 Adam Ierymenko
|
7c3166e9be
Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring.
|
%!s(int64=3) %!d(string=hai) anos |
 Grant Limberg
|
20721491e8
kill some noisy logs
|
%!s(int64=3) %!d(string=hai) anos |
|
Grant Limberg
|
9eae444104
kill some verbose logs
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
576b4f03a5
Adjust deauth time window and send revocation when SSO members expire.
|
%!s(int64=3) %!d(string=hai) anos |
|
Adam Ierymenko
|
461810b06a
Move return so record gets created before URL.
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
613d7b5ece
fix backwards logic
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
663e748b8d
Deauth expiring members right away.
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
0cf62d334d
Remove pointless check.
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
0310bfa3e3
Include authentication URL in config
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
efe0e8aa7b
Notification of about-to-expire status... almost there.
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
5c7e51feaf
Merge branch 'dev' of github.com:zerotier/ZeroTierOne into dev
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
34de579c91
Handling of soon-to-expire members
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
10215af96d
whoops
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
e67fee0264
debug logging
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
364ad87e2b
add ssoEnabled flag to network config
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
e6b4fb5af7
add "ssoRedirectURL" to local.conf
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
1dfe909bab
Increase authentication URL sizes.
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
74a678c1e1
chicken or egg problem.
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
f27d193cf6
.
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
7ca2ecb421
put expiry time back on nc object
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
0702e581a1
remove some noisy log lines & fix a query error
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
c78792a705
moar temporary debug printfs
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
287c19e822
move this outside the auth block. If SSO is enabled, it should be checked whether authorized or not
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
4f521baafd
Big SSO update
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
fc6d90a04a
set the correct default
|
%!s(int64=4) %!d(string=hai) anos |
|
Grant Limberg
|
d2f1d05a06
handle cases where authenticationURL and authenticationExpiryTime don't exist
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
c470c6255e
Postgres code for SSO (almost certainly needs work)
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
6b3a7ec827
Fix a few things...
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
1ce71f9dc0
Build fix.
|
%!s(int64=4) %!d(string=hai) anos |
|
Adam Ierymenko
|
18508b5a2e
Build fix.
|
%!s(int64=4) %!d(string=hai) anos |
