 Vitaliy Filippov
|
c6af10a444
|
WIP Support TLS certificate generation in make-etcd
|
2026-05-19 17:20:30 +03:00 |
|
|
Vitaliy Filippov
|
bc24936969
|
Fix use_auth usage
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
b6c854c860
|
Add support for full AES-GCM including double encryption of AES-XTS :D
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
0ce6a61fcb
|
Also allow clients to load /inode/stats/ for their inodes
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
4498d0665a
|
Load all /config/
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
55cce76d36
|
Fix modify owner/groups
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
70c0cd2d5f
|
Skip non-existing pools
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
455dc9cb1c
|
Fix ipv6 support in antietcd_adapter
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
9243aed615
|
Use osd & mon certs instead of usernames
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
3dd0e4daca
|
Remove mon and osd user types
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
3779e2670d
|
Also check for "Received garbage" during test
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
0d92e00e41
|
Add a CI test with RDMA
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
0d1eeb4310
|
Add request size validation to prevent OOMDoS
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
b21c92cb7a
|
Implement OSD-side authorization for operations
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
9db0980fc1
|
Remove tls_ from option names
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
4a8ee088c1
|
Remove TLS support (superseded by direct GCM)
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
f2585bcd02
|
Implement TLS 1.3-like handshake manually
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
72d1447eec
|
Extract openssl-related code, wire ssl implementation back
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
c67db91305
|
Coalesce entries in send_out_buf
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
75dfafa0cf
|
Support isa-l_crypto for AES-XTS too
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
b1d9098904
|
Fix xts+rdma encrypt errors
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
f676d262ec
|
Fix "use-after-realloc" warning
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
954505b5fd
|
Support isa-l_crypto for AES-GCM
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
c137860f18
|
Remove WITH_OPENSSL from all files except http_client, always require OpenSSL
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
f45fb987d1
|
Use pools for GCM contexts
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
d744bd43ae
|
Try to run tests with AES-GCM
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
8da99ee24a
|
Implement direct AES-256-GCM with a static key for benchmark
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
3c3a58aa1e
|
Make sure to send all TLS data before continuing
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
40d4162249
|
Parse standard TLS record headers
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
026aaf59e7
|
Omit msgr_tls_record_hdr_t for non-tls data
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
cb40ab3dfd
|
Allow 2 and 4 byte per block chain_info (allow more than 255 snapshots with encryption)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
459a412f91
|
Implement OSD TLS support
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
2b52769d64
|
Allow to skip checksums for headers
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
ff83e12b79
|
Implement protocol-level checksums (xxhash3)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
4340b2b7bc
|
Include xxhash3 x86dispatch
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
6be0be02fa
|
Do not use scrap_buffer in the client (it would block protocol checksum support)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
a31a1c0ab1
|
Support TLS CN authentication and per-image permissions in vitastor-cli serve
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
1c18daa644
|
Add VitastorAuthFilter
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
b367c81f44
|
Implement vitastor-cli ls-user, modify-user, remove-user commands
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
197ef6c171
|
Add image owner/owner_group/reader_group support (for antietcd VitastorAuthFilter)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
4a907f09df
|
Add security parameter documentation
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
360ccbaa4d
|
Support inline (string PEM) certificates and pkeys
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
d960816a9b
|
Show encryption keys (only IDs) in the listing
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
3dabffb1be
|
Support storing image encryption keys in Vault
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
5ba63a2fa5
|
Prefer local etcd addresses and correctly cycle over them even when they need resolving
Seems slightly overcomplicated...
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
26be916e3f
|
Support DNS resolving via libc-ares
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
eb1dbd7459
|
Batch handle_immediate_ops more
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
13842ecd90
|
Add vitastor-cli create & modify --enc-key parameter
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
27e2c08e38
|
Support reading from snapshots encrypted with different keys
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
f9975311ea
|
Support decryption with multiple keys
|
2026-05-19 17:19:35 +03:00 |
|