Daniel Wagner-Hall
|
2c8f16257a
|
Merge pull request #272 from matrix-org/daniel/insecureclient
Allow configuration to ignore invalid SSL certs
|
2015-09-15 16:52:38 +01:00 |
|
Erik Johnston
|
dd0867f5ba
|
Various bug fixes to crypto.keyring
|
2015-09-09 17:02:39 +01:00 |
|
Daniel Wagner-Hall
|
81a93ddcc8
|
Allow configuration to ignore invalid SSL certs
This will be useful for sytest, and sytest only, hence the aggressive
config key name.
|
2015-09-09 12:02:07 +01:00 |
|
Mark Haines
|
78323ccdb3
|
Remove syutil dependency in favour of smaller single-purpose libraries
|
2015-08-24 16:17:38 +01:00 |
|
Erik Johnston
|
f0dd568e16
|
Wait for previous attempts at fetching keys for a given server before trying to fetch more
|
2015-06-26 11:25:00 +01:00 |
|
Erik Johnston
|
b5f55a1d85
|
Implement bulk verify_signed_json API
|
2015-06-26 10:39:34 +01:00 |
|
Erik Johnston
|
291cba284b
|
Handle the case when things return empty but non none things
|
2015-05-19 14:42:46 +01:00 |
|
Erik Johnston
|
253f76a0a5
|
Don't always hit get_server_verify_key_v1_direct
|
2015-05-19 14:42:38 +01:00 |
|
Erik Johnston
|
d3e09f12d0
|
SYN-383: Actually, we expect this value to be a dict
|
2015-05-19 13:12:41 +01:00 |
|
Erik Johnston
|
2b7120e233
|
SYN-383: Handle the fact the server might not have signed things
|
2015-05-19 12:49:38 +01:00 |
|
Erik Johnston
|
8b256a7296
|
Don't reuse var names
|
2015-05-19 11:58:22 +01:00 |
|
Erik Johnston
|
2aeee2a905
|
SYN-383: Fix parsing of verify_keys and catching of _DefGen_Return
|
2015-05-19 11:56:18 +01:00 |
|
Mark Haines
|
c6a03c46e6
|
SYN-383: Extract the response list from 'server_keys' in the response JSON as it might work better than iterating over the top level dict
|
2015-05-19 10:23:02 +01:00 |
|
Erik Johnston
|
fca28d243e
|
Change the way we create observers to deferreds so that we don't get spammed by 'unhandled errors'
|
2015-05-08 16:28:08 +01:00 |
|
Mark Haines
|
1319905d7a
|
Use a defer.gatherResults to collect results from the perspective servers
|
2015-04-29 13:31:14 +01:00 |
|
Mark Haines
|
74874ffda7
|
Update the query format used by keyring to match current key v2 spec
|
2015-04-29 12:14:08 +01:00 |
|
Mark Haines
|
46d200a3a1
|
Implement minimum_valid_until_ts in the remote key resource
|
2015-04-29 11:57:26 +01:00 |
|
Mark Haines
|
f8b865264a
|
Merge branch 'develop' into key_distribution
Conflicts:
synapse/crypto/keyring.py
|
2015-04-27 18:29:32 +01:00 |
|
Erik Johnston
|
2c70849dc3
|
Fix newlines
|
2015-04-27 14:38:29 +01:00 |
|
Erik Johnston
|
0a016b0525
|
Pull inner function out.
|
2015-04-27 14:37:24 +01:00 |
|
Erik Johnston
|
e701aec2d1
|
Implement locks using create_observer for fetching media and server keys
|
2015-04-27 14:20:26 +01:00 |
|
Mark Haines
|
288702170d
|
Add config for setting the perspective servers
|
2015-04-24 17:01:34 +01:00 |
|
Mark Haines
|
4bbf7156ef
|
Update to match the specification for key/v2
|
2015-04-23 16:39:13 +01:00 |
|
Mark Haines
|
f30d47c876
|
Implement remote key lookup api
|
2015-04-22 14:21:08 +01:00 |
|
Mark Haines
|
2f9157b427
|
Implement v2 key lookup
|
2015-04-20 16:23:47 +01:00 |
|
Erik Johnston
|
5b5c7a28d6
|
Log error message when we fail to fetch remote server keys
|
2015-03-05 17:09:13 +00:00 |
|
Erik Johnston
|
9371019133
|
Try to only back off if we think we failed to connect to the remote
|
2015-02-17 18:13:34 +00:00 |
|
Erik Johnston
|
2b8f1a956c
|
Add per server retry limiting.
Factor out the pre destination retry logic from TransactionQueue so it
can be reused in both get_pdu and crypto.keyring
|
2015-02-17 17:20:56 +00:00 |
|
Erik Johnston
|
5025305fb2
|
Rate limit retries when fetching server keys.
|
2015-02-17 15:57:42 +00:00 |
|
Mark Haines
|
adb04b1e57
|
Update copyright notices
|
2015-01-06 13:21:39 +00:00 |
|
Mark Haines
|
32090aee16
|
Add a few missing yields, Move deferred lists inside PreserveLoggingContext because they don't interact well with the logging contexts
|
2014-11-20 16:24:00 +00:00 |
|
Mark Haines
|
7d709542ca
|
Fix pep8 warnings
|
2014-10-30 11:10:17 +00:00 |
|
Mark Haines
|
3187b5ba2d
|
add log line for checking verifying signatures
|
2014-10-17 20:56:21 +01:00 |
|
Mark Haines
|
34034af1c9
|
Better response message when signature is missing or unsupported
|
2014-10-13 16:47:23 +01:00 |
|
Mark Haines
|
07639c79d9
|
Respond with more helpful error messages for unsigned requests
|
2014-10-13 16:39:15 +01:00 |
|
Mark Haines
|
b95a178584
|
SYN-75 Verify signatures on server to server transactions
|
2014-09-30 15:15:10 +01:00 |
|