Commit Graph

611 Commits

Author SHA1 Message Date
7c3166e9be Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring. 2021-09-20 18:26:49 -04:00
a20a290836 ifdef this out 2021-09-15 15:27:29 -07:00
83265768c1 ensure count > 0 2021-09-15 09:45:10 -07:00
c3a42bf590 remove heartbeat log 2021-09-02 16:46:42 -07:00
8b95afa96a logging 2021-09-02 16:32:40 -07:00
6a49a766ca logging 2021-09-02 16:22:59 -07:00
16ff14bda7 identify controller in pool stats 2021-09-02 13:48:08 -07:00
57c1d96b71 math 2021-09-02 12:48:49 -07:00
40f376e2b9 print db pool stats periodically 2021-09-02 12:45:26 -07:00
dc61f78916 set psql application_name in startup script 2021-09-02 11:24:07 -07:00
a2ffe8c05e dont generate nonce for deleted members 2021-09-02 11:24:04 -07:00
d0f4cfe6b4 print load status messages a little less often now that things go brrrrrrrrr 2021-08-20 10:34:00 -07:00
3ec23f92ec helps to add part of the query 2021-08-20 10:30:37 -07:00
6baac1b4e0 more query optimizations 2021-08-20 10:27:45 -07:00
50b0b2e2e9 query optimization 2021-08-19 17:55:30 -07:00
20721491e8 kill some noisy logs 2021-08-19 13:03:56 -07:00
eec46a137e optimize data loading from psql on startup 2021-08-19 12:44:02 -07:00
9eae444104 kill some verbose logs 2021-08-19 09:21:52 -07:00
576b4f03a5 Adjust deauth time window and send revocation when SSO members expire. 2021-08-18 12:17:40 -04:00
461810b06a Move return so record gets created before URL. 2021-08-10 11:22:29 -04:00
613d7b5ece fix backwards logic 2021-08-04 09:16:04 -07:00
c101d71d7c Tweak auth timeout notify. 2021-07-30 18:44:34 -04:00
663e748b8d Deauth expiring members right away. 2021-07-26 23:45:18 -04:00
0cf62d334d Remove pointless check. 2021-07-26 13:38:35 -04:00
0872012cd9 small fix 2021-07-26 13:11:01 -04:00
c2d8fe46d5 About ready to test notify of SSO timeout... 2021-07-23 19:20:10 -04:00
0310bfa3e3 Include authentication URL in config 2021-07-23 19:17:42 -04:00
efe0e8aa7b Notification of about-to-expire status... almost there. 2021-07-23 19:05:59 -04:00
5c7e51feaf Merge branch 'dev' of github.com:zerotier/ZeroTierOne into dev 2021-07-23 18:49:05 -04:00
34de579c91 Handling of soon-to-expire members 2021-07-23 18:49:00 -04:00
73ddea8864 use network ID, not controller ID for looking up network data 2021-07-06 14:15:01 -07:00
10215af96d whoops 2021-07-06 13:18:08 -07:00
e67fee0264 debug logging 2021-07-06 13:08:21 -07:00
5ece4f734a fix error message 2021-07-06 13:08:16 -07:00
f8ea7fdc2b Fix for GitHub #859
Wrong DB::get() method being called to look up the network member for deletes
2021-06-24 10:32:21 -07:00
364ad87e2b add ssoEnabled flag to network config 2021-06-05 13:44:45 -07:00
9380ef708a debug strings & query fixes 2021-06-05 13:44:07 -07:00
fd174b3459 fix auth time lookup 2021-06-04 20:55:22 -07:00
21d27c314c HMACSHA384 the nonce bytes, not the hex encoded nonce bytes 2021-06-04 20:06:04 -07:00
0b89a49201 typo 2021-06-04 16:56:28 -07:00
e6b4fb5af7 add "ssoRedirectURL" to local.conf
plumbed it through to the central controller code
2021-06-04 16:29:03 -07:00
c227330d09 fix redirect_uri substitution 2021-06-04 15:58:38 -07:00
b16f40c0de . 2021-06-04 15:18:18 -07:00
fd85f87ade handle null in result set 2021-06-04 15:15:42 -07:00
add33f1ab3 cast to bigint in query 2021-06-04 14:48:41 -07:00
3bfc438ae8 null handling 2021-06-04 14:40:14 -07:00
1dfe909bab Increase authentication URL sizes. 2021-06-04 16:46:56 -04:00
75d17ea3c8 Helps to commit when trying to write a change to the db 2021-06-04 13:20:03 -07:00
96d15337bb default 0 2021-06-04 13:19:39 -07:00
74a678c1e1 chicken or egg problem.
member must exist in the database before we can generate a nonce & SSO URL
2021-06-04 12:49:26 -07:00