summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* SQL store: use authenticated encryptionFrank Denis2015-06-241-6/+32
| | | | | | | | | | | | | | | | | | | | Data were encrypted using AES-CFB, with a properly randomized IV, but without any authenticators. This allows the data to be tampered with, without being noticed by the application. This diff slightly changes the encryption/decryption functions in sql_store.go to add a HMAC-SHA256 authenticator to encrypted messages. Two keys are derived from AtRestEncryptKey: the first half of SHA512(AtRestEncryptKey) for the block cipher and the second half for the MAC. This can be changed to a KDF if needed. The decryption function also checks that base64 decoding actually worked, and that the ciphertext is long enough to include the IV and the MAC. Unfortunately, it breaks backward compatibility. But if such a change has to be made, it has to be made early.
* updating ding=Corey Hulen2015-06-231-0/+0
|
* Merge branch 'master' of https://github.com/mattermost/platform=Corey Hulen2015-06-230-0/+0
|\
| * Correcting capitalization typo, f -> Fit332015-06-231-1/+1
| |
| * Merge pull request #54 from asaadmahmoodspin/masterCorey Hulen2015-06-234-4/+9
| |\ | | | | | | MM-1339 - Updating Ui for sign up page
| | * Updating spellingAsaad Mahmood2015-06-231-1/+1
| | |
| | * MM-1339 - Updating Ui for sign up pageAsaad Mahmood2015-06-234-4/+9
| | |
| * | Listing golang-lruit332015-06-231-0/+8
| |/
| * Delete periodit332015-06-231-1/+1
| |
| * Updated wording for configuration filesit332015-06-231-1/+1
| |
| * "server" -> "Mattermost server"it332015-06-231-1/+1
| |
| * Update README.mdit332015-06-231-4/+4
| | | | | | Updating version number to 0.50
| * Update README.mdit332015-06-231-1/+4
| |
| * Update LICENSE.txtit332015-06-231-6/+18
| |
| * Update README.mdit332015-06-231-3/+1
| |
| * Create LICENSE.txtit332015-06-231-0/+26
| |
| * Merge pull request #52 from mattermost/readmeCorey Hulen2015-06-221-27/+35
| |\ | | | | | | HELIUM - Sections for install instructions
| | * Spacing in the notes sectionChristopher Speller2015-06-221-0/+1
| | |
| | * Sections for install instructionsChristopher Speller2015-06-221-27/+34
| | |
| * | Merge pull request #50 from mattermost/mm-1320Corey Hulen2015-06-2246-11460/+5
| |\ \ | | | | | | | | HELIUM fixes mm-1320 removes freetype libs and only use solid color for gene…
| | * | use proper dimensions for generated profile imageJoramWilander2015-06-221-1/+1
| | | |
| | * | fixes mm-1320 removes freetype libs and only use solid color for generated ↵JoramWilander2015-06-2246-11460/+5
| | |/ | | | | | | | | | profile pics
| * | Merge branch 'master' of https://github.com/mattermost/platform=Corey Hulen2015-06-220-0/+0
| |\ \
| | * \ Merge branch 'master' of https://github.com/mattermost/platform=Corey Hulen2015-06-226-1/+1
| | |\ \
| | | * \ Merge pull request #47 from mattermost/image-cleanupJoram Wilander2015-06-226-1/+1
| | | |\ \ | | | | |/ | | | |/| HELIUM - Changing test images
| | | | * Changing test imagesChristopher Speller2015-06-226-1/+1
| | | | |
| | | * | fixing header=Corey Hulen2015-06-222-4/+12
| | | |/
| | | * Change "Create a comment..." to "Add a comment..."it332015-06-211-1/+1
| | | |
| | | * Change "Create a post..." to "Write a message..."it332015-06-211-1/+1
| | | |
| | | * Update README.mdit332015-06-201-2/+2
| | | |
| | | * Create APACHE-2.0.txtit332015-06-201-0/+202
| | | |
| | | * Update and rename LICENSE.txt to GNU-AGPL-3.0.txtit332015-06-201-1/+0
| | | |
| | * | fixing header=Corey Hulen2015-06-223-4/+676
| | | |
| | * | Change "Create a comment..." to "Add a comment..."it332015-06-211-1/+1
| | | |
| | * | Change "Create a post..." to "Write a message..."it332015-06-211-1/+1
| | | |
| | * | Update README.mdit332015-06-201-2/+2
| | | |
| | * | Create APACHE-2.0.txtit332015-06-201-0/+202
| | | |
| | * | Update and rename LICENSE.txt to GNU-AGPL-3.0.txtit332015-06-201-665/+0
| | |/
| | * Update README.mdit332015-06-201-2/+1
| | |
| | * Update NOTICE.mdit332015-06-201-1/+39
| | |
| | * Update NOTICE.mdit332015-06-201-2/+3
| | |
| | * Rename NOTICE.txt to NOTICE.mdit332015-06-201-0/+0
| | |
| | * Update NOTICE.txtit332015-06-201-4/+13
| | |
| | * Update LICENSE.txtit332015-06-201-196/+649
| | |
| | * Update LICENSE.txtit332015-06-201-201/+211
| | |
| | * Update signup_team.htmlit332015-06-201-2/+1
| | | | | | | | | Broke CI, backing out changes
| | * Update signup_team.htmlit332015-06-201-3/+2
| | |
| | * Adding marketing text to configure_links.htmlit332015-06-201-2/+20
| | | | | | | | | Helping people who newly installed bits learn about community
| | * Adding product tagline to signup_team.htmlit332015-06-201-1/+3
| | |
| | * Merge pull request #44 from mattermost/readmeChristopher Speller2015-06-191-1/+1
| | |\ | | | | | | | | Require single instance