You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Wim 9066d09c57 Add ssh certificate support (#12281) ... * Add ssh certificate support * Add ssh certificate support to builtin ssh * Write trusted-user-ca-keys.pem based on configuration * Update app.example.ini * Update templates/user/settings/keys_principal.tmpl Co-authored-by: silverwind <me@silverwind.io> * Remove unused locale string * Update options/locale/locale_en-US.ini Co-authored-by: silverwind <me@silverwind.io> * Update options/locale/locale_en-US.ini Co-authored-by: silverwind <me@silverwind.io> * Update models/ssh_key.go Co-authored-by: silverwind <me@silverwind.io> * Add missing creation of SSH.Rootpath * Update cheatsheet, example and locale strings * Update models/ssh_key.go Co-authored-by: zeripath <art27@cantab.net> * Update models/ssh_key.go Co-authored-by: zeripath <art27@cantab.net> * Update models/ssh_key.go Co-authored-by: zeripath <art27@cantab.net> * Update models/ssh_key.go Co-authored-by: zeripath <art27@cantab.net> * Update models/ssh_key.go * Optimizations based on feedback * Validate CA keys for external sshd * Add filename option and change default filename Add a SSH_TRUSTED_USER_CA_KEYS_FILENAME option which default is RUN_USER/.ssh/gitea-trusted-user-ca-keys.pem Do not write a file when SSH_TRUSTED_USER_CA_KEYS is empty. Add some more documentation. * Remove unneeded principalkey functions * Add blank line * Apply suggestions from code review Co-authored-by: zeripath <art27@cantab.net> * Add SSH_AUTHORIZED_PRINCIPALS_ALLOW option This adds a SSH_AUTHORIZED_PRINCIPALS_ALLOW which is default email,username this means that users only can add the principals that match their email or username. To allow anything the admin need to set the option anything. This allows for a safe default in gitea which protects against malicious users using other user's prinicipals. (before that user could set it). This commit also has some small other fixes from the last code review. * Rewrite principal keys file on user deletion * Use correct rewrite method * Set correct AuthorizedPrincipalsBackup default setting * Rewrite principalsfile when adding principals * Add update authorized_principals option to admin dashboard * Handle non-primary emails Signed-off-by: Andrew Thornton <art27@cantab.net> * Add the command actually to the dashboard template * Update models/ssh_key.go Co-authored-by: silverwind <me@silverwind.io> * By default do not show principal options unless there are CA keys set or they are explicitly set Signed-off-by: Andrew Thornton <art27@cantab.net> * allow settings when enabled * Fix typos in TrustedUserCAKeys path * Allow every CASignatureAlgorithms algorithm As this depends on the content of TrustedUserCAKeys we should allow all signature algorithms as admins can choose the specific algorithm on their signing CA * Update models/ssh_key.go Co-authored-by: Lauris BH <lauris@nix.lv> * Fix linting issue Co-authored-by: silverwind <me@silverwind.io> Co-authored-by: zeripath <art27@cantab.net> Co-authored-by: Lauris BH <lauris@nix.lv> Co-authored-by: techknowlogick <matti@mdranta.net> Co-authored-by: techknowlogick <techknowlogick@gitea.io>		4 years ago
..
account.tmpl	Set appropriate `autocomplete` attributes on password fields (#13078)	4 years ago
applications.tmpl	Make SVG size argument optional (#12814)	4 years ago
applications_oauth2.tmpl	Integrate OAuth2 Provider (#5378)	5 years ago
applications_oauth2_edit.tmpl	Fixed wrong AppSubUrl in multiple templates (#10447)	4 years ago
grants_oauth2.tmpl	OAuth2 Grant UI (#6625)	5 years ago
keys.tmpl	Add ssh certificate support (#12281)	4 years ago
keys_gpg.tmpl	Update GitHub docs links for SSH & GPG (#12947)	4 years ago
keys_principal.tmpl	Add ssh certificate support (#12281)	4 years ago
keys_ssh.tmpl	Update GitHub docs links for SSH & GPG (#12947)	4 years ago
navbar.tmpl	Refactor User Settings (#3900)	6 years ago
organization.tmpl	Org action fixes and form cleanup (#10512)	4 years ago
profile.tmpl	Add placeholder text for bio profile text form (#12792)	4 years ago
repos.tmpl	Adopt repositories (#12920)	4 years ago
security.tmpl	Add support for FIDO U2F (#3971)	6 years ago
security_accountlinks.tmpl	fix links to prevent 404 after e.g. submitting a faulty form (#3982)	6 years ago
security_openid.tmpl	Add support for FIDO U2F (#3971)	6 years ago
security_twofa.tmpl	fix links to prevent 404 after e.g. submitting a faulty form (#3982)	6 years ago
security_u2f.tmpl	Make SVG size argument optional (#12814)	4 years ago
twofa_enroll.tmpl	Refactor User Settings (#3900)	6 years ago