallow all requests to "user-{uuid}/"	drebs

2017-02-09	[test] move client secrets tests to its own file	drebs

2017-02-09	[test] fix test after secrets refactor	drebs

2017-02-09	[bug] use derived key for local storage	drebs

2017-02-09	[refactor] improve secrets generation and storage code	drebs

2016-12-12	[feature] Change CTR to GCM on secrets.py	Victor Shyba
	Current implementation can allow tampering and the CTR->GCM exchange can help to avoid it. This commits also alters a behaviour where we moved ahead after failing to decrypt a recovery document. IMHO we can't move ahead as this is a fatal error. Signed-off-by: Victor Shyba <victor1984@riseup.net>
2016-12-12	[feature] Add retro compat on secrets.py ciphers	Victor Shyba
	Integrated the secrets's JSON key that specifies ciphers into _crypto and added optional GCM. Also added a test to check if both cipher types can be imported. Resolves: #8680 Signed-off-by: Victor Shyba <victor1984@riseup.net>
2016-12-12	[feature] use GCM instead of CTR+HMAC	Victor Shyba
	Resolves: #8668 - client: substitute usage of CTR mode + HMAC by GCM cipher mode Signed-off-by: Victor Shyba <victor1984@riseup.net>
2016-12-12	[refactor] improve blob signature magic usage	Victor Shyba
	Our magic value wasn't being used and were represented as a string. Refactored it to a constant, increased it's size to 2 bytes and optimzed is_symmetrically_encrypted to look for the magic and symmetrically encrypted flag under base64 encoding. Most file types will use this feature to help identifying themselves, so it got refactored to serve the purpose it was created.
2016-12-12	[feature] speed up sync benchmark setup code	Victor Shyba
	We aren't testing huge payloads on CI, so it doesn't make sense to insert docs one by one. 'gatherResults' can speed up bench setup.
2016-12-12	[refactor] introduces a GenericWriter	Victor Shyba
	AESWriter and HMACWriter are just applying hmac or aes into a flow of data. Abstracted the application of those operations into a super class and highlighted just the difference on each implementation.
2016-12-12	[refactor] simplify _crypto	Victor Shyba
	After adding the streaming decrypt, some classes were doing almost the same thing. Unified them. Also fixed some module level variables to upper case and some class name to camel case.
2016-12-12	[bug] make the semaphore cover all parsing	Victor Shyba
	Unfortunately, if a doc finishes decryption before the previous one we will still have an issue while inserting. This commits solves it by adding the parse and decrypt inside of the semaphore.
2016-12-12	[feature] make _crypto stream on decryption	Victor Shyba
	We are already doing this on encryption, now we can stream also from decryption. This unblocks the reactor and will be valuable for blobs-io.
2016-12-12	[feature] delimit preamble from ciphertext	Victor Shyba
	We now encode preamble and ciphertext+hmac in two distinct payloads separated by a space. This allows metadata to be extracted and used before decoding the whole document. It also introduces a single packer for packing and unpacking of data instead of reads and writes. Downside: doc_id and rev are limited to 255 chars now.