Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Hacking On The Mozilla Authenticator-RS Backend For SSHCerts #45

Merged
merged 23 commits into from
Jun 6, 2024
Merged

Hacking On The Mozilla Authenticator-RS Backend For SSHCerts #45

merged 23 commits into from
Jun 6, 2024

Commits on Dec 7, 2023

  1. Try to make multithreaded but not tested

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    2dac4e1 View commit details
    Browse the repository at this point in the history

  2. Use sshcerts mozilla backend

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    a9cd1a9 View commit details
    Browse the repository at this point in the history

  3. Support both hashed and unhashed challenges for backwards compatibility

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    0eeb1a2 View commit details
    Browse the repository at this point in the history

  4. Add grace period of 5 seconds to certificate refresh

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    dc81cf1 View commit details
    Browse the repository at this point in the history

  5. Unify the API and make switching between sshcerts FIDO backends possible

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    9d56fcf View commit details
    Browse the repository at this point in the history

  6. Update FFI

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    5c3be6c View commit details
    Browse the repository at this point in the history

  7. Update package

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    8423cb4 View commit details
    Browse the repository at this point in the history

  8. Be more careful with sending notification

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    6aa44c1 View commit details
    Browse the repository at this point in the history

  9. Refactor all the FFI code

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    1ffd304 View commit details
    Browse the repository at this point in the history

  10. Fix rebase

    @obelisk
    obelisk committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    7f7bf49 View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2024

  1. Address misc security issues (#47) 

    * Limit the size of attestation certs

* Use authority returned from x509 approval response

* x509 authorization checks authority for local-db mode

* Fix test configs
    @timweri
    timweri committed Jan 9, 2024
    Configuration menu
    Copy the full SHA
    fd388b9 View commit details
    Browse the repository at this point in the history

Commits on Jan 19, 2024

  1. Limit pubkey size in challenge request (#48)

    @timweri
    timweri committed Jan 19, 2024
    Configuration menu
    Copy the full SHA
    630f638 View commit details
    Browse the repository at this point in the history

Commits on May 6, 2024

  1. Add feature to fetch a list of signers and their pubkeys (#49) 

    * Add feature to fetch a list of signers and their pubkeys

* Refactor

* Update CLI output

* Add authorized signers cache

* Add compression to authorized signers

* Switch to zstd

* Refactor

* Update local testdb

* Add LRU rate limiter

* Remove output line

* FFI

* Remove line

* Move to SSHCerts 13.1

* Add new FFIs for data signing and verification

* Fix agent

* Rename authorized signers to allowed signers

* Restrict sshcerts features in rustica to remove openssl

* A missing s makes everyone sad

* Yubikey lite you idiot

* Rename

* Fix return code

---------

Co-authored-by: Mitchell Grenier <mitchell@confurious.io>
    @timweri @obelisk
    timweri and obelisk committed May 6, 2024
    Configuration menu
    Copy the full SHA
    d1be858 View commit details
    Browse the repository at this point in the history

Commits on May 9, 2024

  1. Add get_cert function to Rustica agent (#51) 

    * Add get_cert function to Agent handler

* Add get_cert

* Fix get_cert FFI

* Reuse runtime
    @timweri
    timweri committed May 9, 2024
    Configuration menu
    Copy the full SHA
    ac7199d View commit details
    Browse the repository at this point in the history

  2. Update to sshcert 0.13.2

    @obelisk
    obelisk committed May 9, 2024
    Configuration menu
    Copy the full SHA
    78d7058 View commit details
    Browse the repository at this point in the history

Commits on Jun 6, 2024

  1. Add new allowed_signer config blocks to examples

    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    47aa0e7 View commit details
    Browse the repository at this point in the history

  2. Bump protoc

    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    1409a39 View commit details
    Browse the repository at this point in the history

  3. Add new allowed_signer config blocks to test_config examples

    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    27cf857 View commit details
    Browse the repository at this point in the history

  4. Bump ID to 1001

    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    5404ae2 View commit details
    Browse the repository at this point in the history

  5. Update keys in the test configs

    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    b448354 View commit details
    Browse the repository at this point in the history

  6. Update client private key

    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    015aac6 View commit details
    Browse the repository at this point in the history

  7. Reissue client keys and update alt config with new private key. Also … 

    …update issuance CN to match what is expected in server code
    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    86cd11d View commit details
    Browse the repository at this point in the history

  8. Fix the final stage of the integration test

    @obelisk
    obelisk committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    e9882a0 View commit details
    Browse the repository at this point in the history