Commit Graph

1337 Commits (main)
 

Author SHA1 Message Date
Jan Dittberner 06aee033a7 Merge pull request 'Replace http links with https' (!18) from use-https-for-verification-links into main
Reviewed-on: #18
Reviewed-by: Kim Nilsson <knilsson@cacert.org>
Reviewed-by: Brian Mc Cullough <bmccullough@cacert.org>
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 days ago
Jan Dittberner c61f0c4519 Merge branch 'main' into use-https-for-verification-links 3 days ago
Jan Dittberner 408796eaf0 Merge pull request 'Improve client certificate issuing' (!17) from fix-client-cert-issues into main
Reviewed-on: #17
Reviewed-by: Brian Mc Cullough <bmccullough@cacert.org>
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 days ago
Jan Dittberner 844eb0fbf3 Merge branch 'main' into fix-client-cert-issues 3 days ago
Jan Dittberner abfce60ed4 Merge pull request 'Fix client certificate login' (!16) from fix-client-certificate-login into main
Reviewed-on: #16
Reviewed-by: Brian Mc Cullough <bmccullough@cacert.org>
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 days ago
Jan Dittberner 44987425dc Merge branch 'main' into fix-client-certificate-login 3 days ago
Jan Dittberner e021736c47 Merge pull request 'Add maintenance query to remove memid=0 emails' (!2) from fix-email-address-maintenance-bug-1543 into main
Reviewed-on: #2
Reviewed-by: Brian Mc Cullough <bmccullough@cacert.org>
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 days ago
Jan Dittberner 66daeb6fcd Merge branch 'main' into fix-email-address-maintenance-bug-1543 3 days ago
Jan Dittberner 9626e7f6fc Fix initial index for email SAN lookup 3 weeks ago
Jan Dittberner 5f89d48036 Remove leftover header call 3 weeks ago
Jan Dittberner 3bf254e237 Use https links instead of http for registration 3 weeks ago
Jan Dittberner 0f75bdcdac Use https links instead of http 3 weeks ago
Jan Dittberner 9a672e9bf9 Improve client certificate issuing
- add more comprehensive message when a user does not select an email address or the SSO flag
- fix missing value for coll_found in emailcerts INSERT query
- handle database errors when the emailcerts INSERT query fails
3 weeks ago
Jan Dittberner 560be526c4 Fix client certificate login
This change fixes the client certificate login for cases where duplicate
serial numbers have been issued and recorded in the emailcerts table.

Email addresses from the client certificate are used as an additional
matching parameter.

- includes/lib/general.php got a new function
  get_email_addresses_from_client_cert to create an array of email
  addresses from the environment variables set by Apache httpd
- includes/loggedin.php and www/index.php use the new function to pass
  email addresses to the get_user_id_from_cert function
- get_user_id_from_cert in includes/lib/general.php has been enhanced to
  use a JOIN over the emailcerts, root_certs and email tables. All
  parameters are escaped via mysql_real_escape_string
- SQL errors in get_user_id_from_cert are now handled
- a match from get_user_id_from_cert is only returned when there is
  exactly one row in the result set

The code and the used query have been tested with Apache 2.4.10 and PHP
5.6 from Debian Jessie and a MariaDB 10.11 in strict mode using a
container based test setup to match the current production setup as
close as possible.
3 weeks ago
Dirk Astrath e2f9138035 Merge pull request 'Ignore files that are dynamically generated' (!12) from update-gitignore into main
Reviewed-on: #12
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 weeks ago
Dirk Astrath 443467c435 Merge pull request 'Add class 3 root-certificates signed in 2021' (!13) from add-2021-class3-certificate-files into main
Reviewed-on: #13
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 weeks ago
Dirk Astrath 6e23a0bd87 Merge pull request 'Use Digest::SHA instead of removed Digest::SHA1' (!14) from fix-sha-digest-import into main
Reviewed-on: #14
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 weeks ago
Dirk Astrath f14c9ad991 Merge pull request 'Remove locale/cv.c' (!15) from remove-unused-c-code into main
Reviewed-on: #15
Reviewed-by: Dirk Astrath <dirk@cacert.org>
3 weeks ago
Jan Dittberner 6d2da10fa2 Remove locale/cv.c
This change removes locale/cv.c. It does not seem to be used anywhere in
the current system. None of the current critical team members knows
about its history. It might have been replaced by
locale/escape_special_chars.php long ago.
3 weeks ago
Jan Dittberner 5d9c8689cc Use Digest::SHA instead of removed Digest::SHA1
This fixes the Digest import in server.pl. Digest::SHA1 has long been
replaced by the more generic Digest::SHA.
3 weeks ago
Jan Dittberner 6e3549c21a Add class 3 certificates signed in 2021
These files have been referenced in pages/index/3.php since commit
bf7dcbd0
3 weeks ago
Jan Dittberner 03b6d7c4bf Ignore files that are dynamically generated 3 weeks ago
Jan Dittberner 0dc3bd7626 Merge pull request 'Redirect to code.cacert.org for source code' (!11) from feature/replace-static-tarballs-with-code-reference into main
Reviewed-on: #11
Reviewed-by: Dirk Astrath <dirk@cacert.org>
8 months ago
Jan Dittberner bf2ab338d1 Merge pull request 'Remove opinionated comments on hash algorithms' (!10) from bugfix/remove-opinionated-hash-algorithm-descriptions into main
Reviewed-on: #10
8 months ago
Jan Dittberner 62dc71fb4d Redirect to code.cacert.org for source code 8 months ago
Jan Dittberner f6831c82af Remove opinionated comments on hash algorithms 8 months ago
Jan Dittberner efb9f4b461 Merge pull request 'Add missing closing a tag for link' (#9) from add-closing-tag-for-csr-app-link into main
Reviewed-on: #9
8 months ago
Jan Dittberner ccd5273c7b Add missing closing a tag for link 8 months ago
Jan Dittberner 37fd9a3127 Merge pull request 'bugfix/1551-link-to-csr-app' (#8) from bugfix/1551-link-to-csr-app into main
Reviewed-on: #8
Reviewed-by: Dirk Astrath <dirk@cacert.org>
8 months ago
Jan Dittberner 3ecb1a6d1a Enable expert options by default
addresses https://bugs.cacert.org/view.php?id=1551
8 months ago
Jan Dittberner 91f7e11751 Add link to new CSR generator application
addresses https://bugs.cacert.org/view.php?id=1551
8 months ago
Jan Dittberner 53d4d108ce Merge pull request 'Remove old sponsoring links' (#7) from bugfix/1423-remove-tunix-and-oan-links into main
Reviewed-on: #7
Reviewed-by: Dirk Astrath <dirk@cacert.org>
8 months ago
Jan Dittberner df612b08ba Merge branch 'main' into fix-email-address-maintenance-bug-1543 8 months ago
Jan Dittberner 3e25be237d Remove old sponsoring links
fixes https://bugs.cacert.org/view.php?id=1423
8 months ago
Jan Dittberner 8521ac0719 Merge pull request 'Use integer values for type when inserting into ordomaincerts' (#3) from bugfix/1548-proper-type-for-orgdomain-insert into main
Reviewed-on: #3
10 months ago
Jan Dittberner 6ddce57ded Merge branch 'main' into fix-email-address-maintenance-bug-1543 10 months ago
Jan Dittberner ae4f01bcbe Merge branch 'main' into bugfix/1548-proper-type-for-orgdomain-insert 10 months ago
Jan Dittberner c9ab54b30a Merge pull request 'Add migration script for missing users DEFAULTs' (#4) from bugfix/1549-add-missing-defaults-on-users-table into main
Reviewed-on: #4

Applied in prod by @dirk
10 months ago
Jan Dittberner 10540621a8 Add migration script for missing users DEFAULTs
This commit adds a migration script to add missing DEFAULT values on the
users table. INSERTs into the users table fail without these DEFAULTs on
MariaDB in strict mode.
10 months ago
Jan Dittberner bdb30f8898 Use integer values for type when inserting into ordomaincerts
MySQL tolerated INSERTs of an empty string in the type column of the
ordomaincerts table. This commit uses an integer value of 0 as default
instead to ensure that MariaDB with strict settings accepts the INSERT
too.
10 months ago
Jan Dittberner 508226374a Merge branch 'master' into fix-email-address-maintenance-bug-1543 2 years ago
Jan Dittberner 2884caf1a5 Merge pull request 'Fix l10n handling on Debian 11' (#1) from fix-l10n-bug-1542 into master
Reviewed-on: #1
2 years ago
Jan Dittberner 733949e467 Add maintenance query to remove memid=0 emails
This commit introduces a fix for wrongly inserted email addresses that
have a memid=0 field because of MariaDBs strict mode that was enabled
after moving from MySQL to MariaDB.

Fixes https://bugs.cacert.org/view.php?id=1543
2 years ago
Jan Dittberner 687497c82f Fix l10n handling on Debian 11
Fixes bug #1542
2 years ago
Jan Dittberner 9140217aa7 Change outgoing mail hostname to ping.cacert.org
Fixes bug #1541
2 years ago
Dirk Astrath bf7dcbd080 Bug 1440 3 years ago
Wytze van der Raay dadc7dea1e Add scripts for mass info mailing on Sep 6 & 7, 2019. 5 years ago
Wytze van der Raay 9240496af8 Fixes for https://bugs.cacert.org/view.php?id=1305:
CAcert Class1 root certificate needs to be reissued with
an updated CDP and a SHA-based signature.
See the message thread preserved in
https://lists.cacert.org/wws/arc/cacert-systemlog/2016-03/
for more information on the re-signed root certificates
installed and enabled by this commit.
5 years ago
Wytze van der Raay 21ffacf9f2 Fixes for https://bugs.cacert.org/view.php?id=1305:
CAcert Class1 root certificate needs to be reissued with
an updated CDP and a SHA-based signature.
See the message thread preserved in
https://lists.cacert.org/wws/arc/cacert-systemlog/2016-03/
for more information on the re-signed root certificates
installed and enabled by this commit.
5 years ago
Wytze van der Raay 62a2d72a07 Emergency fix for https://bugs.cacert.org/view.php?id=1459
"e-mail verification fails for many addresses since upgrade from PHP 5.5 to PHP 5.6"
5 years ago