Étienne Mollier
f0440fbd6b
Dynamically evaluate proper mariadb-server-<version>
2019-08-15 15:12:06 +02:00
Alexandre Aubin
2dc809548b
Fixing again the whole permission / cert situation for slapd ... for good this time hopefully
2019-08-13 17:32:55 +02:00
Alexandre Aubin
6f48d1d855
Get rid of those sudo's ... otherwise, because sudo is in fact sudo-ldap, might create weird errors or stuck situation where everything is broken because slapd is stopped and the regenconf can't restart it
2019-08-12 11:16:07 +02:00
Alexandre Aubin
0a2d1c7eb6
We need this also to have proper permissions on certs
2019-08-12 11:16:04 +02:00
Alexandre Aubin
dde3a19350
Fix some critical permissions issues with ssl / slapd configuration
2019-08-12 01:56:24 +02:00
Alexandre Aubin
10f1651022
Moving to the post-regen part because the pre-regen part should touch as little as possible of the actual system config
2019-08-03 21:00:44 +02:00
yalh76
bae6fe86f3
spelling
2019-08-01 22:28:55 +02:00
yalh76
577d8f477f
Add openldap user in the ssl-cert grou
2019-07-14 14:25:09 +02:00
Alexandre Aubin
59e2db99ba
Merge branch 'stretch-unstable' into group_permission
2019-07-05 20:59:10 +02:00
Alexandre Aubin
b9197b6269
Fix 'unable to write random state in SSL init (same patch as for yunohost-admin)
2019-06-27 00:57:28 +02:00
Alexandre Aubin
d8b086a06a
[fix] Running slapindex seems to fix the previous issues about LDAP indexing stuff
2019-06-06 19:26:49 +02:00
Alexandre Aubin
24cfc15536
Merge branch 'stretch-unstable' into group_permission
2019-05-31 18:15:09 +02:00
Josué Tille
f839ec5153
Improve restoration mecanisme for LDAP integrity
2019-05-26 00:54:57 +02:00
Alexandre Aubin
93d0fbc4cf
Merge pull request #696 from rds13/featurePostfixRemoveTLSv1Support
...
[enh] Propose a setting to remove support for TLSv1 and TLSv1.1 in Postfix
2019-05-14 19:19:25 +02:00
Josué Tille
fde8cafa4e
Merge remote-tracking branch 'upstream/stretch-unstable' into group_permission
2019-05-10 22:53:06 +02:00
Alexandre Aubin
ce465476f2
Merge pull request #704 from kay0u/patch-6
...
[FIX] Hook backup warning message
2019-04-25 13:51:38 +02:00
Alexandre Aubin
1fc9f7ddad
Fix yunohost_admin.conf initialization
2019-04-11 14:27:09 +02:00
Kayou
b7bf951538
Tired of seeing this warning message
2019-04-10 12:15:21 +02:00
Romuald du Song
15ac51098d
propose a setting to remove support for TLSv1 and TLSv1.1
2019-03-28 22:03:25 +01:00
Alexandre Aubin
fefa44e062
Typo in previous commits
2019-03-22 17:14:48 +01:00
Alexandre Aubin
dcff10f6f8
Simplify setting usage in regenconf hooks
2019-03-22 16:31:45 +01:00
Alexandre Aubin
fee79820e0
Rename nginx and ssh compatibility setting for consistency
2019-03-22 16:15:11 +01:00
Alexandre Aubin
650232b1c3
Merge branch 'stretch-unstable' into group_permission
2019-03-05 02:59:05 +01:00
Alexandre Aubin
a1d85b6350
Merge branch 'stretch-unstable' into featureCipherStrategy
2019-02-25 00:56:20 +01:00
Alexandre Aubin
d495d315c0
[fix] Loading only one helper file leads to errors because missing getopts
2019-02-16 16:36:35 +01:00
Romuald du Song
aaf6dba8d7
fix yunhost admin config filename
2019-02-14 23:03:27 +01:00
Romuald du Song
a899102efc
don't share setting for nginx and ssh
2019-02-14 22:57:24 +01:00
Romuald du Song
12d0e0e1de
add instruction to rebuild yunohost-admin conf
2019-02-14 22:34:35 +01:00
Romuald du Song
e0aaf6f8a1
add trace for process check
2019-02-09 11:56:33 +01:00
Romuald du Song
8e1034771a
use setting security_ciphers_compatibility to define security configurations
2019-02-04 23:01:16 +01:00
Josué Tille
b01e4b61f5
Implement backup - restore and update test
2019-01-17 22:15:13 +01:00
Josué Tille
d975ed2689
Update LDAP config
2019-01-17 22:14:24 +01:00
Alexandre Aubin
6a7990d7fb
[fix] Weird duplicated code + fix missing key file triggering an error
2019-01-04 16:25:49 +01:00
Alexandre Aubin
4f05cd5b2b
Uh for some reason we need to return *0* explicitly
2018-12-03 16:56:28 +00:00
Alexandre Aubin
447372d07c
[enh] Clean + harden sshd config using Mozilla recommendation ( #590 )
...
* Clean sshd_config + harden using Mozilla recommendation
* Order of keys matter, ed25519 is recommended
2018-12-03 17:03:22 +01:00
Alexandre Aubin
0576b17442
Simplify code / indentation levels
2018-11-28 21:03:28 +00:00
Alexandre Aubin
4db65682eb
Fix IPv6 handling in ssh regen conf script
2018-11-28 20:42:39 +00:00
Alexandre Aubin
6a812190c5
Enforce permissions for /etc/ssh/sshd_config
2018-11-28 20:27:42 +00:00
Alexandre Aubin
f295c83fd3
Order of keys matter, ed25519 is recommended
2018-11-28 19:15:21 +00:00
Alexandre Aubin
3d81f032e9
Fixes following tests (some sshd_config options do not exists or are deprecated)
2018-11-28 17:50:20 +00:00
Alexandre Aubin
fad4ff090a
Use templating for more robustness about which SSH keys are enabled
2018-11-28 00:26:25 +01:00
Alexandre Aubin
325678f541
More explicit name for setting
2018-11-28 00:04:25 +01:00
Alexandre Aubin
7b6bf6f4b8
Missing 'get'
2018-11-28 00:03:25 +01:00
ljf
8e0086d493
[fix] Allow user to trigger the moment when they remove dsa
2018-11-28 00:00:30 +01:00
ljf
8598d81bb1
[wip] Standardize ssh config
2018-11-27 23:58:29 +01:00
Alexandre Aubin
662666fb5a
Readability improvement
2018-11-18 17:56:19 +01:00
Alexandre Aubin
b5afd0abc4
We do need to use the serial file and to generate it ourselves
2018-11-18 17:56:19 +01:00
frju365
fa66a7b8c7
OCSP Stapling ( #533 )
...
* [enh] Jinja templating
* [enh] try to enable OCSP
* typo
* [mod] use jq (json parsing)
* typo
* well escaping "" :)
* [fix] if 2d part condition
* We need to include this for ynh_render_template to be available >.> ...
* Simplify code
* Gotta export domain too...
* Remove quotes in variable itself..
* Replace previous code blocks by new code
2018-10-27 16:38:25 +02:00
ljf (zamentur)
8e574d2b5f
[fix] Error due to unwanted backslash ! ( #541 )
2018-09-13 15:36:18 +02:00
ljf (zamentur)
ff7942b246
[enh] Don't backp user home with .nobackup file
2018-09-03 13:15:31 +02:00
