Commit Graph

Select branches

Hide Pull Requests

Client-key-replacement-attack

PoC-terrors

check-uac-cerf

critical-fix-CI-check-all-features

enforcing-integrity

feat-shamir

fix-proto-build-script

impl-useragent_delete_grant

key-alternative

main

push-lspnytwuyulm

push-wxnlsulvnrpz

push-yyxvkwvyspxv

security-breaktrougth

security-hash-revoke_at

terrors-refactor

win-service

#17

#21

#22

#23

#24

#25

#26

#27

#29

#30

#31

#33

#34

#35

#36

#38

#39

#41

#42

#43

#44

#45

#46

#47

#48

#49

#50

#51

#53

#76

#77

#78

#80

#81

#82

#83

#87

#88

#89

#90

#91

#92

#93

Mono Color

• 013af7e65f fix(server): remove useless vendored protoc hdbg 2026-03-15 16:42:03 +01:00
• 84978afd58 fix(clippy): forbidden methods CleverWild 2026-03-14 15:49:13 +01:00
• 4cb5b303dc security: audit some crates CleverWild 2026-03-14 17:58:36 +01:00
• 8fde3cec41 Merge pull request 'feat(user-agent-auth): add RSA and ECDSA auth key types' (#29) from feat-min-RSA-&-ECDSA-auth-pipeline into main Stas 2026-03-14 14:41:46 +00:00
• 17ac195c5d clippy: fix CleverWild 2026-03-14 14:30:23 +01:00
• c1c5d14133 fix(rustc): config toolchaing mismatch CleverWild 2026-03-14 14:13:15 +01:00
• 47144bdf81 feat(auth): limited RSA support for signing CleverWild 2026-03-14 13:57:13 +01:00
• 42760bbd79 revert(auth): remove RSA support from authentication and related components CleverWild 2026-03-14 13:23:06 +01:00
• d29bca853b chore: squash migrations CleverWild 2026-03-14 13:22:47 +01:00
• f8d27a1454 refactor(config): specify target for Windows in profile.dev settings CleverWild 2026-03-14 12:40:37 +01:00
• 6030f30901 feat(user-agent-auth): add RSA and ECDSA auth key types CleverWild 2026-03-14 12:14:30 +01:00
• a3c401194f fix: my having come back CleverWild 2026-03-13 16:59:37 +01:00
• 6386510f52 merge: evm into main hdbg 2026-03-12 16:24:45 +01:00
• ec36e5c2ea Merge pull request 'refactor(server::client::auth): Approval flow for first-time connections and simplified to keep state on stack' (#26) from push-xxmwpvvwnllx into main Stas 2026-03-12 15:22:09 +00:00
• ba86d18250 refactor(server::client::auth): removed state machine and added approval flow coordination hdbg 2026-03-11 20:18:06 +01:00
• 606a1f3774 feat(server::{router, useragent}): inter-actor approval coordination hdbg 2026-03-11 17:59:32 +01:00
• b3a67ffc00 feat(server::client): proper connect error hdbg 2026-03-11 16:36:25 +01:00
• 168290040c feat(server::client): approval flow through user-agent on first-time client connects hdbg 2026-03-11 15:09:57 +01:00
• 2b27da224e housekeeping: linter push-lspnytwuyulm hdbg 2026-03-11 14:51:03 +01:00
• 9e92b168ba tests(evm::engine): basic policies tests hdbg 2026-03-11 13:57:25 +01:00
• bd159c35e8 docs: add EVM Policy Engine section hdbg 2026-03-10 20:17:47 +01:00
• b3e378b5fc fix(evm::engine): added shared settings check in vet_transaction hdbg 2026-03-10 19:57:30 +01:00
• b7c4f2e735 feat(evm): add find_all_grants to Policy trait with shared auto_type queries hdbg 2026-03-10 18:56:31 +01:00
• 4a5dd3eea7 feat(protobuf): EVM grants and signing definitions hdbg 2026-03-10 16:57:55 +01:00
• 5af6d8dd9c housekeeping: linter hdbg 2026-03-10 16:54:12 +01:00
• 5dfe390ac3 feat(evm): add grant management and transaction signing hdbg 2026-03-09 21:04:13 +01:00
• 43c7b211c3 feat(server::evm::engine): return meaning on error path hdbg 2026-03-09 20:58:04 +01:00
• c5f9cfcaa0 feat(server::evm::engine): initial wiring of all components -- we now can evaluate transactions hdbg 2026-03-09 19:28:50 +01:00
• 67fce6f06a feat(server::evm): more criterion types hdbg 2026-03-02 22:02:06 +01:00
• 191b126462 feat(server): initial EVM functionality impl hdbg 2026-03-02 22:02:06 +01:00
• cb05407bb6 feat(server): broker agent for inter-actor coordination hdbg 2026-03-01 11:35:06 +01:00
• 4beb34764d Merge pull request 'refactor(server::{user_agent, client}): move auth part to separate function to not to pollute actor session with one-time concerns' (#24) from push-upvpzwvlwyvs into main Stas 2026-03-02 19:53:21 +00:00
• 54d0fe0505 refactor(server::{user_agent, client}): move auth part to separate function to not to pollute actor session with one-time concerns hdbg 2026-03-01 19:59:42 +01:00
• 657f47e32f refactor(transport): convert Bi trait to use async_trait hdbg 2026-03-01 13:11:15 +01:00
• 4b4a8f4489 refactor: consolidate auth messages into client and user_agent packages hdbg 2026-03-01 11:44:34 +01:00
• 06f4d628db chore(server): update Cargo.lock dependencies hdbg 2026-02-26 22:41:36 +01:00
• 86f8feb291 tests(user-agent): basic auth tests similar to server hdbg 2026-02-26 22:23:52 +01:00
• 6deec731e2 feat(useragent): initial connection impl hdbg 2026-02-26 15:44:48 +01:00
• f5a5c62181 refactor(transport): simplify converters hdbg 2026-02-26 19:29:45 +01:00
• b8afd94b21 refactor(transport): implemented Bi stream based abstraction for actor communication with next loop override hdbg 2026-02-26 17:15:35 +01:00
• 7b57965952 housekeeping(useragent): rename hdbg 2026-02-18 14:10:42 +01:00
• 9dca7aff27 feat(proto): add URL parsing and TLS certificate management hdbg 2026-02-17 14:00:39 +01:00
• 4d1f047baf misc: create license and readme hdbg 2026-02-17 22:04:33 +01:00
• 925c7a211f refactor(server): reogranized actors, context, and db modules into <dir>/mod.rs structure hdbg 2026-02-16 22:28:26 +01:00
• d81120f59c refactor(server::tests): moved integration-like tests into tests/ hdbg 2026-02-16 22:00:24 +01:00
• e118eceb85 refactor(server): separated global actors into their own handle hdbg 2026-02-16 21:44:11 +01:00
• 4a84fe9339 refactor(server): actors reorganization & linter fixes hdbg 2026-02-16 21:38:36 +01:00
• c6e13dc476 feat(keyholder): add seal method and unseal integration tests hdbg 2026-02-16 21:30:23 +01:00
• 8f5d4cc385 feat(server::user-agent): Unseal implemented hdbg 2026-02-16 21:07:09 +01:00
• 2ffd60973d test(keyholder): remove unused imports from test modules hdbg 2026-02-16 21:06:04 +01:00
• 08af101b2e fix(ci): add protoc installation for lints hdbg 2026-02-16 21:14:24 +01:00
• bb58868333 fix(ci): add clippy installation in mise.toml hdbg 2026-02-16 21:03:27 +01:00
• b05cdeec66 refactor(actors): rename BootstrapActor to Bootstrapper hdbg 2026-02-16 20:59:49 +01:00
• 9ec465706a chore(supply-chain): update cargo-vet audits and trusted publishers hdbg 2026-02-16 20:45:28 +01:00
• 46a3c1768c feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse hdbg 2026-02-16 20:41:00 +01:00
• 6c8a67c520 feat(server::key_holder): ability to remotely get current state hdbg 2026-02-16 20:38:02 +01:00
• bbaed3fb97 refactor(keyholder): rename KeyHolderActor to KeyHolder and optimize db connection lifetime hdbg 2026-02-16 18:25:17 +01:00
• 4700bc407e security(server::key_holder): replaced nonce-caching with exclusive transaction fetching nonce from the database hdbg 2026-02-16 14:49:55 +01:00
• 281fbcb31d feat(server): UserAgent seal/unseal hdbg 2026-02-15 14:26:48 +01:00
• d65e9319d9 lints(clippy) key-alternative CleverWild 2026-02-16 21:08:42 +01:00
• dfc852e815 feat(server): integrate X25519 unseal handler in UserAgentActor CleverWild 2026-02-16 20:52:59 +01:00
• 5b711acb15 feat(server): add X25519 ECDH for secure unseal protocol CleverWild 2026-02-16 20:45:12 +01:00
• 19f19a56e5 feat(server): implement KeyStorage and state machine lifecycle CleverWild 2026-02-16 15:57:14 +01:00
• f108e64d13 feat(tls): implement TLS certificate management and rotation CleverWild 2026-02-16 15:57:00 +01:00
• a55221573b feat(unseal): add unseal protocol support for user agents hdbg 2026-02-14 23:44:37 +01:00
• 45acb45a05 feat(server): boot mechanism hdbg 2026-02-14 23:44:37 +01:00
• 11f1caa6da ci: add server linting pipeline for Rust code quality checks hdbg 2026-02-14 23:43:44 +01:00
• f769c9119b test(user-agent): add challenge-response auth flow test hdbg 2026-02-14 23:35:44 +01:00
• 1145642255 tests(server): UserAgent invalid bootstrap token hdbg 2026-02-14 19:25:56 +01:00
• 9f33277a4f security(server): cargo-vet proper init hdbg 2026-02-14 18:54:09 +01:00
• 0a8e1dce3f housekeeping(server): trimmed-down dependencies hdbg 2026-02-14 18:49:52 +01:00
• 1b4369b1cb feat(transport): add domain error type to GrpcTransportActor push-yyxvkwvyspxv hdbg 2026-02-25 21:53:01 +01:00
• 7bd37b3c4a refactor: introduce TransportActor abstraction hdbg 2026-02-25 18:57:16 +01:00
• fe8c5e1bd2 housekeeping(useragent): rename hdbg 2026-02-18 14:10:42 +01:00
• cbbe1f8881 feat(proto): add URL parsing and TLS certificate management hdbg 2026-02-17 14:00:39 +01:00
• 7438d62695 misc: create license and readme hdbg 2026-02-17 22:04:33 +01:00
• 4236f2c36d refactor(server): reogranized actors, context, and db modules into <dir>/mod.rs structure hdbg 2026-02-16 22:28:26 +01:00
• 76ff535619 refactor(server::tests): moved integration-like tests into tests/ hdbg 2026-02-16 22:00:24 +01:00
• b3566c8af6 refactor(server): separated global actors into their own handle hdbg 2026-02-16 21:44:11 +01:00
• bdb9f01757 refactor(server): actors reorganization & linter fixes hdbg 2026-02-16 21:38:36 +01:00
• 0805e7a846 feat(keyholder): add seal method and unseal integration tests hdbg 2026-02-16 21:30:23 +01:00
• eb9cbc88e9 feat(server::user-agent): Unseal implemented hdbg 2026-02-16 21:07:09 +01:00
• dd716da4cd test(keyholder): remove unused imports from test modules hdbg 2026-02-16 21:06:04 +01:00
• 1545db7428 fix(ci): add protoc installation for lints hdbg 2026-02-16 21:14:24 +01:00
• 20ac84b60c fix(ci): add clippy installation in mise.toml hdbg 2026-02-16 21:03:27 +01:00
• 8f6dda871b refactor(actors): rename BootstrapActor to Bootstrapper hdbg 2026-02-16 20:59:49 +01:00
• 47108ed8ad chore(supply-chain): update cargo-vet audits and trusted publishers hdbg 2026-02-16 20:45:28 +01:00
• 359df73c2e feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse hdbg 2026-02-16 20:41:00 +01:00
• ce03b7e15d feat(server::key_holder): ability to remotely get current state hdbg 2026-02-16 20:38:02 +01:00
• e4038d9188 refactor(keyholder): rename KeyHolderActor to KeyHolder and optimize db connection lifetime hdbg 2026-02-16 18:25:17 +01:00
• c82339d764 security(server::key_holder): replaced nonce-caching with exclusive transaction fetching nonce from the database hdbg 2026-02-16 14:49:55 +01:00
• 075d33219e feat(server): implement KeyStorage and state machine lifecycle security-breaktrougth CleverWild 2026-02-16 15:57:14 +01:00
• 8cb6f4abe0 feat(tls): implement TLS certificate management and rotation CleverWild 2026-02-16 15:57:00 +01:00
• c5b51f4b70 feat(server): UserAgent seal/unseal hdbg 2026-02-15 14:26:48 +01:00
• 6b8f8c9ff7 feat(unseal): add unseal protocol support for user agents hdbg 2026-02-14 23:44:37 +01:00
• 8263bc6b6f feat(server): boot mechanism hdbg 2026-02-14 23:44:37 +01:00
• a6c849f268 ci: add server linting pipeline for Rust code quality checks hdbg 2026-02-14 23:43:44 +01:00
• d8d65da0b4 test(user-agent): add challenge-response auth flow test hdbg 2026-02-14 23:35:44 +01:00
• abdf4e3893 tests(server): UserAgent invalid bootstrap token hdbg 2026-02-14 19:25:56 +01:00
• 4bac70a6e9 security(server): cargo-vet proper init hdbg 2026-02-14 18:54:09 +01:00