SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 05:40:11 +01:00
Code Issues Releases Activity Actions
256 commits 13 branches 34 tags 8.5 MiB
Commit graph

256 commits

This branch
This branch
All branches
Author SHA1 Message Date
Fadi Abbud
670f4cbf60 Fix Typo 2022-02-24 09:06:16 +01:00
Sascha L. Teichmann
4fc6bc5509 Add another layer aound the ROLIE feed documents. 2022-02-23 21:10:19 +01:00
Fadi Abbud
cbf39f9806 Documentation 2022-02-22 11:06:51 +01:00
Fadi Abbud
9e422d5ad2 Add one config option (provider) 
* "Issuer" config option for setting the CA issuer, these is used to
determine the valid TLS client certificates that allowed to access the
web-interface of the provider.
 2022-02-22 08:37:51 +01:00
Fadi Abbud
a5d64a4038 Add info to one command (client-certificate-setup.md) 2022-02-18 14:40:31 +01:00
Fadi Abbud
d451cc3908 (minor) Fix one option value 2022-02-18 13:57:45 +01:00
Fadi Abbud
9e13831a6f
Merge pull request #55 from csaf-poc/dev-docs-development-ca 
Add docs to run a development ca with gnutls
 2022-02-17 10:48:03 +01:00
Sascha L. Teichmann
a02c1cea6c
Merge pull request #39 from csaf-poc/improve_tlp_error_message 
Improve error message of missing tlp
 2022-02-17 10:43:27 +01:00
Sascha L. Teichmann
57f43b9d7c Restore output of found value 2022-02-17 10:41:52 +01:00
Sascha L. Teichmann
cffc7aaa66 Merge branch 'main' into improve_tlp_error_message 2022-02-17 10:34:03 +01:00
Sascha L. Teichmann
83299ebe8b
Merge pull request #51 from csaf-poc/provider_documentation 
Add some code documentation
 2022-02-17 10:30:31 +01:00
Fadi Abbud
21333fe7b4
Merge pull request #56 from csaf-poc/checker-locate-provider-metadata-json 
Checker locate provider metadata json
 2022-02-17 10:24:43 +01:00
Fadi Abbud
d9e326f84a Fix link in development-ca.md 2022-02-17 10:05:08 +01:00
Fadi Abbud
78a04ab081
Improve uploader documentation (#38) 
* improves #33
 2022-02-16 16:32:58 +01:00
Bernhard Reiter
196e123415
Improve docs/development-ca.md 
* Add some considerations and references. So readers can follow some
   of the engineering thoughts.
 2022-02-16 09:55:16 +01:00
Bernhard Reiter
72a0f1f4ed
Improve docs/install-server-certificate.md 
* Be more explizit about not using a development ca in production
   for the server.
 2022-02-16 09:31:16 +01:00
Sascha L. Teichmann
81fa044bf0 Made auth middleware more readable. 2022-02-15 20:55:19 +01:00
Bernhard Reiter
dbf52223e9
Fix code format in cmd/csaf_provider/controller.go 2022-02-15 18:26:11 +01:00
Bernhard Reiter
f20a9e2da6
Merge branch 'client-certificate' of github.com:csaf-poc/csaf_distribution into client-certificate 2022-02-15 18:21:41 +01:00
Bernhard Reiter
2905a30cc0
Improve tls client cert handling 
* Improve nginx setup to transfer auth information to the fcgiwrap
 backend.
 * Add instructions for creating client certs for testing.
 * Add debug output to see if and which client cert has been used when
   calling the csaf_provider.go .
 2022-02-15 18:20:24 +01:00
Bernhard Reiter
a71f490999
Merge branch 'main' into client-certificate 2022-02-15 10:01:18 +01:00
Bernhard Reiter
ae776306e2
Fix typo 2022-02-14 16:38:40 +01:00
Bernhard Reiter
ef402259a1
Improve client cert setup 
* remove cert creation, as it will be described in a different
   file.
 2022-02-14 13:24:22 +01:00
Bernhard E. Reiter
069ea10968
Merge branch 'main' into dev-docs-development-ca 2022-02-14 13:12:58 +01:00
Bernhard Reiter
64ff01c237
Merge branch 'main' into dev-docs-development-ca 2022-02-14 13:11:15 +01:00
Bernhard Reiter
ed82234305
Add docs to run a development ca with gnuls 2022-02-14 13:04:10 +01:00
Fadi Abbud
6a106640c6
Improve docs: add instructions to install TLS cert for nginx 
* Add instructions for installing a TLS server certificate on nginx 
 * Fix link to nginx in README.md
 * List all three ways to get a webserver TLS certificate. With some
   hints on which to chose for which purpose.
 * Do not add CSR instructions, because they can change over time and each CA may
   have slightly different requirements.
 * Add a hint about setting protocol selection.
 * Fix typo in provider-setup.md
 2022-02-14 12:39:40 +01:00
Bernhard Reiter
122cfb4757
Improve install-server-certificate.md 
* Add technical hint about ERR_SSL_KEY_USAGE_INCOMPATIBLE.
 * Improve format and spelling.
 * Remove OSCP hint as this is related to client certificates.
 2022-02-14 10:45:02 +01:00
Bernhard Reiter
d3f99189b5
Rework docs/install-server-certificate.md 
* List all three ways to get a webserver TLS certificate. With some
   hints on which to chose for which purpose.
 * Refer to the official nginx documentation and remove some of the
   instructions, because they can change over time and each CA may
   have slightly different requirements.
 * Add a hint about setting protocol selection.
 2022-02-11 17:42:24 +01:00
Bernhard Reiter
a39c8669d9
Fix typo in provider-setup.md 2022-02-11 15:36:08 +01:00
Bernhard E. Reiter
8b1185234d
Merge pull request #54 from csaf-poc/Typo-in-README 
(minor) Typo
 2022-02-11 15:35:04 +01:00
Bernhard Reiter
595411d11d
Fix link to nginx in README 2022-02-10 16:49:15 +01:00
Fadi Abbud
078ccdbd69 Fix Typo 2022-02-09 16:30:32 +01:00
Fadi Abbud
e259a5878b (minor) Typo 2022-02-09 16:22:31 +01:00
Fadi Abbud
566e4260df
Add License header to Makefile and adjust the README (#53) 
* Add License header to Makefile and adjust the README
 2022-02-09 15:52:05 +01:00
Fadi Abbud
4565096870
Merge pull request #52 from csaf-poc/dev-simplify-makefile 
Improve Makefile
 2022-02-09 09:15:05 +01:00
Bernhard Reiter
65605b2928
Improve Makefile 
* Change mechanics to use a variable to indicate if a tag build is
   wanted. Add ability to specify tag explictely.
 * Use variables to have only one build recipe.
 * Place binaries in target specific bin- directories.
 * Do not return to main branch as it may not be the original branch we
   were on. Turn this into a warning.
 2022-02-08 17:31:49 +01:00
Sascha L. Teichmann
b894950b63 Load location of provider-metadata.json from security.txt 2022-02-07 20:12:32 +01:00
Sascha L. Teichmann
27f1aa5461 Started with loading provider-metadata.json from a list of possible locations. 2022-02-07 17:37:01 +01:00
Fadi Abbud
c43d690b57 Fix Typo 2022-02-07 13:23:09 +01:00
Fadi Abbud
e8cbab2c29 Add some documentation (controller) 2022-02-07 13:00:28 +01:00
Fadi Abbud
b872f28acd Add some code documentation 2022-02-03 15:18:40 +01:00
Sascha L. Teichmann
b0bf18ccdc
Merge pull request #50 from csaf-poc/typo_in_makefile 
Replace "binaries" with "bin" in comments and one target
 2022-02-03 13:15:37 +01:00
Fadi Abbud
221d7269ec Replace "binaries" with "bin" in comments and one target 2022-02-03 12:27:13 +01:00
Fadi Abbud
be8a210c5e Fix the link in README file 2022-02-02 15:28:06 +01:00
Fadi Abbud
05f35a76af Instruction for installing TLS server certificate on nginx 2022-02-02 15:19:25 +01:00
Sascha L. Teichmann
1d8b4c4c5a
Merge pull request #30 from csaf-poc/makefile-for-build 
Add Makefile for building go components
 2022-02-02 11:56:21 +01:00
Sascha L. Teichmann
9680a220be Rename binaries folder to bin. 2022-02-02 11:20:51 +01:00
Fadi Abbud
d7250c7b66
Merge pull request #45 from csaf-poc/fix-37 
Fixed issue #37
 2022-01-31 15:36:38 +01:00
Sascha L. Teichmann
0760901d6e Fixed issue #37 2022-01-31 14:17:35 +01:00