git-annex-gpl - git-annex without the AGPL

	Commit message (Collapse)	Author	Age
*	glacier, S3: Fix bug that caused embedded creds to not be encypted using the ↵	Joey Hess	2014-09-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	remote's key. encryptionSetup must be called before setRemoteCredPair. Otherwise, the RemoteConfig doesn't have the cipher in it, and so no cipher is used to encrypt the embedded creds. This is a security fix for non-shared encryption methods! For encryption=shared, there's no security problem, just an inconsistentency in whether the embedded creds are encrypted. This is very important to get right, so used some types to help ensure that setRemoteCredPair is only run after encryptionSetup. Note that the external special remote bypasses the type safety, since creds can be set after the initial remote config, if the external special remote program requests it. Also note that IA remotes never use encryption, so encryptionSetup is not run for them at all, and again the type safety is bypassed. This leaves two open questions: 1. What to do about S3 and glacier remotes that were set up using encryption=pubkey/hybrid with embedcreds? Such a git repo has a security hole embedded in it, and this needs to be communicated to the user. Is the changelog enough? 2. enableremote won't work in such a repo, because git-annex will try to decrypt the embedded creds, which are not encrypted, so fails. This needs to be dealt with, especially for ecryption=shared repos, which are not really broken, just inconsistently configured. Noticing that problem for encryption=shared is what led to commit cc54ff9e49260cd94f938e69e926a273e231ef4e, which tried to fix the problem by not decrypting the embedded creds. This commit was sponsored by Josh Taylor.
*	Merge branch 'master' of ssh://git-annex.branchable.com	Joey Hess	2014-09-18
\|\
* \|	clarify that sync only commits changes to files already added to the repo	Joey Hess	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\|/
*	Merge branch 'master' of ssh://git-annex.branchable.com	Joey Hess	2014-09-18
\|\
* \|	Revert "S3, Glacier, WebDAV: Fix bug that prevented accessing the creds when ↵	Joey Hess	2014-09-18
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	the repository was configured with encryption=shared embedcreds=yes." This reverts commit cc54ff9e49260cd94f938e69e926a273e231ef4e. I can find no basis for that commit and think that I made it in error. setRemoteCredPair always encrypts using the cipher from remoteCipher, even when the cipher is shared.
\| *	Added a comment	xn	2014-09-18
\| \|
* \|	mention old-style chunking	Joey Hess	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\|/
*	Merge branch 'master' of ssh://git-annex.branchable.com	Joey Hess	2014-09-18
\|\
* \|	add: In direct mode, adding an annex symlink will check it into git, as was ↵	Joey Hess	2014-09-18
\| \| \| \| \| \| \| \|	already done in indirect mode.
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-18
\| \|
* \|	retitle	Joey Hess	2014-09-18
\| \|
\| *	Added a comment	rasmus	2014-09-18
\| \|
\| *	Added a comment	anarcat	2014-09-17
\| \|
\| *	Added a comment: Camlistore	https://www.google.com/accounts/o8/id?id=AItOawmH7o6q2l99M-PQolOfbR3_i5B_jtTIcAE	2014-09-17
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-17
\| \|
\| *	Added a comment: camlistore	anarcat	2014-09-17
\|/
*	fix display of git-annex test command name in usage	Joey Hess	2014-09-17
\| \| \| \| \| \|	This needs optparse-applicative 0.10. Dropped support for 0.9 and older, but kept 0.9.1 working since autobuilders and debian testing still use it. (The display is not perfect with 0.9.1.)
*	Merge branch 'master' of ssh://git-annex.branchable.com	Joey Hess	2014-09-17
\|\
* \|	WebDav: Fix enableremote crash when the remote already exists. (Bug ↵	Joey Hess	2014-09-17
\| \| \| \| \| \| \| \|	introduced in version 5.20140817.)
\| *	Added a comment	https://www.google.com/accounts/o8/id?id=AItOawlog_5wIICaMcrKTexlFNA6IO6UTp323aE	2014-09-17
\| \|
\| *	removed	pot	2014-09-17
\| \|
\| *	Added a comment	pot	2014-09-17
\| \|
\| *	Added a comment	https://id.koumbit.net/anarcat	2014-09-16
\|/
*	Merge branch 'master' of ssh://git-annex.branchable.com	Joey Hess	2014-09-16
\|\
* \|	devblog	Joey Hess	2014-09-16
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-16
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-16
\| \|
\| *	Added a comment: no need for c2hs	http://joeyh.name/	2014-09-16
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-16
\|/
*	comment reorg	Joey Hess	2014-09-16
\|
*	improve	Joey Hess	2014-09-16
\|
*	Merge branch 'master' of ssh://git-annex.branchable.com	Joey Hess	2014-09-16
\|\
* \|	reorg and rewrote build-from-source instructions	Joey Hess	2014-09-16
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-16
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-16
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-16
\| \|
\| *	Added a comment	http://joeyh.name/	2014-09-16
\|/
*	Merge branch 'master' of ssh://git-annex.branchable.com	Joey Hess	2014-09-16
\|\