ogb912/micromdm
1
0
Fork 0
mirror of https://github.com/micromdm/micromdm/ synced 2026-08-14 17:41:43 +08:00
Code Issues Packages Projects Releases Wiki Activity
158 Commits 10 Branches 24 Tags
aacac399459280578d891edf3f4cfce9f34f5ef4
Commit Graph

158 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jesse Peterson
316053b065 Better error message for APNs certificate expiry (#152) 
* Better error message for APNs certificate expiry
 2017-05-21 22:18:30 -07:00
Jesse Peterson
284f368353 Blueprint profile integration (#163) 
* Integrate Profiles into Blueprints
* Listen for events and deploy blueprints for new enrollments
* Track enrolled status of (re-)enrolling devices and re-issue the Check-In Event under a different topic
* Added references to #149 and #110 for direction/conceptual background
* Closes #149 (largely implemented here)
 2017-05-21 22:12:42 -07:00
Victor Vrantchan
e902ba69bc save DEP cursor during fetch/sync ops (#159) 
Closes #158
 2017-05-21 15:06:09 -04:00
Jesse Peterson
670b4399db Profile service/store, API, and mdmctl management (#156) 
* Profile service/store, API, and mdmctl management
* Group methods with their types
* Centralize error checking and remove profile ID specification on upload (unnecessary)
* Move more error checking into methods
 2017-05-17 00:19:26 -07:00
Jesse Peterson
1cf4e86d8a Add optional -config-path flag and base all other paths off this location (#155) 
Closes #89.
 2017-05-16 14:04:16 -07:00
Jesse Peterson
ce1cb87152 Past-due reorganization of some crypto helpers into the crypto package (#148) 2017-05-01 10:14:52 -07:00
Jesse Peterson
6d5fd5e97a Blueprints apply and list/get (#145) 2017-04-26 09:56:32 -07:00
Jesse Peterson
2d90d3b69b Allow self-signed certificates with configuration option in mdmctl (#147) 2017-04-26 09:36:34 -07:00
Jesse Peterson
93a8b481e0 Guard against errors due to DEP token bucket not existing yet (#146) 2017-04-26 09:25:14 -07:00
Jesse Peterson
ad22a7a932 Move dep-token sub-command to mdmctl (#141) 2017-04-19 09:13:27 -07:00
Jesse Peterson
a40582af11 Verify device certificate on DEP enrollment (#143) 2017-04-14 15:22:15 -07:00
Jesse Peterson
4d4c2253a9 Initial dep Gopkg.* conversion (#144) 
Fixes #142.
 2017-04-14 14:37:20 -07:00
Jesse Peterson
c95956535b Implement OTA (#137) 
* Refactor Enroll HTTP Handler factory
* Begin `crypto` package
* Implement OTA enroll profile endpoint
* Implement Handlers, Endpoints, and encdecs for OTA Phase 2 & 3
* Implement certificate verification against Apple Device CA
* Implement Phase 2 & 3 logic based on provided CMS cert
* Provide (existing) enrollment profile on Phase 3
 2017-04-14 11:52:14 -07:00
Victor Vrantchan
b19dde19d7 added proto variation of os udpate and account configuration commands (#140) 2017-04-10 00:08:48 -04:00
Victor Vrantchan
dc743df878 add support for per-device blueprints (#136) 
blueprints are now saved in boltdb with mdmctl
blueprints work in a similar way to munki manifests:
The devices will use a site_default blueprint, otherwise will
look up one based on serial number.
Other blueprints can be nested
 2017-04-09 17:43:44 -04:00
Nate Walck
1c190f0efe Add validation that filerepo path exists (#139) 2017-04-04 23:56:38 -04:00
Jesse Peterson
90ab393742 Avoid 500 response for empty command queue (#135) 
* Avoid 500 response for empty command queue
 2017-03-31 10:55:39 -07:00
loyaltyarm
ea5dab77bd marshal additional device fields (#132) 2017-03-31 02:28:18 -04:00
Jesse Peterson
42658dedaf Implement SignMessage handling to verify client SCEP certificate (#118) (#134) 
* Implement SignMessage handling to verify client SCEP certificate (#118)

* Add a TODO, fix-up some sloppiness

* Use direct CN plus serial number query rather than looping over existing CNs
 2017-03-29 21:47:53 -07:00
Jesse Peterson
3a3441d523 Make ~/.micromdm if it does not exist (#133) 
* Mkdir on ~/.micromdm if not exist

* Use a more secure file mode as we're storing an API token here

* Use Dir()

* Use path/filepath
 2017-03-28 20:29:54 -07:00
Clayton Burlison
6140b6cbe8 Update release script for mdmctl (#131) 2017-03-28 00:15:26 -04:00
Victor Vrantchan
0b83c65939 add config set command (#130) 
update the params of ~/.micromdm/default.json using the CLI
 2017-03-27 23:50:06 -04:00
Victor Vrantchan
ab5b25dd63 rename list command to get (#129) 
Introduce generic "mdmctl get" subcommand which allows getting
various resource types from the server.
 2017-03-27 22:46:15 -04:00
Victor Vrantchan
5d6cd24954 update changelog (#128) 2017-03-27 19:34:23 -04:00
Victor Vrantchan
7418de0991 ADD authentication to mdmctl and server (#127) 
uses basic auth to set/read token
 2017-03-27 18:50:38 -04:00
Victor Vrantchan
fcfd7c0bfb only create a UUID on initial enrollment (#125) 
Closes #124

The UUID enforces uniqueness in the db. If a device is already
re-enrolling, don't create a new record.
 2017-03-24 23:11:24 -04:00
Victor Vrantchan
5c66bfdbcf add list devices api (#114) 2017-03-24 22:40:14 -04:00
Jesse Peterson
511c58b9e8 Send APNS push to UDID after Commands being queued. (#122) 
* Send APNS push to UDID after Commands being queued. In support of #100. Create a new protobuf & message type for post-queued commands. The push service listens for these and pushes to the devices as appropriate.

* Break out subscriber as method on Push

* Refactor event passing to use a struct

* Error on nil argument
 2017-03-24 13:20:59 -07:00
Victor Vrantchan
2132963c8a update the ticker that triggers DEP sync events (#123) 
the new time is every 30 minutes
 2017-03-24 12:13:19 -04:00
Jesse Peterson
de5b6b23a2 Use existing savePEMKey (#121) 2017-03-23 18:21:14 -07:00
loyaltyarm
a0f1e1e485 add an -examples flag with some initial examples (#119) 
Add some initial serve examples
 2017-03-23 21:15:27 -04:00
Jesse Peterson
db15d167cd Remove trailing slash just once (#120) 2017-03-23 18:09:14 -07:00
Victor Vrantchan
873eef4343 add contribution page (#117) 
Add contribution page and suggestions by @clburlison
 2017-03-22 22:50:52 -04:00
Victor Vrantchan
acc377c578 preserve cursor during DEP fetch (#109) 
For #88

load/save DEP cursor boltdb storage. Call sync once cursor is exhausted.
The sync response handling is still a TODO.
 2017-03-22 20:44:04 -04:00
Jesse Peterson
12c554fce6 Include certificate in enrollment profile and use PEM certificate payload type (#116) 2017-03-22 00:02:28 -07:00
Jesse Peterson
caa3b31f98 Add a home page (#113) 2017-03-21 22:35:21 -07:00
Jesse Peterson
82d1686436 Log all HTTP requests with gorilla handlers.CombinedLoggingHandler in support of #85 (#112) 2017-03-21 22:25:31 -07:00
Jesse Peterson
6d1a49c1ef Fix panic where popFirst() can return nil (but we were immediately using it) 2017-03-22 00:23:37 -04:00
Jesse Peterson
79920771ca Add dev to usage 2017-03-21 23:21:18 -04:00
Victor Vrantchan
472d416791 decrypt private key if password provided 
For #101
 2017-03-21 21:12:21 -04:00
Victor Vrantchan
d46cd2e21c Add command queue for device commands. 
Closes #92
 2017-03-21 11:14:39 -04:00
Victor Vrantchan
bb9d423637 add race detector flag to CI tests 2017-03-21 00:45:40 -04:00
Victor Vrantchan
47e1d9a4e7 start keeping a CHANGELOG file 2017-03-21 00:45:40 -04:00
Victor Vrantchan
e000fec3c0 Fix race condition in pubsub package. 
Closes #97
 2017-03-21 00:45:40 -04:00
Jesse Peterson
6065d1f2c9 Ignore UserID for PushInfo TokenUpdate events 2017-03-20 08:35:28 -04:00
Victor Vrantchan
436fa6ace5 update readme v1.0.0 2017-03-19 23:17:48 -04:00
Jesse Peterson
d6afd3b292 Enforce supplying -server-url (#79) 2017-03-19 22:53:06 -04:00
Jesse Peterson
1cdc5a3450 Fix dep config init (#77) 2017-03-19 21:36:25 -04:00
Victor Vrantchan
2af1bd3d63 add old LICENSE file back 2017-03-19 20:38:26 -04:00
Victor Vrantchan
9b4d4c6180 add version command 
Closes #72
 2017-03-19 20:36:14 -04:00