Commit Graph

24 Commits

Author SHA1 Message Date
Jesse Peterson
da16c24036 switch to micromdm/plist and update jessepeterson/cfgprofiles 2025-01-17 00:13:33 -08:00
Jesse Peterson
d442653826 Support verifying SHA-2 signatures on the machine_info signer (#989) 2024-04-30 12:15:14 -07:00
Jesse Peterson
9f3e04982e switch to smallstep/pkcs7 (#944) 2023-12-02 14:41:37 -08:00
Jesse Peterson
ea82d806cf remove unused tools package 2023-10-12 21:27:05 -07:00
Kory Prince
f0dd6fe7c5 checkin: add flag to configure allowable time skew (#887) 2023-06-15 14:21:19 -07:00
Kory Prince
589b8b1170 Manually verify SHA1 certificates (fixes #854) (#855) 2023-01-24 08:33:00 -08:00
Kory Prince
50fb48b7f3 mdmctl: don't send a request body for GET requests (#821) 2022-05-13 11:24:12 -07:00
Hernan Paez
784bb35134 Fixed 502 Bad Gateway error while communicating with Apple Servers. Replaced HTTP for HTTPS on appleRootCAURL (#792) 2022-01-11 20:12:55 -08:00
Martin Friedrich
7abe02999d Golang updates (#783) 2021-10-29 19:57:49 -04:00
Jesse Peterson
4d5fbf5fd1 scep v2, Mozilla PKCS7 fork, cleanup (#737)
- Upgrade to micromdm/scep v2 & updated API usage
  - Use interfaces rather than concrete types in a few places
- Switch to Mozilla's PKCS7 fork (actually @omorsi's fork of that fork)
- Import order: stdlib, project/self, 3rd party
2021-06-09 15:44:58 -07:00
Kory Prince
b640fedb9f Fix #723 - Update intermediate cert and signature algorithm (#725)
* Update vendor signature to SHA256 (issue #723)
* Updated Apple WWDR intermediate certificate (issue #723)
2021-02-10 10:48:35 -08:00
Dan Lamppa
7da51da605 Updated mdmctl to allow base server URL to have a path (#683)
Updated mdmctl to allow server-url to have a path.

For example: "https://www.example.com/test". Prior to this, any path component was removed. The example url would have been modified to "https://www.example.com/".
2020-07-09 14:48:57 -04:00
Victor Vrantchan
11d8321192 add activation lock bypass code creation (#677)
add activation lock bypass code creation

https://developer.apple.com/documentation/devicemanagement/device_assignment/activation_lock_a_device/creating_and_using_bypass_codes
2020-06-21 13:36:28 -04:00
Victor Vrantchan
e54ae2d2fb add options for signing a profile (#602) 2019-07-13 21:38:58 -04:00
Jesse Peterson
18fc598035 Bolt backup endpoint (#514) 2018-10-14 00:01:22 -04:00
Victor Vrantchan
17bce22e95 add postgres device store (#531) 2018-10-13 21:05:19 -04:00
Danny Lockard
f45a0469f0 Some cleanup based on goreportcard linters (#517) 2018-10-02 14:54:10 -04:00
Jesse Peterson
037a0b999f Fix bug in #430 (#433) 2018-06-11 11:00:18 -07:00
Jesse Peterson
b857046412 Use constant time (#430) 2018-06-09 11:09:28 -07:00
Victor Vrantchan
70d26149ae only register HTTP routes once (#418)
Simplified the registration of HTTP routes.
Moved basic auth middleware to use the provided go-kit library.
2018-05-12 19:17:40 -04:00
Jesse Peterson
5661b62021 Implement mdmcert.download support in mdmctl (#401) 2018-05-02 22:05:32 -07:00
Lars Preben Sørsdahl
a45d79f37a Validate topic info in push certificate (#373) (#373)
Added mock push certificates and example script for cert generation
Check that push cert has required UID com.apple.mgmt prefix
Closes #367
2018-01-26 08:41:30 -05:00
Victor Vrantchan
45aacebb02 add common http functions to httputil pkg (#350) 2017-12-09 21:14:42 -05:00
Victor Vrantchan
91c236c8c3 organize essential APIs into platform, workflow and pkg folders (#337)
Add more logic to the way code is organized.

	/pkg -- library code not directly connected to micromdm
	/mdm -- packages meant for the services devices interract with. The MDM protocol.
	/dep -- DEP API and related packages.
	/platform -- Core APIs the server provides. Commands API, Devices API, queue, pubsub etc.
	/workflow -- Packages/API that build on top of platform. Today that's the webhook package.
		     Depending on what ends up here, the workflow folder might become its own repository.
2017-11-23 22:07:57 -05:00