Commit Graph
2692 Commits
Author SHA1 Message Date
Vitaliy Filippov b3f53dfe92 Fix xts+rdma encrypt errors 2026-04-19 23:44:04 +00:00
Vitaliy Filippov 3ded073790 Fix "use-after-realloc" warning 2026-04-19 23:23:23 +00:00
Vitaliy Filippov 337e097000 Support isa-l_crypto for AES-GCM 2026-04-19 20:01:05 +03:00
Vitaliy Filippov b9a5e6b7e8 Remove WITH_OPENSSL from all files except http_client, always require OpenSSL 2026-04-19 19:14:54 +03:00
Vitaliy Filippov bf0e648d70 Use pools for GCM contexts 2026-04-19 17:01:21 +03:00
Vitaliy Filippov 35e7bc8aeb Try to run tests with AES-GCM 2026-04-18 20:41:49 +03:00
Vitaliy Filippov 9a5fabddb4 Implement direct AES-256-GCM with a static key for benchmark 2026-04-18 20:41:49 +03:00
Vitaliy Filippov 088e85a423 Make sure to send all TLS data before continuing 2026-04-18 14:22:42 +03:00
Vitaliy Filippov 43f1d58f29 Parse standard TLS record headers 2026-04-17 21:22:47 +03:00
Vitaliy Filippov a6b29a01a2 Omit msgr_tls_record_hdr_t for non-tls data 2026-04-17 21:22:47 +03:00
Vitaliy Filippov 5d65d87dfb Allow 2 and 4 byte per block chain_info (allow more than 255 snapshots with encryption) 2026-04-17 21:22:47 +03:00
Vitaliy Filippov ddf28feaf8 Implement OSD TLS support 2026-04-17 21:22:47 +03:00
Vitaliy Filippov a57049be63 Allow to skip checksums for headers 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 7f53e315c5 Implement protocol-level checksums (xxhash3) 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 48756520dd Include xxhash3 x86dispatch 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 4f23b242f3 Do not use scrap_buffer in the client (it would block protocol checksum support) 2026-04-17 13:53:41 +03:00
Vitaliy Filippov c371b74e12 Support TLS CN authentication and per-image permissions in vitastor-cli serve 2026-04-17 13:53:41 +03:00
Vitaliy Filippov c014d20fca Add VitastorAuthFilter 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 9b2480d552 Implement vitastor-cli ls-user, modify-user, remove-user commands 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 1ae10c21ca Add image owner/owner_group/reader_group support (for antietcd VitastorAuthFilter) 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4698009b59 Add security parameter documentation 2026-04-17 13:53:40 +03:00
Vitaliy Filippov d0e0b70f81 Support inline (string PEM) certificates and pkeys 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 914f42da5c Show encryption keys (only IDs) in the listing 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 273b641820 Support storing image encryption keys in Vault 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4f9de7a6fb Prefer local etcd addresses and correctly cycle over them even when they need resolving
Seems slightly overcomplicated...
2026-04-17 13:53:40 +03:00
Vitaliy Filippov d3c529abd7 Support DNS resolving via libc-ares 2026-04-17 13:53:40 +03:00
Vitaliy Filippov a8e19ba28a Batch handle_immediate_ops more 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 64a8cd1f4b Add vitastor-cli create & modify --enc-key parameter 2026-04-17 13:53:40 +03:00
Vitaliy Filippov cc6e531410 Support reading from snapshots encrypted with different keys 2026-04-17 13:53:40 +03:00
Vitaliy Filippov ca608d0b87 Support decryption with multiple keys 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 0e095d2347 Allow to return chain_info in response to reads 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4fe2a0a3eb Add basic AES-XTS client-side encryption support 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 1a4d275616 Rework msgr send/receive to allow encryption support 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 803c870493 Move fromhexstr() to str_util 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 0d97fba466 Add openapi description 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 41100260ec Slightly fix API return and input types 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 07c9606594 Implement vitastor-cli serve command to serve simple HTTP API 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4ba361d83d Implement HTTP server support O_o 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 662fb86eae Rename http_response_t to http_message_t 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 1df8b51abb Extract common HTTP context 2026-04-17 13:53:40 +03:00
Vitaliy Filippov d2d01e5183 Support xxhash 32-bit checksums (data_csum_type=xxh3_32) 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 3d96c3907e Detect block checksums using csum_block_size, not data_csum_type 2026-04-17 13:53:40 +03:00
Vitaliy Filippov fb483185ff Add client certificate support 2026-04-17 13:53:40 +03:00
Vitaliy Filippov d6eb00e18e Do not re-initialize TLS context every connection 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 34d47bd62a Add https support to antietcd 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 2846eba3af Implement etcd SSL support via OpenSSL
Maybe I should remove all of this and use libwebsockets :)
2026-04-17 13:53:40 +03:00
Vitaliy Filippov a76d5ccc0d Wakeup callers in rm-data 2026-04-17 13:53:32 +03:00
Vitaliy Filippov 8ed1e180e0 Clear inode_stats in mon 2026-04-14 02:44:46 +03:00
Vitaliy Filippov 8832fc3b14 Fix print to stdout in client 2026-04-14 02:43:50 +03:00
Vitaliy Filippov 0134934c99 Do not skip garbage entries on start (rollback change from 3.0.4) 2026-04-11 12:05:02 +03:00