KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
Go to file
Aleksa Sarai 9f8943c89b keepassxc-cli show: resolve references in output (#1280)
* core: database: make UUID searching case-insensitive

4c4d8a5e84 ("Implement search for reference placeholder based on
fields other than ID") changed the semantics of searching-by-reference
in KeePassXC. Unforuntately it contained a bug where it implicitly
became case-sensitive to UUIDs, which broke existing databases that used
references (especially since the default reference format uses a
different case to the UUID used while searching).

The tests didn't catch this because ->toHex() preserves the case that it
was provided, they have been updated to check that UUIDs are case
insensitive.

* cli: show: resolve references in output

Previously, `keepassxc-cli show` would not resolve references. This
would make it quite hard to script around its output (since there's not
interface to resolve references manually either). Fix this by using
resolveMultiplePlaceholders as with all other users of ->password() and
related entry fields.

Fixes: keepassxreboot/keepassxc#1260

* tests: entry: add tests for ref-cloned entries

This ensures that the most "intuitive" current usage of references
(through the clone feature of the GUI) remains self-consistent and
always produces the correct results. In addition, explicitly test that
case insensitivity works as expected. These should avoid similar
regressions in reference handling in the future.

* http: resolve references in AccessControlDialog

The access control dialog previously would not show the "real" username
or "real" title when asking for permission to give access to entries.
Fix this by resolving it, as we do in many other places.

Fixes: keepassxreboot/keepassxc#1269


Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
2017-12-17 10:44:12 -05:00
.github Remove emoji in commit messages from style guide 2017-10-21 13:27:25 +02:00
.tx Moved transifex to new url 2016-11-11 16:30:57 -05:00
cmake Update and fix copyright headers 2017-06-14 15:54:43 +02:00
docs Create docs directory and QUICKSTART.md instructions; editorial pass … (#1227) 2017-11-26 22:36:46 +01:00
share Merge branch 'master' into develop 2017-12-13 19:00:04 +01:00
src keepassxc-cli show: resolve references in output (#1280) 2017-12-17 10:44:12 -05:00
tests keepassxc-cli show: resolve references in output (#1280) 2017-12-17 10:44:12 -05:00
utils Improve building of macOS target 2017-10-21 10:12:28 -06:00
.clang-format Updating .clang-format (#915) 2017-08-31 09:24:36 -04:00
.gitattributes Add github-linguist language hints. 2017-02-15 16:36:02 -05:00
.gitignore Merge branch 'release/2.2.2' into develop 2017-10-19 21:45:49 +02:00
.travis.yml Fixed memory leaks in non-gui tests 2017-11-27 23:36:09 +01:00
AppImage-Recipe.sh Merge branch 'release/2.2.3' into develop 2017-11-26 18:23:48 +01:00
CHANGELOG Bump version to 2.2.4 2017-12-13 18:55:54 +01:00
CMakeLists.txt Merge branch 'master' into develop 2017-12-13 19:00:04 +01:00
COPYING SSH agent support 2017-11-19 14:38:59 +02:00
Dockerfile Add update information to AppImage and use KeePassXC PPA for YubiKey libs, resolves #1157 2017-11-26 18:18:34 +01:00
INSTALL.md Create docs directory and QUICKSTART.md instructions; editorial pass … (#1227) 2017-11-26 22:36:46 +01:00
LICENSE.BOOST-1.0 Display git revision in about dialog. 2015-07-18 13:14:13 +02:00
LICENSE.BSD Add crypto classes and tests. Link to libgcrypt. 2010-09-11 19:49:30 +02:00
LICENSE.CC0 Fix database icons license issues. 2013-03-23 21:50:23 +01:00
LICENSE.GPL-2 Add "LICENSE" prefix to license filenames. 2010-08-15 12:33:42 +02:00
LICENSE.GPL-3 Add "LICENSE" prefix to license filenames. 2010-08-15 12:33:42 +02:00
LICENSE.LGPL-2.1 Fix typo in filename. 2013-03-24 14:16:34 +01:00
LICENSE.LGPL-3 Add LGPL-3 license text for the Oxygen icons. 2013-03-24 11:54:20 +01:00
LICENSE.NOKIA-LGPL-EXCEPTION Add support for gzip compressed databases. 2010-09-23 22:27:59 +02:00
README.md Corrected file link to INSTALL.md 2017-12-08 17:17:33 -05:00
release-tool Replace signtool with osslsigncode 2017-12-15 09:51:55 +01:00
snapcraft.yaml Bump version to 2.2.4 2017-12-13 18:55:54 +01:00

KeePassXC

Travis Build Status Coverage Status

About KeePassXC

KeePassXC is a cross-platform community fork of KeePassX. Our goal is to extend and improve it with new features and bugfixes to provide a feature-rich, fully cross-platform and modern open-source password manager.

Installation

The KeePassXC QuickStart gets you started using KeePassXC on your Windows, Mac, or Linux computer using pre-compiled binaries from the downloads page.

Additionally, individual Linux distributions may ship their own versions, so please check out your distribution's package list to see if KeePassXC is available.

Additional features compared to KeePassX

  • Auto-Type on all three major platforms (Linux, Windows, macOS)
  • Twofish encryption
  • YubiKey challenge-response support
  • TOTP generation
  • CSV import
  • Command line interface
  • DEP and ASLR hardening
  • Stand-alone password and passphrase generator
  • Password strength meter
  • Using website favicons as entry icons
  • Merging of databases
  • Automatic reload when the database changed on disk
  • Browser integration with KeePassHTTP-Connector for Mozilla Firefox and Google Chrome or Chromium, and passafari in Safari. [See note about KeePassHTTP]
  • Many bug fixes

For a full list of features and changes, read the CHANGELOG document.

Building KeePassXC

Detailed instructions are available in the Build and Install page or on the Wiki page.

Contributing

We are always looking for suggestions how to improve our application. If you find any bugs or have an idea for a new feature, please let us know by opening a report in our issue tracker on GitHub or join us on IRC on freenode channels #keepassxc or #keepassxc-dev.

You can of course also directly contribute your own code. We are happy to accept your pull requests.

Please read the CONTRIBUTING document for further information.

Note about KeePassHTTP

The KeePassHTTP protocol is not a highly secure protocol. It has a certain flaw which could allow an attacker to decrypt your passwords should they manage to impersonate the web browser extension from a remote address.

(See here and here).

To minimize the risk, KeePassXC strictly limits communication between itself and the browser plugin to your local computer (localhost). This makes your passwords quite safe, but as with all open source software, use it at your own risk!