1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 05:40:11 +01:00
Commit graph

287 commits

Author SHA1 Message Date
Bernhard Reiter
d8d6eb3f43
Improve Makefile for release version numbers
* Improve the pattern to leave tagged release version numbers like
   `0.2.2-alpha` alone and only increase version numbers where
   git describe has added a string starting with a number.
2022-05-11 10:42:39 +02:00
Bernhard Reiter
4d7538db41
Change action for release to use Makefile
* Remove matrix strategy and single go release actions.
 * Update go setup action to use latest version.
 * Use action to upload both distribution archives created by make.
2022-05-11 10:35:59 +02:00
Sascha L. Teichmann
8a1ebe0b7a
Add aggregator; improve itest workflow
* Factor JSON evaluation and  construction base URLs out of of checker.
* Move json path matching to util.
* Add csaf_aggregator (as additional command)
* Improve itest workflow to checkout the branch where it is running on.

resolve #105
resolve  #72

Co-authored-by: tschmidtb51 <65305130+tschmidtb51@users.noreply.github.com>
Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
Co-authored-by: Fadi Abbud <fadi.abbud@intevation.de>
2022-05-10 18:12:38 +02:00
Bernhard Reiter
9da0589236
Improve uploader exit code
* Fix returning the error if https upload has failed.
2022-05-10 17:58:39 +02:00
Sascha L. Teichmann
1a93aba71b
Merge pull request #125 from csaf-poc/dev-return-value-on-failed-upload
Improve exit code for failed upload
2022-05-10 16:56:10 +02:00
Sascha L. Teichmann
de872893f1 simplified code 2022-05-10 16:54:58 +02:00
Bernhard Reiter
046e96cfec
Improve exit code for failed upload
* Add an exit code if an upload failed, but also print all the messages
   as before.
2022-05-10 16:46:32 +02:00
Sascha L. Teichmann
d6c0fa3518 Make extraction of fields optional 2022-05-10 16:38:34 +02:00
Sascha L. Teichmann
41e4029b0d
Impove Jsonpath matcher
* Simplifed mass jsonpath extractions json document
2022-05-04 16:56:41 +02:00
Sascha L. Teichmann
de4f50787d
Merge pull request #122 from csaf-poc/checker-more-implementation
Checker more implementation
2022-05-04 15:49:19 +02:00
Fadi Abbud
72e6df2987 Rename some variables 2022-05-04 15:39:22 +02:00
Fadi Abbud
a69d35ab3c Add code documentation 2022-05-04 15:31:26 +02:00
Fadi Abbud
ea9c6b4502 Implement more tests for checker
* Implement testing if the provider-metadata.json is under
/.well-known/csaf/ available.
* Implement testing if the DNS is available and serves the
provider-metadata.json
2022-05-04 15:23:03 +02:00
Bernhard Reiter
e1f71a5693
Declare status alpha. 2022-04-29 12:28:58 +02:00
Sascha L. Teichmann
5a22e1d392
Merge pull request #119 from csaf-poc/dev-add-make-dist
Add dist Makefile target

Seems to work.
2022-04-29 11:56:18 +02:00
Fadi Abbud
9de1bdd4a7
Merge pull request #118 from csaf-poc/provider-listed-mirrorred2
For issue #83
2022-04-29 11:44:42 +02:00
Bernhard Reiter
b08eb94fdb
Add dist Makefile target
* Using a simple combined recipe to create to dist directories for
  a release archive with all docs.
2022-04-29 11:42:10 +02:00
Sascha L. Teichmann
06c995c030 For issue #83 2022-04-29 08:52:39 +02:00
Fadi Abbud
8bf48a2de2
Adjust provider for new CSAF CSD02 schema
* Replace "pgp_keys" with "public_openpgp_key" in the provider-metadata.json.

resolve #112
2022-04-28 20:46:37 +02:00
Fadi Abbud
13cd14738b
Add github action for integration test
* Add sudo to some commands for the github action.
* Change paths to also work within a github action.
2022-04-28 15:06:45 +02:00
Sascha L. Teichmann
dad549c392
Move code from checker to library 2022-04-28 13:47:35 +02:00
Sascha L. Teichmann
c8b53a8143
provider/create: Update existing security.txt
* When creating a new provider setup, update the security.txt if it already exists.
   Put the csaf line on the top, so it may be prefered.

resolve #35
2022-04-22 17:57:58 +02:00
Sascha L. Teichmann
3df91fa051
Type messages of a checker topic to avoid code duplication 2022-04-22 12:02:21 +02:00
Bernhard Reiter
880122315d
Correct minor typo in check output message 2022-04-21 17:16:18 +02:00
Sascha L. Teichmann
da7add89d6
Merge pull request #109 from csaf-poc/dev-improve-report-when-stopping
Add message to explain a stopped check

LGTM
2022-04-21 16:47:28 +02:00
Sascha L. Teichmann
05efc82bec
Improve scripts/prepareUbuntuInstanceForITests.sh
* Add code to fetch the lastest Go binary version.
2022-04-21 16:39:56 +02:00
Bernhard Reiter
de738d2c56
Add message to explain a stopped check
* In case of errStop, add a message to show which check aborted the
   others.
2022-04-21 16:26:11 +02:00
Bernhard Reiter
dd48fc8b6c
Fix minor typo in code comment 2022-04-21 16:16:01 +02:00
Fadi Abbud
3d022bba7b Add itest.yml action
* This file does not contain the complete code. Its added to allow the
    "Actions" to see this action, which  will be changed in another branch.
2022-04-21 16:03:57 +02:00
Bernhard Reiter
cbb41588ea
Fix minor typos in code comments 2022-04-21 15:40:56 +02:00
Fadi Abbud
fb61bc349f
Merge pull request #104 from csaf-poc/dev-improve-itest-2
Improve integration test uploadToProvider.sh
2022-04-14 08:17:14 +02:00
Bernhard Reiter
d82be5c69e
Improve client cert setup instructions
* Add hint that the used client certification is logged by default
   when accessing the upload interface of the provider.

resolve #99
2022-04-13 17:59:16 +02:00
Bernhard Reiter
3da37a533b
Improve integration test uploadToProvider.sh
* Remove `let` from the script as it will return 1 (signalling an error) on the
   first iteration, which will stop the script when in `set -e` mode.
   It also is unnecessary, as the increment can be done at the place of
   usage directly.
 * Added a "remainder aka modulo" division, otherwise there will be no
   TLP option set, once we run out of the four entries in the TLSs
   list.
 * (Style) remove superfluous semicolons.
2022-04-13 17:46:10 +02:00
Sascha L. Teichmann
2fbe0fed7e Fixed util/file.go 2022-04-13 16:14:02 +02:00
Sascha L. Teichmann
f4f96c9dae Moved SemVersion to separate file. 2022-04-13 16:12:35 +02:00
Sascha L. Teichmann
c4fa11d886
Merge pull request #98 from tschmidtb51/csd02-strict
CSD02 Schema update ... LGTM
2022-04-13 15:26:50 +02:00
Bernhard Reiter
9af0471087
Add packages to prepareUbuntuInstanceForITests.sh 2022-04-13 14:32:18 +02:00
Fadi Abbud
6fe6907c1d
Add --version option
* Add flag to display the version for each binary. It is based on `git describe` but adds
  a number to the PATCH level if we are between annotated tags, so makes it semver.org
 compatible. Use the "-ldflags" method that also works with go 1.17.
* Use Makefile bash and sed magic to do PATCH level increase if needed.

Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-04-13 14:27:11 +02:00
Fadi Abbud
de9c2b9663
Merge pull request #96 from csaf-poc/dev-improve-client-certs
Improve log output when using client certificates with provider
2022-04-13 14:15:30 +02:00
Bernhard Reiter
f04473874a
Improve client cert setup instructions
* Rephrase slightly and add hint that the issuer config
   will be checked against the `$ssl_client_i_dn` variable, so the
   example serves both uses.

resolve #46
2022-04-13 11:53:21 +02:00
bernhardreiter bernhardreiter@users.noreply.github.com
8711ea67fe Apply automatic changes 2022-04-12 14:06:26 +00:00
Fadi Abbud
e8166121c7
Improve nginx example config
* Make files more readable: Move ";" from variable and add it into the nginx config file.
* Add missing nginx option `disable_symlinks off;` to the tlp paths.
2022-04-12 16:05:45 +02:00
tschmidtb51
11ed0e8f4d CSD02 Schema update
- resolves csaf-poc/csaf_distribution#97
- add strict schemas from OASIS repo
2022-04-08 18:23:14 +02:00
Bernhard Reiter
96f4d57b76
Merge branch 'main' into dev-improve-client-certs 2022-04-08 10:06:12 +02:00
Fadi Abbud
9bbe3e1eb8
Add scripts for integration test setup and docs generation
* Add an OpenPGP test keypair.
 * Move script parts of documentation into script, so they can be used on a fresh Ubuntu 20.04 system
   for within a github action to setup a csaf_provider and upload documents to it for an integration test.
 * Use dineshsonachalam/markdown-autodocs in github action to automatically
   insert lines from the scripts into the docs.

Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-04-08 10:04:34 +02:00
tschmidtb51
f0359d982d
Correct double line in provider-setup.md 2022-04-07 18:20:21 +02:00
Fadi Abbud
530a02742e
Go binaries for Github releases (#86)
* Add github action to automate publishing Go binaries for Github
releases.
2022-04-06 15:52:04 +02:00
Fadi Abbud
a91d36cc95
Add options to use TLS client certificate for authentication (Checker)
* Add "client-cert" and "client-key" flag options to allow the checker to use TLS client certificate for authentication.
* Fix typo TSL -> TLS in docs.


Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-03-31 17:57:43 +02:00
Fadi Abbud
b9603b7742
Add options to use TLS client certificate for authentication (Uploader)
* Add "client-cert" and "client-key" flag options to allow the uploader to use
TLS client certificate for authentication with the provider.

Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-03-31 15:57:00 +02:00
Bernhard Reiter
21eb768a05
Improve providers handlung of tls client certs
* Change logging logic to print out the Issuer when a certificate
   was presented.
2022-03-31 12:00:13 +02:00