9 Commits

Author	SHA1	Message	Date
Aditya Manthramurthy	5f78691fcf	ldap: Add user DN attributes list config param (#19758) ... This change uses the updated ldap library in minio/pkg (bumped up to v3). A new config parameter is added for LDAP configuration to specify extra user attributes to load from the LDAP server and to store them as additional claims for the user. A test is added in sts_handlers.go that shows how to access the LDAP attributes as a claim. This is in preparation for adding SSH pubkey authentication to MinIO's SFTP integration.	2024-05-24 16:05:23 -07:00
Aditya Manthramurthy	1c99fb106c	Update to minio/pkg/v2 (#17967)	2023-09-04 12:57:37 -07:00
Anis Elleuch	8da0f4c5bb	Better error message when TLS certs do not have proper permissions (#16703)	2023-02-24 06:34:55 -08:00
Klaus Post	ff12080ff5	Remove deprecated io/ioutil (#15707)	2022-09-19 11:05:16 -07:00
Harshavardhana	fd349103e8	fix: allow P-384/P-512 constant time implementation (#15445) ... since go1.18.x P-384/P-512 are now constant time implementations, enable them.	2022-08-01 09:27:16 -07:00
Harshavardhana	c39eb3bacd	fix: possible crash if private.key is empty (#14208) ... Before ``` panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x10 pc=0x9f54f7] goroutine 1 [running]: crypto/x509.IsEncryptedPEMBlock(...) crypto/x509/pem_decrypt.go:105 github.com/minio/minio/internal/config.LoadX509KeyPair({0xc00061e270, 0x0}, {0xc00061e2d0, 0x25}) github.com/minio/minio/internal/config/certs.go:88 +0xf7 github.com/minio/pkg/certs.(*Manager).AddCertificate(0xc000576150, {0xc00061e270, 0x25}, {0xc00061e2d0, 0x25}) github.com/minio/pkg@v1.1.15/certs/certs.go:132 +0x368 github.com/minio/pkg/certs.NewManager({0x51f5910, 0xc00053e140}, {0xc00061e270, 0xc000580400}, {0xc00061e2d0, 0x25}, 0x4dc5880) github.com/minio/pkg@v1.1.15/certs/certs.go:97 +0x170 github.com/minio/minio/cmd.getTLSConfig() ``` After ``` ERROR Unable to load the TLS configuration: The private key is not readable > Please check your certificate ```	2022-01-30 12:55:21 -08:00
Harshavardhana	661b263e77	add gocritic/ruleguard checks back again, cleanup code. (#13665) ... - remove some duplicated code - reported a bug, separately fixed in #13664 - using strings.ReplaceAll() when needed - using filepath.ToSlash() use when needed - remove all non-Go style comments from the codebase Co-authored-by: Aditya Manthramurthy <donatello@users.noreply.github.com>	2021-11-16 09:28:29 -08:00
Anis Elleuch	d86513cbba	tls: Better error message when certificate curve is not supported (#13462)	2021-10-18 09:32:16 -07:00
Harshavardhana	1f262daf6f	rename all remaining packages to internal/ (#12418) ... This is to ensure that there are no projects that try to import `minio/minio/pkg` into their own repo. Any such common packages should go to `https://github.com/minio/pkg`	2021-06-01 14:59:40 -07:00