9 Commits

Author	SHA1	Message	Date
Jeff Mitchell	7876b8b7fe	Use reflect.Value.String() rather than a type assertion. ... Fixes a panic in hashstructure/auditing that can occur with custom string types. Fixes #973	2016-01-26 12:32:50 -05:00
Jeff Mitchell	49d525ebf3	Reintroduce the ability to look up obfuscated values in the audit log ... with a new endpoint '/sys/audit-hash', which returns the given input string hashed with the given audit backend's hash function and salt (currently, always HMAC-SHA256 and a backend-specific salt). In the process of adding the HTTP handler, this also removes the custom HTTP handlers for the other audit endpoints, which were simply forwarding to the logical system backend. This means that the various audit functions will now redirect correctly from a standby to master. (Tests all pass.) Fixes #784	2015-11-18 20:26:03 -05:00
Jeff Mitchell	1cd129015f	Write HMAC-SHA256'd client token to audited requests ... Fixes #713	2015-10-29 13:26:18 -04:00
Jeff Mitchell	1a22cb0b12	Expand HMAC support in Salt; require an identifier be passed in to specify type but allow generation with and without. Add a StaticSalt ID for testing functions. Fix bugs; unit tests pass.	2015-09-18 17:38:30 -04:00
Jeff Mitchell	a4ca14cfbc	Add HMAC capability to salt. Pass a salt into audit backends. Require it for audit.Hash.	2015-09-18 17:38:22 -04:00
Armon Dadgar	139a8db461	audit: Guard against a few nil pointer cases	2015-04-27 15:56:40 -07:00
Mitchell Hashimoto	ccaad36388	audit: separate hashing from formatting to facilitate raw	2015-04-22 07:41:53 +02:00
Mitchell Hashimoto	99036f9e5b	audit: add SHA1 hash callback	2015-04-21 16:13:06 +01:00
Mitchell Hashimoto	3f301d7995	audit: add hashstructure	2015-04-21 16:02:03 +01:00