Commit Graph

16 Commits

Author SHA1 Message Date
f097c029f3 Security fix: Incorrect permission assignment for critical resource 2024-04-19 11:48:55 +02:00
02bd5f316a admin: When deleting team, also delete associations 2022-02-03 10:16:52 +01:00
5eeb1a6297 admin: Handle team password 2021-09-09 11:21:29 +02:00
007efc6118 health: done 2020-01-30 18:55:57 +01:00
084d39f6cf Fix typos 2020-01-23 18:26:30 +01:00
9983542653 admin: always use normalized hexadecimal certificate ID 2020-01-23 18:26:30 +01:00
771627a0da pki: fix team association, complement to 68e5c4cd2b
The fix introduced in the referenced commit was not working.

This time, it has been tested with the following commands:

	# Associate all certificate to a team
	curl http://localhost:8081/api/certs/ | jq -r .[].id | while read CERTID; do curl -X PUT -d '{"id_team":1}' http://localhost:8081/api/certs/$CERTID; done

	# For each certificate associated with the team, try to connect to the server with each certificate. Report failing certificates.
	curl -s http://localhost:8081/api/teams/1/certificates | jq -r '.[] | .id + " " + .password' | while read CERTID PASSWORD; do curl -sf --cert-type P12 --cert $CERTID.p12:$PASSWORD https://fic.srs.epita.fr/my.json > /dev/null || echo $CERTID; done
2019-02-06 03:40:49 +01:00
14d31737e0 admin: new route and interface to manage symlink for team association exclusing certificates 2019-02-06 03:40:49 +01:00
11e0b46034 pki: fix out-of-bound error when a symlink directory doesn't contain a serial 2019-01-21 03:07:47 +01:00
156a87abc0 admin/pki: use symlink instead of DB to associate certificate to team 2018-05-11 15:03:10 +02:00
68e5c4cd2b pki: improve serial number generation + fix team association
Replace math/rand by crypto/rand.

Fix big when associating certificate with leading zero: nginx prepend 0 wherehas we don't.
2018-05-11 05:27:51 +02:00
59beafb314 admin/pki: avoid some hard to read characters in password 2018-05-11 05:27:50 +02:00
c118035c33 Introducing new PKI management 2018-05-11 05:27:50 +02:00
1ebcdd7687 Move PKI scripts at root 2018-01-17 18:52:33 +01:00
318bc4bc4d Update openssl settings 2018-01-17 18:52:31 +01:00
ede5bb18b1 Add certificate generation and revokation 2016-01-21 05:33:59 +01:00