summaryrefslogtreecommitdiff
path: root/doc
Commit message (Collapse)AuthorAge
* Merge branch 'master' of ssh://git-annex.branchable.com5.20140926Gravatar Joey Hess2014-09-26
|\
| * Added a commentGravatar JerSou2014-09-25
| |
| * removedGravatar JerSou2014-09-25
| |
| * Added a commentGravatar JerSou2014-09-25
| |
| * Added a commentGravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-25
| |
| * (no commit message)Gravatar http://joeyh.name/2014-09-25
| |
| * removedGravatar https://www.google.com/accounts/o8/id?id=AItOawktbkKjilg70XC9XBFpIgVhtfLYH-0UMHY2014-09-25
| |
| * Added a commentGravatar http://joeyh.name/2014-09-25
| |
| * Added a commentGravatar http://joeyh.name/2014-09-25
| |
| * Added a commentGravatar http://joeyh.name/2014-09-25
| |
| * Added a commentGravatar http://joeyh.name/2014-09-25
| |
| * Added a commentGravatar http://joeyh.name/2014-09-25
| |
| * (no commit message)Gravatar https://www.google.com/accounts/o8/id?id=AItOawktbkKjilg70XC9XBFpIgVhtfLYH-0UMHY2014-09-25
| |
| * (no commit message)Gravatar https://www.google.com/accounts/o8/id?id=AItOawktbkKjilg70XC9XBFpIgVhtfLYH-0UMHY2014-09-25
| |
* | Merge branch 'master' of ssh://git-annex.branchable.comGravatar Joey Hess2014-09-24
|\|
| * Added a comment: Also with standalone git-annexGravatar https://www.google.com/accounts/o8/id?id=AItOawn26A25mnLHRtWAP587-NPwEFKzolmENL42014-09-24
| |
| * (no commit message)Gravatar https://www.google.com/accounts/o8/id?id=AItOawn26A25mnLHRtWAP587-NPwEFKzolmENL42014-09-24
| |
| * Added a commentGravatar http://svario.it/gioele2014-09-24
| |
| * Added a commentGravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-23
| |
| * Added a commentGravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-23
| |
| * Added a commentGravatar http://joeyh.name/2014-09-23
| |
* | closeGravatar Joey Hess2014-09-23
| |
| * Added a comment: Why different versions?Gravatar https://www.google.com/accounts/o8/id?id=AItOawn3p4i4lk_zMilvjnJ9sS6g2nerpgz0Fjc2014-09-23
| |
| * Added a commentGravatar https://me.yahoo.com/a/wbh0dY54mcPwTpeOweuPQ8JiZrH3hg--#9b7262014-09-23
| |
| * (no commit message)Gravatar https://me.yahoo.com/a/wbh0dY54mcPwTpeOweuPQ8JiZrH3hg--#9b7262014-09-22
| |
| * removedGravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-22
|/
* fix urlsGravatar Joey Hess2014-09-22
|
* Merge branch 'master' of ssh://git-annex.branchable.comGravatar Joey Hess2014-09-22
|\
* | updateGravatar Joey Hess2014-09-22
| |
| * (no commit message)Gravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-21
| |
| * (no commit message)Gravatar dirkz2014-09-20
| |
| * (no commit message)Gravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-19
| |
| * Added a commentGravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-19
| |
| * Added a comment: UnderstandingGravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-19
|/
* Added a comment: Sync between two indirectly connected remotes need XMPP?Gravatar https://www.google.com/accounts/o8/id?id=AItOawmK0703vNSIQsP1mGf-4MAPnsBZiSc6yVo2014-09-19
|
* Added a commentGravatar http://joeyh.name/2014-09-19
|
* Added a commentGravatar https://www.google.com/accounts/o8/id?id=AItOawlog_5wIICaMcrKTexlFNA6IO6UTp323aE2014-09-19
|
* add news item for git-annex 5.20140919Gravatar Joey Hess2014-09-19
|
* Added a commentGravatar rasmus2014-09-19
|
* Added a commentGravatar annexuser2014-09-19
|
* Added a commentGravatar http://joeyh.name/2014-09-19
|
* Added a comment: I know what it is nowGravatar http://joeyh.name/2014-09-19
|
* Added a commentGravatar rasmus2014-09-19
|
* error, don't warn about insecure credsGravatar Joey Hess2014-09-18
| | | | | | | | | | A one-time warning was not good enough. A hard error will force the user to notice the problem. Perhaps worth noting that git-annex enableremote already failed with an error, and nobody reported a bug. Suggests that not many people have used the insecure configuration, or if they did, they went to the bother to embedcreds, but never re-enabled the special remote.
* git history is hard to kill, make sure it's clearGravatar anarcat2014-09-18
|
* numberGravatar Joey Hess2014-09-18
|
* devblogGravatar Joey Hess2014-09-18
|
* deal with old repositories with non-encrypted credsGravatar Joey Hess2014-09-18
| | | | | | | | | | | | | | | | | See 2fb7ad68637cc4e1092f835055a974f141808ca0 for backstory about how a repo could be in this state. When decryption fails, the repo must be using non-encrypted creds. Note that creds are encrypted/decrypted using the encryption cipher which is stored in the repo, so the decryption cannot fail due to missing gpg keys etc. (For !shared encryptiom, the cipher is iteself encrypted using some gpg key(s), and the decryption of the cipher happens earlier, so not affected by this change. Print a warning message for !shared repos, and continue on using the cipher. Wrote a page explaining what users hit by this bug should do. This commit was sponsored by Samuel Tardieu.
* glacier, S3: Fix bug that caused embedded creds to not be encypted using the ↵Gravatar Joey Hess2014-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | remote's key. encryptionSetup must be called before setRemoteCredPair. Otherwise, the RemoteConfig doesn't have the cipher in it, and so no cipher is used to encrypt the embedded creds. This is a security fix for non-shared encryption methods! For encryption=shared, there's no security problem, just an inconsistentency in whether the embedded creds are encrypted. This is very important to get right, so used some types to help ensure that setRemoteCredPair is only run after encryptionSetup. Note that the external special remote bypasses the type safety, since creds can be set after the initial remote config, if the external special remote program requests it. Also note that IA remotes never use encryption, so encryptionSetup is not run for them at all, and again the type safety is bypassed. This leaves two open questions: 1. What to do about S3 and glacier remotes that were set up using encryption=pubkey/hybrid with embedcreds? Such a git repo has a security hole embedded in it, and this needs to be communicated to the user. Is the changelog enough? 2. enableremote won't work in such a repo, because git-annex will try to decrypt the embedded creds, which are not encrypted, so fails. This needs to be dealt with, especially for ecryption=shared repos, which are not really broken, just inconsistently configured. Noticing that problem for encryption=shared is what led to commit cc54ff9e49260cd94f938e69e926a273e231ef4e, which tried to fix the problem by not decrypting the embedded creds. This commit was sponsored by Josh Taylor.
* Merge branch 'master' of ssh://git-annex.branchable.comGravatar Joey Hess2014-09-18
|\