2f7fbde789
Add `vendored_openssl` feature.
...
This feature enables the `vendored` feature from the `openssl` crate and build a statically linked version of openssl.
4 years ago
dbc082dc75
Update web vault to 2.16.0 and dependencies
4 years ago
844cf70345
Updated lettre (and other crates) and workflow.
...
General:
- Updated several dependancies
Lettre:
- Updateded lettere and the workflow
- Changed encoding to base64
- Convert unix newlines to dos newlines for e-mails.
- Created custom e-mail boundary (auto generated could cause errors)
Tested the e-mails sent using several clients (Linux, Windows, MacOS, Web).
Run msglint (https://tools.ietf.org/tools/msglint/ ) on the generated e-mails until all errors were gone.
Lettre has changed quite some stuff compared between alpha.1 and alpha.2, i haven't noticed any issues sending e-mails during my tests.
4 years ago
0365b7c6a4
Add support for multiple simultaneous database features by using macros.
...
Diesel requires the following changes:
- Separate connection and pool types per connection, the generate_connections! macro generates an enum with a variant per db type
- Separate migrations and schemas, these were always imported as one type depending on db feature, now they are all imported under different module names
- Separate model objects per connection, the db_object! macro generates one object for each connection with the diesel macros, a generic object, and methods to convert between the connection-specific and the generic ones
- Separate connection queries, the db_run! macro allows writing only one that gets compiled for all databases or multiple ones
4 years ago
d9684bef6b
Generate tokens more simply and uniformly
4 years ago
171b174ce9
Update dependencies
4 years ago
32cfaab5ee
Updated dependencies and changed rocket request imports
4 years ago
1e950c7dbc
Replace IP support in preparation for compiling on stable, included some tests to check that the code matches the unstable implementation
4 years ago
fb6f96f5c3
Updated dependencies
4 years ago
a28ebcb401
Use local time in email notifications for new device logins
...
In this implementation, the `TZ` environment variable must be set
in order for the formatted output to use a more user-friendly
time zone abbreviation (e.g., `UTC`). Otherwise, the output uses
the time zone's UTC offset (e.g., `+00:00`).
4 years ago
596c9b8691
Add option to set name during HELO in email settings
4 years ago
d4357eb55a
Updated dependencies ans web vault version
4 years ago
b34d548246
Update dependencies
5 years ago
a2411eef56
Updated dependencies
5 years ago
5e802f8aa3
Update lettre to alpha release instead of git commit, and update the rest of dependencies while we are at it
5 years ago
80d4061d14
Update dependencies
5 years ago
6c5e35ce5c
Change the mails content types to more closely match what we sent before
5 years ago
63cbd9ef9c
Update lettre to latest master
5 years ago
9cca64003a
Remove unused dependency and simple feature, update dependencies and fix some clippy lints
5 years ago
4be8dae626
Make web vault show a more informative error when browsers block WebCrypto in insecure contexts and update dependencies
5 years ago
ccf6ee79d0
Update dependencies, mainly diesel and sqlite
5 years ago
7d9c7017c9
Merge pull request #911 from BlackDex/upgrade-rocket
...
Upgrade rocket
5 years ago
bd09fe1a3d
Updated code so backtraces are logged also.
5 years ago
3ce0c3d1a5
Update dependencies
...
Primarily updating rocket, which needed some dependencies
Latest versions of:
- ring
- time
- jsonwebtoken
- yubico
- rocket (git)
5 years ago
1b4b40c95d
Updated reqwest to the latest version.
...
- Use the blocking client (no async).
- Disabled gzip.
- use_sys_proxy is now default.
5 years ago
70f3ab8ec3
Migrate lazy_static to once_cell, less macro magic and slightly faster
5 years ago
b6612e90ca
Update dependencies
5 years ago
cc404b4edc
Added command line flags for help and version
...
Signed-off-by: zethra <benaagoldberg@gmail.com>
5 years ago
def174a517
Convert email domains to punycode
5 years ago
ff7b4a3d38
Update handlebars to 3.0 which included performance improvements.
...
Updated lettre to newer git revision, which should give better error messages now.
5 years ago
84ed185579
Update u2f to 0.2, which requires OpenSSL but also might solve the problems we've had with certificates.
...
The rust image doesn't need installing curl or tar, so removed. Also collapsed ENV lines.
5 years ago
9ebca99290
Update dependencies
5 years ago
c058a1d63c
Make sure handlebars is not updated, as the next patch version has breaking changes
5 years ago
95dd1cd7ad
Use rmp upstream version
5 years ago
4cec502f7b
Update docker images to alpine 3.11 and rust 1.40
5 years ago
f09996a21d
Updated dependencies
5 years ago
a5aa4d9b54
Updated dependencies
5 years ago
1e224220a8
Updated deps and fixed some lints
5 years ago
607521c88f
Updated dependencies
5 years ago
b209c1bc4d
Add an option to fetch and parse href="data:image"
...
Some sites are using base64 encoded inline images for favicons.
This will try to match those with some sane checks and return that.
These icons will have lower prio then the icons with a normal URL.
5 years ago
cbadf00941
Update web vault to fix twofactorauth.org integration
...
Update dependencies and toolchain
Update included equivalent domains with upstream changes
5 years ago
cbb92bcbc0
Updated dependencies
...
Updated some dependencies and used a git patch for lettre addressing
timeouts.
5 years ago
3442eb1b9d
Trying to fix issue #687
...
- Using an older commit from rocket repo
5 years ago
72a46fb386
Update dependencies
5 years ago
fccc0a4b05
Update rocket to latest master
...
Downgrade rust version to fix cargo issue
Set rustup profile to minimal
5 years ago
57b1d3f850
Update dependencies and docker base images
5 years ago
83fd44eeef
Update rust version and use minimal profile for CI
5 years ago
d3bd2774dc
Update dependencies to use newer SQLite
5 years ago
662bc27523
Updated dependencies and fixed disable_admin_token description
5 years ago
b73ff886c3
Use upstream rmp
5 years ago
f5f9861a78
Adds support for PostgreSQL which resolves #87 and is mentioned in #246 .
...
This includes migrations as well as Dockerfile's for amd64.
The biggest change is that replace_into isn't supported by Diesel for the
PostgreSQL backend, instead requiring the use of on_conflict. This
unfortunately requires a branch for save() on all of the models currently
using replace_into.
5 years ago
df8114f8be
Updated client kdf iterations to 100000 and fixed some lints
5 years ago
469318bcbd
Updated dependencies and web vault version
5 years ago
9101d6e48f
Update dependencies
5 years ago
c9c3f07171
Updated dependencies and fixed panic getting icons
5 years ago
05a1137828
Move backend checks to build.rs to fail fast, and updated dependencies
5 years ago
2e300da057
Fix #468 - Percent-encode the email address in invite link
5 years ago
76f38621de
Update dependencies and remove unwraps from Cipher::to_json
6 years ago
9add8e19eb
Update dependencies and remove travis unused feature
6 years ago
ee277de707
include libsqlite3-sys optionally, removed non common features
6 years ago
c11f47903a
revert include libsqlite3-sys optionally
6 years ago
6a5f1613e7
include libsqlite3-sys optionally
6 years ago
dc36f0cb6c
re-added sqlite check_db code, cleanup
6 years ago
ff759397f6
initial mysql support
6 years ago
ab95a69dc8
Rework migrations for MySQL
6 years ago
c0b2877da3
Update deps and swap back to official u2f crate again
6 years ago
95f833aacd
Update dependencies to use new ring
6 years ago
4f45cc081f
Update ring to 0.14, jwt to 6.0, and u2f
6 years ago
2a4cd24c60
Updated web vault to hide org plans again and updated dependencies
6 years ago
eadab2e9ca
Updated dependencies
6 years ago
621f607297
Update dependencies and fix some warnings
6 years ago
cfbeb56371
Implement user duo, initial version
...
TODO:
- At the moment each user needs to configure a DUO application and input the API keys, we need to check if multiple users can register with the same keys correctly and if so we could implement a global setting.
- Sometimes the Duo frame doesn't load correctly, but canceling, reloading the page and logging in again seems to fix it for me.
6 years ago
3bb46ce496
Make the syslog crate non-optional when available
6 years ago
c5832f2b30
With the latest fern, syslog can be a config option instead of a build flag
6 years ago
6b686c18f7
Fixed long e-mail message extending 1000 lines.
...
- Added quoted_printable crate to encode the e-mail messages.
- Change the way the e-mail gets build to use custom part headers.
6 years ago
349cb33fbd
Updated dependencies
6 years ago
084bc2aee3
Use final release of lettre and update dependencies
6 years ago
a25bfdd16d
Remove unused features from multipart (integration with other servers)
6 years ago
27872f476e
Update dependencies
6 years ago
10756b0920
Update dependencies and fix some lints
6 years ago
5ee04e31e5
Updated dependencies, removed some unnecessary clones and fixed some lints
6 years ago
274ea9a4f2
Use the latest fast_chemail crate directly, with the fix
6 years ago
ff2fbd322e
Update deps and fix email check
6 years ago
3db815b969
Implemented config form and fixed config priority
6 years ago
20d8d800f3
Updated dependencies
6 years ago
9657463717
Added better favicon downloader.
6 years ago
a1dc47b826
Change config to thread-safe system, needed for a future config panel.
...
Improved some two factor methods.
6 years ago
9d027b96d8
Update web-vault to fix U2F NotTrustedAnchor error
6 years ago
ce42b07a80
Update Diesel to 1.4 and other dependencies
6 years ago
e0aec8d373
Use new i64::to_be_bytes and remove byteorder dep
...
(https://doc.rust-lang.org/stable/std/primitive.i64.html#method.to_be_bytes )
6 years ago
19b6bb0fd6
Initial stab at templates
6 years ago
60f6a350be
Update yubico to fix OpenSSL error
6 years ago
f571df7367
Revert yubikey feature, not needed anymore
6 years ago
de51bc782e
Updated dependencies, removing need for yubico fork
6 years ago
1d034749f7
Fix AArch64 build by disabling yubico
6 years ago
1b11445bb2
Update dependencies and web vault
6 years ago
5f49ecd7f3
Updated dependencies to use u2f crate directly, and some style changes
6 years ago
72ed05c4a4
Add build script to get some Git info to later show in admin panel, and add some metadata to Cargo.toml
6 years ago
adb8052689
Updated Error to implement Display and Debug, instead of using custom methods
6 years ago
f2ab25085d
Updated dependencies, and dockerfiles to use NodeJS 10 LTS
6 years ago
94810c106a
Migrate to rust 2018 edition
6 years ago
2fde4e6933
Implemented proper logging, with support for file logging, timestamp and syslog (this last one is untested)
6 years ago
259a2f2982
Updated rocket to final release
6 years ago
8b5d97790f
Updated rocket to rc2 and rest of dependencies
6 years ago
e5af230315
Merge branch 'master' into rocket-0.4
...
# Conflicts:
# Cargo.toml
6 years ago
a1da82c868
Add online feature to yubico
6 years ago
a4550e51ea
Update dependencies and add /ciphers/create
6 years ago
5edbd0e952
Merge branch 'master' into rocket-0.4
...
# Conflicts:
# Cargo.lock
# Cargo.toml
# src/api/core/mod.rs
6 years ago
5a8d5e426d
Switches to Downstream yubico with Optional libusb
6 years ago
24a4478b5c
Adds yubico-rs library dep
6 years ago
c673370103
Updated bw_rs to Rocket version 0.4-rc1
6 years ago
7112c86471
Updated dependencies, removed valid mail check (now done by lettre), and updated global domains file
6 years ago
c169095128
Update dependencies to point to upstream lettre
6 years ago
3df31e3464
Temp fix for OpenSSL 1.1.1 compatibility
6 years ago
638a0fd3c3
Updated dependencies
6 years ago
928e2424c0
Updated dependencies and fixed errors
6 years ago
a01fee0b9f
Merge branch 'ws'
...
# Conflicts:
# Cargo.toml
# src/api/core/ciphers.rs
# src/main.rs
6 years ago
b63693aefb
Merge pull request #137 from stammw/master
...
SMTP implementation, along with password HINT email
6 years ago
d70864ac73
Initial version of websockets notification support.
...
For now only folder notifications are sent (create, rename, delete).
The notifications are only tested between two web-vault sessions in different browsers, mobile apps and browser extensions are untested.
The websocket server is exposed in port 3012, while the rocket server is exposed in another port (8000 by default). To make notifications work, both should be accessible in the same port, which requires a reverse proxy.
My testing is done with Caddy server, and the following config:
```
localhost {
# The negotiation endpoint is also proxied to Rocket
proxy /notifications/hub/negotiate 0.0.0.0:8000 {
transparent
}
# Notifications redirected to the websockets server
proxy /notifications/hub 0.0.0.0:3012 {
websocket
}
# Proxy the Root directory to Rocket
proxy / 0.0.0.0:8000 {
transparent
}
}
```
This exposes the service in port 2015.
6 years ago
39891e86a0
Updated dependencies, added Travis CI integration and some badges
6 years ago
69a18255c6
Bump up version to 1.0.0
6 years ago
c40baf5e17
Merge branch 'master' into beta
6 years ago
df041108f6
Bump version to 0.13.0 - latest Vault v1
6 years ago
9e63985b28
Check email validity before using it for password hint sending
6 years ago
812387e586
SMTP integration, send password hint by email.
6 years ago
b163aeb8ca
Merge changes in master to beta branch (concurrency fixes)
6 years ago
d335f45e34
Bump version to 0.12.0
6 years ago
a291dea16f
Updated dependencies and Docker image to new web-vault
6 years ago
2dc1427027
Bump the version
6 years ago
03172a6cd7
Bump version to 0.10.0
6 years ago
dae92b9018
Implemented U2F, refactored Two Factor authentication, registering U2F device and authentication should work. Works on Chrome on MacOS with a virtual device.
6 years ago
7d01947173
Updated dependencies and rust version
7 years ago
f72efa899e
Updated dependencies and created 'rust-toolchain', to mark a working nightly to rustup users, and hopefully avoid some nightly breakage.
7 years ago
f1b4a146ae
Updated version
7 years ago
b46e9c936d
Updated dependencies and removed some warnings from jsonwebtoken
7 years ago
103acd1747
Update rocket to 0.3.12
7 years ago
571ef6823d
Update rocket to 0.3.11
7 years ago
8298795087
Update dependencies and bundle SQLite with the program, so we have one less dependency to install separately
7 years ago
3a1321a5a9
Updated some dependencies and removed old unused attribute that might create compile errors
7 years ago
b4a42054f9
Updated dependencies and removed deprecated Diesel feature
7 years ago
49d080a97e
Bump the rocket version to compile with current nightly
7 years ago
9116253ae5
Updated dependencies
7 years ago
66097e5f12
r2d2_diesel is included in diesel since 1.1, so we don't need the dependencies directly.
...
Same thing with time, included in chrono
7 years ago
1277cb099d
Updated Cipher API with breaking changes, and included backwards compatibility
7 years ago
e2f7f56a81
Removed unused test library that broke with latest nightly, and updated dependencies
7 years ago
e9a771057e
Reduced Docker final image and updated dependencies
7 years ago
b54684b677
Upload and download attachments, and added License file
7 years ago
5cd40c63ed
First working version
7 years ago
Eduardo Sánchez Muñoz
Daniel García
BlackDex
Jeremy Lin
zethra
Michael Powers
Nick Fox
Nils Domrose
Nils Domrose
Emil Madsen
Stepan Fedorko-Bartos
Miroslav Prasil
Jean-Christophe BEGUE
Shane A. Faulkner
Daniel García