Commit Graph

101 Commits

Author SHA1 Message Date
Jesse Peterson
2d90d3b69b Allow self-signed certificates with configuration option in mdmctl (#147) 2017-04-26 09:36:34 -07:00
Jesse Peterson
93a8b481e0 Guard against errors due to DEP token bucket not existing yet (#146) 2017-04-26 09:25:14 -07:00
Jesse Peterson
ad22a7a932 Move dep-token sub-command to mdmctl (#141) 2017-04-19 09:13:27 -07:00
Jesse Peterson
a40582af11 Verify device certificate on DEP enrollment (#143) 2017-04-14 15:22:15 -07:00
Jesse Peterson
4d4c2253a9 Initial dep Gopkg.* conversion (#144)
Fixes #142.
2017-04-14 14:37:20 -07:00
Jesse Peterson
c95956535b Implement OTA (#137)
* Refactor Enroll HTTP Handler factory
* Begin `crypto` package
* Implement OTA enroll profile endpoint
* Implement Handlers, Endpoints, and encdecs for OTA Phase 2 & 3
* Implement certificate verification against Apple Device CA
* Implement Phase 2 & 3 logic based on provided CMS cert
* Provide (existing) enrollment profile on Phase 3
2017-04-14 11:52:14 -07:00
Victor Vrantchan
b19dde19d7 added proto variation of os udpate and account configuration commands (#140) 2017-04-10 00:08:48 -04:00
Victor Vrantchan
dc743df878 add support for per-device blueprints (#136)
blueprints are now saved in boltdb with mdmctl
blueprints work in a similar way to munki manifests:
The devices will use a site_default blueprint, otherwise will
look up one based on serial number.
Other blueprints can be nested
2017-04-09 17:43:44 -04:00
Nate Walck
1c190f0efe Add validation that filerepo path exists (#139) 2017-04-04 23:56:38 -04:00
Jesse Peterson
90ab393742 Avoid 500 response for empty command queue (#135)
* Avoid 500 response for empty command queue
2017-03-31 10:55:39 -07:00
loyaltyarm
ea5dab77bd marshal additional device fields (#132) 2017-03-31 02:28:18 -04:00
Jesse Peterson
42658dedaf Implement SignMessage handling to verify client SCEP certificate (#118) (#134)
* Implement SignMessage handling to verify client SCEP certificate (#118)

* Add a TODO, fix-up some sloppiness

* Use direct CN plus serial number query rather than looping over existing CNs
2017-03-29 21:47:53 -07:00
Jesse Peterson
3a3441d523 Make ~/.micromdm if it does not exist (#133)
* Mkdir on ~/.micromdm if not exist

* Use a more secure file mode as we're storing an API token here

* Use Dir()

* Use path/filepath
2017-03-28 20:29:54 -07:00
Clayton Burlison
6140b6cbe8 Update release script for mdmctl (#131) 2017-03-28 00:15:26 -04:00
Victor Vrantchan
0b83c65939 add config set command (#130)
update the params of ~/.micromdm/default.json using the CLI
2017-03-27 23:50:06 -04:00
Victor Vrantchan
ab5b25dd63 rename list command to get (#129)
Introduce generic "mdmctl get" subcommand which allows getting
various resource types from the server.
2017-03-27 22:46:15 -04:00
Victor Vrantchan
5d6cd24954 update changelog (#128) 2017-03-27 19:34:23 -04:00
Victor Vrantchan
7418de0991 ADD authentication to mdmctl and server (#127)
uses basic auth to set/read token
2017-03-27 18:50:38 -04:00
Victor Vrantchan
fcfd7c0bfb only create a UUID on initial enrollment (#125)
Closes #124

The UUID enforces uniqueness in the db. If a device is already
re-enrolling, don't create a new record.
2017-03-24 23:11:24 -04:00
Victor Vrantchan
5c66bfdbcf add list devices api (#114) 2017-03-24 22:40:14 -04:00
Jesse Peterson
511c58b9e8 Send APNS push to UDID after Commands being queued. (#122)
* Send APNS push to UDID after Commands being queued. In support of #100. Create a new protobuf & message type for post-queued commands. The push service listens for these and pushes to the devices as appropriate.

* Break out subscriber as method on Push

* Refactor event passing to use a struct

* Error on nil argument
2017-03-24 13:20:59 -07:00
Victor Vrantchan
2132963c8a update the ticker that triggers DEP sync events (#123)
the new time is every 30 minutes
2017-03-24 12:13:19 -04:00
Jesse Peterson
de5b6b23a2 Use existing savePEMKey (#121) 2017-03-23 18:21:14 -07:00
loyaltyarm
a0f1e1e485 add an -examples flag with some initial examples (#119)
Add some initial serve examples
2017-03-23 21:15:27 -04:00
Jesse Peterson
db15d167cd Remove trailing slash just once (#120) 2017-03-23 18:09:14 -07:00
Victor Vrantchan
873eef4343 add contribution page (#117)
Add contribution page and suggestions by @clburlison
2017-03-22 22:50:52 -04:00
Victor Vrantchan
acc377c578 preserve cursor during DEP fetch (#109)
For #88

load/save DEP cursor boltdb storage. Call sync once cursor is exhausted.
The sync response handling is still a TODO.
2017-03-22 20:44:04 -04:00
Jesse Peterson
12c554fce6 Include certificate in enrollment profile and use PEM certificate payload type (#116) 2017-03-22 00:02:28 -07:00
Jesse Peterson
caa3b31f98 Add a home page (#113) 2017-03-21 22:35:21 -07:00
Jesse Peterson
82d1686436 Log all HTTP requests with gorilla handlers.CombinedLoggingHandler in support of #85 (#112) 2017-03-21 22:25:31 -07:00
Jesse Peterson
6d1a49c1ef Fix panic where popFirst() can return nil (but we were immediately using it) 2017-03-22 00:23:37 -04:00
Jesse Peterson
79920771ca Add dev to usage 2017-03-21 23:21:18 -04:00
Victor Vrantchan
472d416791 decrypt private key if password provided
For #101
2017-03-21 21:12:21 -04:00
Victor Vrantchan
d46cd2e21c Add command queue for device commands.
Closes #92
2017-03-21 11:14:39 -04:00
Victor Vrantchan
bb9d423637 add race detector flag to CI tests 2017-03-21 00:45:40 -04:00
Victor Vrantchan
47e1d9a4e7 start keeping a CHANGELOG file 2017-03-21 00:45:40 -04:00
Victor Vrantchan
e000fec3c0 Fix race condition in pubsub package.
Closes #97
2017-03-21 00:45:40 -04:00
Jesse Peterson
6065d1f2c9 Ignore UserID for PushInfo TokenUpdate events 2017-03-20 08:35:28 -04:00
Victor Vrantchan
436fa6ace5 update readme v1.0.0 2017-03-19 23:17:48 -04:00
Jesse Peterson
d6afd3b292 Enforce supplying -server-url (#79) 2017-03-19 22:53:06 -04:00
Jesse Peterson
1cdc5a3450 Fix dep config init (#77) 2017-03-19 21:36:25 -04:00
Victor Vrantchan
2af1bd3d63 add old LICENSE file back 2017-03-19 20:38:26 -04:00
Victor Vrantchan
9b4d4c6180 add version command
Closes #72
2017-03-19 20:36:14 -04:00
Victor Vrantchan
a6a2433ab2 rename deptoken flags and add JSON token export
rename flags and add export option
only run DEPSim if flag is explicitly provided.
2017-03-19 20:33:20 -04:00
Victor Vrantchan
9669878d40 save device indexes in a separate bucket
This change makes it easier to range over the device bucket.
Also added some necessary tests for this package.
2017-03-19 19:03:31 -04:00
Victor Vrantchan
47cd6b7679 run tests in ci 2017-03-19 18:03:56 -04:00
Victor Vrantchan
46bfa29790 add circleci config 2017-03-19 17:24:09 -04:00
Victor Vrantchan
91983bf1f0 add readme 2017-03-19 16:51:43 -04:00
Victor Vrantchan
c936edf253 update deps 2017-03-19 16:46:44 -04:00
Victor Vrantchan
2839a40aca rewrite imports 2017-03-19 16:44:52 -04:00