Commit Graph

50 Commits

Author SHA1 Message Date
Wolfgang Bumiller
24e1f1d0d3 bump version to 2.0-2 2017-04-21 11:52:21 +02:00
Fabian Grünbichler
10f9a4b775 fix #1332: allow ECDHE with all supported curves
with openssl 1.0.1, we had to limit ourself to one curve to
allow ECDHE at all.

with openssl 1.1.x, the same limit actually means only
allowing ECDSA certificates using that curve, even for
non-ephemeral ECDH handshakes, effectively only allowing
prime256 EC certificates.

since openssl 1.1.x supports auto-negotiation of the curve
used for ECDHE, simply use that for now.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2017-04-03 15:05:40 +02:00
Dietmar Maurer
01659eceac bump version to 2.0-1 for debian stretch 2017-03-10 08:51:30 +01:00
Dietmar Maurer
fd03f0e31f Makefile: use "--product pve,pmg --dist stretch" for upload target 2017-03-08 17:35:17 +01:00
Dietmar Maurer
666d3ae1d1 cleanup error message for non-existent files 2017-03-03 06:32:25 +01:00
Wolfgang Bumiller
e4bce23e8c buildsys: make job safety 2017-02-07 15:23:34 +01:00
Dietmar Maurer
863ecf89c8 bump version to 1.0-4 2017-01-21 16:37:07 +01:00
Dietmar Maurer
471cfd49d5 add debian triggers file
to correctly restart API daemons on updates.
2017-01-21 16:35:36 +01:00
Dietmar Maurer
f8bbcae824 use ${perl:Depends}
to avoid warning when building the package
2017-01-21 16:23:37 +01:00
Dietmar Maurer
8dee83616b bump version to 1.0-3 2017-01-21 16:20:02 +01:00
Dietmar Maurer
038808dd92 add a more complex demo 2017-01-21 16:08:36 +01:00
Dietmar Maurer
fc75d78694 move simple-demo.pl -> examples/simple-demo.pl 2017-01-21 15:48:04 +01:00
Dietmar Maurer
8d88baec13 call Net::SSLeay::ERR_clear_error after all handlers
just to be sure.
2017-01-21 11:55:18 +01:00
Dietmar Maurer
6389088689 call Net::SSLeay::ERR_clear_error() after auth_handler
Some auth_handlers use Crypt::OpenSSL::RSA, which seems to set the openssl error
variable. We need to clear that here, else AnyEvent::TLS aborts the connection.
2017-01-20 18:17:13 +01:00
Dietmar Maurer
7a9a3b9063 remove simple-demo.pem in distclean
Avoid generating to many different certs (confuses the browser).
2017-01-20 18:11:42 +01:00
Dietmar Maurer
133e058609 avoid warnings when clients disconnects early 2017-01-20 11:22:40 +01:00
Dietmar Maurer
84df857fba implement more reasonable ticket verification for demo server
Do not pass secrets to client.
2017-01-17 07:38:23 +01:00
Dietmar Maurer
c67d07fc66 set CN=$nodename for demo server certificate 2017-01-17 07:26:04 +01:00
Dietmar Maurer
1111604c87 use openssl instead of make-ssl-cert to generate demo cert
We do not set things like subjectAltName, but the cert ist good
enough for the demo.
2017-01-17 06:50:06 +01:00
Dietmar Maurer
77a98dfede bump version to 1.0-2 2017-01-16 18:39:56 +01:00
Dietmar Maurer
e47181898e simple-demo.pl: simple demo server for testing 2017-01-16 15:10:04 +01:00
Dietmar Maurer
5dfe8376ac extract_auth_cookie: always call uri_unescape($ticket)
should not harm.
2017-01-16 14:24:21 +01:00
Dietmar Maurer
cd64441da1 use canonical flag for json format 2017-01-16 13:05:21 +01:00
Dietmar Maurer
555a5ab311 improve error message 2017-01-16 11:45:36 +01:00
Fabian Grünbichler
d52dbaabae fix debian/rules permissions 2017-01-16 11:40:00 +01:00
Fabian Grünbichler
5a554403b5 build script improvement
build with dpkg-buildpackage (in temp dir), instead of
install-ing the files manually and then pretending to build
with dpkg-buildpackage.

this makes the whole fakeroot/root handling simpler, and
makes "make deb" a simple wrapper around building the
package, like it should be.
2017-01-16 11:36:44 +01:00
Dietmar Maurer
ca304f91ce pass basic server configuration to formatter functions 2017-01-15 11:55:52 +01:00
Dietmar Maurer
dc80cea51c Formatter/HTML: only display description if we have one 2017-01-15 11:04:02 +01:00
Dietmar Maurer
c5f0a96ffd add some inline docs 2017-01-15 10:54:26 +01:00
Dietmar Maurer
af76fd782d remove base_handler_class from required arguments 2017-01-15 09:25:24 +01:00
Dietmar Maurer
58ddb769fb remove all references to rpcenv (we can do this in the subclass). 2017-01-15 08:34:46 +01:00
Dietmar Maurer
6189d2ef0a Formatter/Bootstrap.pm; use configured cookie_name 2017-01-14 17:16:22 +01:00
Dietmar Maurer
fc87cd5ec3 pass $title to formatter functions 2017-01-14 16:39:25 +01:00
Dietmar Maurer
968a4a6d5d include jquery-3.3.1.min.js 2017-01-14 16:00:29 +01:00
Dietmar Maurer
239710aff0 Bootstrap.pm: remove support for IE8 and older 2017-01-14 15:42:56 +01:00
Dietmar Maurer
6edb39f69b include bootstrap-3.3.7-dist.zip files 2017-01-14 15:36:15 +01:00
Dietmar Maurer
911ede9b12 new helper add_dirs (copied from pveproxy.pm) 2017-01-14 14:26:33 +01:00
Dietmar Maurer
225bad0c07 depend on perl 2017-01-14 14:25:57 +01:00
Dietmar Maurer
5f14e56e33 white space cleanups 2017-01-14 13:18:27 +01:00
Dietmar Maurer
a3bb607024 add new hook function to generate CSRF token
This avoid the reference to PVE::AccessControl.
2017-01-14 13:16:59 +01:00
Dietmar Maurer
8001eb275f pass auth_handler result to formatters
In case somebody want to display that info.
2017-01-14 11:12:05 +01:00
Dietmar Maurer
c715437597 rework formatter registration
Do the whole thing inside PVE/APIServer/Formatter.pm
2017-01-14 10:42:33 +01:00
Dietmar Maurer
63307bebd9 add generic formatter framework 2017-01-14 09:53:44 +01:00
Dietmar Maurer
d08808bc8a rename class to PVE::APIServer::AnyEvent
So that we can move all api server related code into PVE::APIServer::*.
2017-01-13 18:18:13 +01:00
Dietmar Maurer
859f1fd3a6 debian/control: add missing dependencies 2017-01-13 14:55:16 +01:00
Dietmar Maurer
403964f266 avoide dependency on PVE::AccessControl
add new abstract function verify_spice_connect_url().
2017-01-13 14:53:28 +01:00
Dietmar Maurer
fbc42b33e7 move abstract fuctions to end of file 2017-01-13 14:45:56 +01:00
Dietmar Maurer
b639f458c5 AsyncHTTPServer.pm: fix dependencies, remove handler implementation
So this is an abstract, reusable class now.
2017-01-13 13:33:22 +01:00
Dietmar Maurer
4fe2161253 fix/change class name to PVE::AsyncHTTPServer 2017-01-13 13:16:54 +01:00
Dietmar Maurer
d82180013b initial import
The PVE/AsyncHTTPServer.pm code is copied from the pve-manager
package (PVE/HTTPServer.pm) and renamed.
2017-01-13 12:57:46 +01:00