 Vitaliy Filippov
|
b21c92cb7a
|
Implement OSD-side authorization for operations
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
9db0980fc1
|
Remove tls_ from option names
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
4a8ee088c1
|
Remove TLS support (superseded by direct GCM)
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
f2585bcd02
|
Implement TLS 1.3-like handshake manually
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
72d1447eec
|
Extract openssl-related code, wire ssl implementation back
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
c67db91305
|
Coalesce entries in send_out_buf
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
75dfafa0cf
|
Support isa-l_crypto for AES-XTS too
|
2026-05-19 17:19:47 +03:00 |
|
|
Vitaliy Filippov
|
b1d9098904
|
Fix xts+rdma encrypt errors
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
f676d262ec
|
Fix "use-after-realloc" warning
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
954505b5fd
|
Support isa-l_crypto for AES-GCM
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
c137860f18
|
Remove WITH_OPENSSL from all files except http_client, always require OpenSSL
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
f45fb987d1
|
Use pools for GCM contexts
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
8da99ee24a
|
Implement direct AES-256-GCM with a static key for benchmark
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
3c3a58aa1e
|
Make sure to send all TLS data before continuing
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
40d4162249
|
Parse standard TLS record headers
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
026aaf59e7
|
Omit msgr_tls_record_hdr_t for non-tls data
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
cb40ab3dfd
|
Allow 2 and 4 byte per block chain_info (allow more than 255 snapshots with encryption)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
459a412f91
|
Implement OSD TLS support
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
2b52769d64
|
Allow to skip checksums for headers
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
ff83e12b79
|
Implement protocol-level checksums (xxhash3)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
4340b2b7bc
|
Include xxhash3 x86dispatch
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
6be0be02fa
|
Do not use scrap_buffer in the client (it would block protocol checksum support)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
a31a1c0ab1
|
Support TLS CN authentication and per-image permissions in vitastor-cli serve
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
b367c81f44
|
Implement vitastor-cli ls-user, modify-user, remove-user commands
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
197ef6c171
|
Add image owner/owner_group/reader_group support (for antietcd VitastorAuthFilter)
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
360ccbaa4d
|
Support inline (string PEM) certificates and pkeys
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
d960816a9b
|
Show encryption keys (only IDs) in the listing
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
3dabffb1be
|
Support storing image encryption keys in Vault
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
5ba63a2fa5
|
Prefer local etcd addresses and correctly cycle over them even when they need resolving
Seems slightly overcomplicated...
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
26be916e3f
|
Support DNS resolving via libc-ares
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
eb1dbd7459
|
Batch handle_immediate_ops more
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
13842ecd90
|
Add vitastor-cli create & modify --enc-key parameter
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
27e2c08e38
|
Support reading from snapshots encrypted with different keys
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
f9975311ea
|
Support decryption with multiple keys
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
652ca3f1c3
|
Allow to return chain_info in response to reads
|
2026-05-19 17:19:35 +03:00 |
|
|
Vitaliy Filippov
|
c81cbcf69e
|
Add basic AES-XTS client-side encryption support
|
2026-05-19 17:19:34 +03:00 |
|
|
Vitaliy Filippov
|
9e28c4c6e3
|
Rework msgr send/receive to allow encryption support
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
e14be3fdad
|
Move fromhexstr() to str_util
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
2e5d9cb238
|
Add openapi description
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
376226552a
|
Slightly fix API return and input types
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
6bdd260b50
|
Implement vitastor-cli serve command to serve simple HTTP API
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
b72cfbad66
|
Implement HTTP server support O_o
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
792efa673e
|
Rename http_response_t to http_message_t
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
f3c5c3b776
|
Extract common HTTP context
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
5e26376f1f
|
Support xxhash 32-bit checksums (data_csum_type=xxh3_32)
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
55047c10fb
|
Detect block checksums using csum_block_size, not data_csum_type
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
e13edcdc2f
|
Add client certificate support
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
aaf54f264d
|
Do not re-initialize TLS context every connection
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
af34be70ab
|
Implement etcd SSL support via OpenSSL
Maybe I should remove all of this and use libwebsockets :)
|
2026-05-19 17:19:16 +03:00 |
|
|
Vitaliy Filippov
|
00517e2bac
|
Fix header checksum after new store write-meta
|
2026-05-19 12:30:21 +03:00 |
|