Jeff Mitchell
278bdd1f4e
Switch to go modules ( #6585 )
...
* Switch to go modules
* Make fmt
2019-04-13 03:44:06 -04:00
Jeff Mitchell
170521481d
Create sdk/ and api/ submodules ( #6583 )
2019-04-12 17:54:35 -04:00
Jeff Mitchell
b1df69d8d5
Save the original request body for forwarding ( #6538 )
...
* Save the original request body for forwarding
If we are forwarding a request after initial parsing the request body is
already consumed. As a result a forwarded call containing a request body
will have the body be nil. This saves the original request body for a
given request via a TeeReader and uses that in cases of forwarding past
body consumption.
2019-04-05 14:36:34 -04:00
Jeff Mitchell
cc08d0af54
Fix tests
2018-05-29 17:02:52 -04:00
Jeff Mitchell
49a3f71bfb
Fix missing verification nonce field
2018-05-29 16:13:08 -04:00
Jeff Mitchell
a98b9144ff
Fix panic and update some text
2018-05-29 13:13:47 -04:00
Jeff Mitchell
d93efac123
Fix a null pointer and update status threshold
2018-05-29 12:04:30 -04:00
Jeff Mitchell
f6d3aea11f
Builds on top of #4600 to provide CLI support ( #4605 )
2018-05-28 00:39:53 -04:00
Jeff Mitchell
7c6a75d60b
Factor out a bunch of shared code
2018-05-21 17:46:32 -04:00
Jeff Mitchell
ab82f9e555
Address review feedback
2018-05-21 14:47:00 -04:00
Jeff Mitchell
d9535101c3
More work on recovery test
2018-05-20 18:42:14 -04:00
Jeff Mitchell
bf16f7f517
Finish non-recovery test
2018-05-20 02:42:15 -04:00
Jeff Mitchell
cfd087b155
Update rekey methods to indicate proper error codes in responses
2018-05-19 23:43:48 -04:00
Jeff Mitchell
9b796f1aca
Fix existing tests
2018-05-19 22:04:45 -04:00
Jeff Mitchell
d47647aea2
WIP
2018-05-19 21:31:45 -04:00
Vishal Nayak
e2bb2ec3b9
Errwrap everywhere ( #4252 )
...
* package api
* package builtin/credential
* package builtin/logical
* package command
* package helper
* package http and logical
* package physical
* package shamir
* package vault
* package vault
* address feedback
* more fixes
2018-04-05 11:49:21 -04:00
Jeff Mitchell
7ddc025dee
Re-add lost stored-shares parameter to operator rekey command. ( #3974 )
...
Also change the rekey API to not require explicitly setting values to 1.
Fixes #3969
2018-02-14 16:10:45 -05:00
Jeff Mitchell
cfc788f60e
Remove context from a few extraneous places
2018-01-19 03:44:06 -05:00
Brian Kassouf
8142b42d95
Add context to storage backends and wire it through a lot of places ( #3817 )
2018-01-19 01:44:44 -05:00
Jeff Mitchell
cd6d67d84b
Final sync
2017-10-23 17:39:21 -04:00
Brian Kassouf
de7f39e064
Update locking components from DR replication changes ( #3283 )
...
* Update locking components from DR replication changes
* Fix plugin backend test
* Add a comment about needing the statelock:
2017-09-04 19:38:37 -04:00
Jeff Mitchell
63e66d09f4
Fix error message grammar
2017-03-14 17:10:43 -04:00
Jeff Mitchell
98c7bd6c03
Port some replication bits to OSS ( #2386 )
2017-02-16 15:15:02 -05:00
Jeff Mitchell
d51b13fca6
Multi value test seal ( #2281 )
2017-01-17 15:43:10 -05:00
vishalnayak
3cd4cb1381
rekey: pgp keys input validation
2017-01-12 00:05:41 -05:00
Thomas Soëte
ebe1cf8081
Use 'http.MaxBytesReader' to limit request size ( #2131 )
...
Fix 'connection reset by peer' error introduced by 300b72e
2016-12-01 10:59:00 -08:00
Jeff Mitchell
e1706fdfec
Redirect rekey operation from standby to master ( #1868 )
2016-09-13 11:59:12 -04:00
Jeff Mitchell
ed48b008ce
Provide base64 keys in addition to hex encoded. ( #1734 )
...
* Provide base64 keys in addition to hex encoded.
Accept these at unseal/rekey time.
Also fix a bug where backup would not be honored when doing a rekey with
no operation currently ongoing.
2016-08-15 16:01:15 -04:00
Jeff Mitchell
99772d3cff
Add seal tests and update generate-root and others to handle dualseal.
2016-04-25 19:39:04 +00:00
Jeff Mitchell
ab93e3aa63
SealInterface
2016-04-04 10:44:22 -04:00
Jeff Mitchell
58a2c4d9a0
Return status for rekey/root generation at init time. This mitigates a
...
(very unlikely) potential timing attack between init-ing and fetching
status.
Fixes #1054
2016-02-12 14:24:36 -05:00
Jeff Mitchell
887085afbf
Remove need for PUT in rekey. We've decided that POST and PUT are to
...
stay as synonyms for writes, so there's no reason to limit it for this
operation.
2016-01-14 16:52:34 -05:00
Jeff Mitchell
027c84c62a
Add rekey nonce/backup.
2016-01-06 09:54:35 -05:00
Jeff Mitchell
4d877dc4eb
Address comments from review.
2015-08-25 15:33:58 -07:00
Jeff Mitchell
e133536b79
Add support for pgp-keys argument to rekey, as well as tests, plus
...
refactor common bits out of init.
2015-08-25 14:52:13 -07:00
Armon Dadgar
24ed178f44
http: adding rekey handlers
2015-05-28 14:28:50 -07:00
