 Vitaliy Filippov
|
5c0bf7c293
|
Add detailed security feature documentation
|
2026-07-08 01:02:30 +03:00 |
|
|
Vitaliy Filippov
|
2e03568225
|
Implement vitastor-cli cpubench for AES and xxhash3 benchmarks
|
2026-07-08 00:19:55 +03:00 |
|
|
Vitaliy Filippov
|
7dabef4851
|
Add security parameter documentation
|
2026-07-05 18:51:26 +03:00 |
|
|
Vitaliy Filippov
|
29c3841eaa
|
Allow to make-etcd --antietcd-only
|
2026-07-05 18:51:23 +03:00 |
|
|
Vitaliy Filippov
|
45204da444
|
Rename server_cert to api_cert
|
2026-07-05 15:44:59 +03:00 |
|
|
Vitaliy Filippov
|
c18ddbf255
|
Remove antietcd_ca parameter from mon/antietcd_adapter - it is client_ca
|
2026-07-05 15:36:20 +03:00 |
|
|
Vitaliy Filippov
|
76410df0e8
|
Do not require explicit peer_ca for antietcd
|
2026-07-05 15:19:03 +03:00 |
|
|
Vitaliy Filippov
|
6a0f3a38d0
|
Do not enable use_perms by default - make it more explicit for users
|
2026-07-05 15:19:03 +03:00 |
|
|
Vitaliy Filippov
|
265e99ccd0
|
Support TLS certificate generation in make-etcd
|
2026-07-05 15:19:03 +03:00 |
|
|
Vitaliy Filippov
|
aa71a1968f
|
Rename use_auth to use_perms
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
5382f1c7bb
|
Fix use_auth usage
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
a5dbf74123
|
Add support for full AES-GCM including double encryption of AES-XTS :D
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
784fd7d233
|
Also allow clients to load /inode/stats/ for their inodes
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
13b7c0e73d
|
Load all /config/
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
d747ec8c41
|
Fix modify owner/groups
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
cabe5d1543
|
Skip non-existing pools
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
38da624930
|
Use osd & mon certs instead of usernames
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
e0ff8a014f
|
Remove mon and osd user types
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
8721f21874
|
Also check for "Received garbage" during test
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
9eb858fb5f
|
Add a CI test with RDMA
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
9f084f48f6
|
Add request size validation to prevent OOMDoS
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
c998325448
|
Implement OSD-side authorization for operations
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
a243ff6459
|
Remove tls_ from option names
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
47b3294666
|
Remove TLS support (superseded by direct GCM)
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
3afed2473e
|
Implement TLS 1.3-like handshake manually
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
fdeacdcf30
|
Extract openssl-related code, wire ssl implementation back
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
d7ddd7752c
|
Coalesce entries in send_out_buf
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
2b2c7d5e39
|
Support isa-l_crypto for AES-XTS too
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
e26478c2e7
|
Fix xts+rdma encrypt errors
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
c7b9d30fd3
|
Fix "use-after-realloc" warning
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
5803655840
|
Support isa-l_crypto for AES-GCM
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
61ce26ba29
|
Remove WITH_OPENSSL from all files except http_client, always require OpenSSL
|
2026-07-05 14:58:24 +03:00 |
|
|
Vitaliy Filippov
|
32e651ec96
|
Use pools for GCM contexts
|
2026-07-05 14:58:23 +03:00 |
|
|
Vitaliy Filippov
|
dbed0e94cb
|
Try to run tests with AES-GCM
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
8b39a268b9
|
Implement direct AES-256-GCM with a static key for benchmark
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
d40ba7c5ce
|
Make sure to send all TLS data before continuing
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
985257f2d7
|
Parse standard TLS record headers
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
a4f3383f21
|
Omit msgr_tls_record_hdr_t for non-tls data
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
b2d828ec84
|
Allow 2 and 4 byte per block chain_info (allow more than 255 snapshots with encryption)
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
b2a74de715
|
Implement OSD TLS support
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
430761ad2e
|
Allow to skip checksums for headers
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
38a1f6937d
|
Implement protocol-level checksums (xxhash3)
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
8b46914999
|
Include xxhash3 x86dispatch
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
1b81e60187
|
Do not use scrap_buffer in the client (it would block protocol checksum support)
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
526c597cd0
|
Support TLS CN authentication and per-image permissions in vitastor-cli serve
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
7a97783ead
|
Add VitastorAuthFilter
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
b4425d8e65
|
Implement vitastor-cli ls-user, modify-user, remove-user commands
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
1afda35bd3
|
Add image owner/owner_group/reader_group support (for antietcd VitastorAuthFilter)
|
2026-07-05 14:58:09 +03:00 |
|
|
Vitaliy Filippov
|
0953f5ebdd
|
Support inline (string PEM) certificates and pkeys
|
2026-07-05 14:10:11 +03:00 |
|
|
Vitaliy Filippov
|
1b03615e50
|
Show encryption keys (only IDs) in the listing
|
2026-07-05 14:10:11 +03:00 |
|