80664d1a27
* Move portbase into monorepo * Add new simple module mgr * [WIP] Switch to new simple module mgr * Add StateMgr and more worker variants * [WIP] Switch more modules * [WIP] Switch more modules * [WIP] swtich more modules * [WIP] switch all SPN modules * [WIP] switch all service modules * [WIP] Convert all workers to the new module system * [WIP] add new task system to module manager * [WIP] Add second take for scheduling workers * [WIP] Add FIXME for bugs in new scheduler * [WIP] Add minor improvements to scheduler * [WIP] Add new worker scheduler * [WIP] Fix more bug related to new module system * [WIP] Fix start handing of the new module system * [WIP] Improve startup process * [WIP] Fix minor issues * [WIP] Fix missing subsystem in settings * [WIP] Initialize managers in constructor * [WIP] Move module event initialization to constrictors * [WIP] Fix setting for enabling and disabling the SPN module * [WIP] Move API registeration into module construction * [WIP] Update states mgr for all modules * [WIP] Add CmdLine operation support * Add state helper methods to module group and instance * Add notification and module status handling to status package * Fix starting issues * Remove pilot widget and update security lock to new status data * Remove debug logs * Improve http server shutdown * Add workaround for cleanly shutting down firewall+netquery * Improve logging * Add syncing states with notifications for new module system * Improve starting, stopping, shutdown; resolve FIXMEs/TODOs * [WIP] Fix most unit tests * Review new module system and fix minor issues * Push shutdown and restart events again via API * Set sleep mode via interface * Update example/template module * [WIP] Fix spn/cabin unit test * Remove deprecated UI elements * Make log output more similar for the logging transition phase * Switch spn hub and observer cmds to new module system * Fix log sources * Make worker mgr less error prone * Fix tests and minor issues * Fix observation hub * Improve shutdown and restart handling * Split up big connection.go source file * Move varint and dsd packages to structures repo * Improve expansion test * Fix linter warnings * Fix interception module on windows * Fix linter errors --------- Co-authored-by: Vladimir Stoilov <vladimir@safing.io>
43 lines
1.6 KiB
Go
43 lines
1.6 KiB
Go
package helper
|
|
|
|
import (
|
|
"github.com/safing/jess"
|
|
"github.com/safing/portmaster/base/updater"
|
|
)
|
|
|
|
var (
|
|
// VerificationConfig holds the complete verification configuration for the registry.
|
|
VerificationConfig = map[string]*updater.VerificationOptions{
|
|
"": { // Default.
|
|
TrustStore: BinarySigningTrustStore,
|
|
DownloadPolicy: updater.SignaturePolicyRequire,
|
|
DiskLoadPolicy: updater.SignaturePolicyWarn,
|
|
},
|
|
"all/intel/": nil, // Disable until IntelHub supports signing.
|
|
}
|
|
|
|
// BinarySigningKeys holds the signing keys in text format.
|
|
BinarySigningKeys = []string{
|
|
// Safing Code Signing Key #1
|
|
"recipient:public-ed25519-key:safing-code-signing-key-1:92bgBLneQUWrhYLPpBDjqHbpFPuNVCPAaivQ951A4aq72HcTiw7R1QmPJwFM1mdePAvEVDjkeb8S4fp2pmRCsRa8HrCvWQEjd88rfZ6TznJMfY4g7P8ioGFjfpyx2ZJ8WCZJG5Qt4Z9nkabhxo2Nbi3iywBTYDLSbP5CXqi7jryW7BufWWuaRVufFFzhwUC2ryWFWMdkUmsAZcvXwde4KLN9FrkWAy61fGaJ8GCwGnGCSitANnU2cQrsGBXZzxmzxwrYD",
|
|
// Safing Code Signing Key #2
|
|
"recipient:public-ed25519-key:safing-code-signing-key-2:92bgBLneQUWrhYLPpBDjqHbPC2d1o5JMyZFdavWBNVtdvbPfzDewLW95ScXfYPHd3QvWHSWCtB4xpthaYWxSkK1kYiGp68DPa2HaU8yQ5dZhaAUuV4Kzv42pJcWkCeVnBYqgGBXobuz52rFqhDJy3rz7soXEmYhJEJWwLwMeioK3VzN3QmGSYXXjosHMMNC76rjufSoLNtUQUWZDSnHmqbuxbKMCCsjFXUGGhtZVyb7bnu7QLTLk6SKHBJDMB6zdL9sw3",
|
|
}
|
|
|
|
// BinarySigningTrustStore is an in-memory trust store with the signing keys.
|
|
BinarySigningTrustStore = jess.NewMemTrustStore()
|
|
)
|
|
|
|
func init() {
|
|
for _, signingKey := range BinarySigningKeys {
|
|
rcpt, err := jess.RecipientFromTextFormat(signingKey)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
err = BinarySigningTrustStore.StoreSignet(rcpt)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
}
|
|
}
|