Alex lx
lx created pull request Deuxfleurs/garage#740 2024-02-29 15:31:20 +00:00
Security: backport #737 to the v0.8.x branch
lx created branch backport-737-0.8.x in Deuxfleurs/garage 2024-02-29 15:30:56 +00:00
lx pushed to backport-737-0.8.x at Deuxfleurs/garage 2024-02-29 15:30:56 +00:00
c4db26a941 [fix-auth-ct-eq] use consant time comparison for awsv4 signature verification
b1ed653a1d [fix-auth-ct-eq] use argon2 hashing and verification for admin/metrics token checking
Compare 2 commits »
lx pushed to main at Deuxfleurs/nixcfg 2024-02-29 15:19:31 +00:00
71e959ee79 prod: update to garage 0.9.2-rc1
lx pushed to main at Deuxfleurs/nixcfg 2024-02-29 14:32:30 +00:00
ae632bfecf staging: deploy garage v0.9.2-rc1
lx pushed tag v0.9.2-rc1 to Deuxfleurs/garage 2024-02-29 14:05:33 +00:00
lx deleted branch fix-auth-ct-eq from Deuxfleurs/garage 2024-02-29 14:04:40 +00:00
lx pushed to main at Deuxfleurs/garage 2024-02-29 14:04:40 +00:00
b8c7a560ef Merge pull request 'Fix potential timing side-channels in authentication mechanisms' (#737) from fix-auth-ct-eq into main
6d33e721c4 [fix-auth-ct-eq] use consant time comparison for awsv4 signature verification
eaac4924ef [fix-auth-ct-eq] use argon2 hashing and verification for admin/metrics token checking
Compare 3 commits »
lx merged pull request Deuxfleurs/garage#737 2024-02-29 14:04:39 +00:00
Fix potential timing side-channels in authentication mechanisms
lx pushed to sse-c at Deuxfleurs/garage 2024-02-29 13:59:54 +00:00
10b8840aaf [sse-c] remove sse-c multipart test from test-smoke
lx pushed to sse-c at Deuxfleurs/garage 2024-02-29 13:57:41 +00:00
14e7512a49 [sse-c] add encrypted multipart upload test
lx pushed to sse-c at Deuxfleurs/garage 2024-02-29 13:23:21 +00:00
fc92ae5694 [sse-c] aws s3 cp test with sse-c, move put/get/copyobject tests to rust
lx deleted branch sse-c2 from Deuxfleurs/garage 2024-02-29 12:21:11 +00:00
lx deleted branch doc-default-token from Deuxfleurs/garage 2024-02-29 12:20:26 +00:00
lx pushed to main at Deuxfleurs/garage 2024-02-29 12:20:26 +00:00
d3cf560e5c Merge pull request 'Docs: add default metrics_token in quick start + uniformize use of base64' (#739) from doc-default-token into main
73b11eb17c [doc-default-token] add default metrics_token in quick start + uniformize use of base64
Compare 2 commits »
lx merged pull request Deuxfleurs/garage#739 2024-02-29 12:20:25 +00:00
Docs: add default metrics_token in quick start + uniformize use of base64
lx created pull request Deuxfleurs/garage#739 2024-02-29 12:18:30 +00:00
Docs: add default metrics_token in quick start + uniformize use of base64
lx created branch doc-default-token in Deuxfleurs/garage 2024-02-29 12:18:15 +00:00
lx pushed to doc-default-token at Deuxfleurs/garage 2024-02-29 12:18:15 +00:00
73b11eb17c [doc-default-token] add default metrics_token in quick start + uniformize use of base64
lx pushed to fix-auth-ct-eq at Deuxfleurs/garage 2024-02-29 12:07:25 +00:00
6d33e721c4 [fix-auth-ct-eq] use consant time comparison for awsv4 signature verification
eaac4924ef [fix-auth-ct-eq] use argon2 hashing and verification for admin/metrics token checking
Compare 2 commits »