Jeremy O'Brien
52bcaa58b2
small fixes to make the precursor updater python package work through pip
2022-07-22 09:41:43 -04:00
bunnie
bc758749fb
try to explicitly name the package.
...
this still did not work.
2022-07-22 20:11:57 +08:00
bunnie
11402ec5e6
reorg again
2022-07-22 19:54:06 +08:00
bunnie
80a8bba268
try to re-org again to get this to run as a script
2022-07-22 19:53:46 +08:00
bunnie
237ed14d28
finalize renaming so we don't have to deal with _ vs - ambiguities
2022-07-22 19:06:13 +08:00
bunnie
ee9f815fd6
restructure project
2022-07-22 19:05:26 +08:00
bunnie
4fa1236ce6
remove the _. i don't know the rules for how this transforms to - and when.
2022-07-22 18:54:56 +08:00
bunnie
aed8c89373
more restructer attemptings
2022-07-22 18:54:40 +08:00
bunnie
4e1a3beb3c
try to restructure repo to work with...idk why i am even trying.
2022-07-22 18:54:21 +08:00
bunnie
ee4e2e5d65
fix metadata on packaging for precursor_updater
...
still not sure how to make this actually work as i want it to,
but at least there's a thing you can run to like...get dependencies,
I guess.
lame.
2022-07-22 18:10:32 +08:00
bunnie
8f6fa5f53d
add a first draft of precursor_updater.py
...
this should be an "all in one" updater.
2022-07-22 03:46:31 +08:00
bunnie
bad4865ea3
shift restore.py to look at the tagged releases for artifacts
2022-07-21 01:10:52 +08:00
bunnie
14dacd9941
handle WFXerror case more gracefully
2022-07-20 21:07:52 +08:00
bunnie
95c4144bba
update release notes
2022-07-20 01:03:53 +08:00
bunnie
b5f45ec9ec
improve the wording of the menu option to setup passwords
2022-07-19 23:59:50 +08:00
bunnie
6f10061653
reset "don't ask again" flag for password creation during factory test
...
this facility is necessary in case a worker accidentally picks
the wrong setting, disabling the feature for the device. When
the factory test completes, a call is made to reset the parameter.
This was a slightly complicated affair because the the don't ask
flag is contained within the rootkeys enclave itself, and we can't
just give access to rootkeys willy-nilly. So the flag is passed
through the PDDB and then to the rootkeys enclave. It's not harmful
to have it reset by an unauthorized actor; the pop-up will not
happen if passwords are, in fact, already set.
2022-07-19 23:57:25 +08:00
bunnie
593928bd75
remove testing menu from vault for release
2022-07-19 17:58:12 +08:00
bunnie
e15969050c
bump precursors to latest tag
2022-07-19 17:40:50 +08:00
bunnie
e40a109f6c
add UX flow dedicated to the 'churn' operation
2022-07-19 16:57:47 +08:00
bunnie
0a4702d6c3
clean up dialog messages to conform to the latest lexicon
2022-07-19 16:30:00 +08:00
bunnie
9fc74e3291
strip out debug info
2022-07-19 15:56:16 +08:00
bunnie
4a9af7b220
add churn function to the PDDB command list
2022-07-19 15:32:07 +08:00
bunnie
6ea88dedee
fix hosted mode
2022-07-19 05:28:32 +08:00
bunnie
7ad418be7c
fix bug where RestoreDna backup op fails to be set.
2022-07-19 05:26:48 +08:00
bunnie
4ead1010cd
add retry flow to restore; fix salt bug
...
salt was reading from the wrong location on a device that
previously was initialized but doing a restore to.
2022-07-19 05:07:22 +08:00
bunnie
7b3c928429
whoops, a debug statement is leaking private info. nuke that.
2022-07-19 04:45:07 +08:00
bunnie
d68e3c229d
add "gutter" server for status thread so it doesn't block during autoupdates
...
this properly solves the issue of the keypress machine sending
notifications to a status thread that's not running: it creates
a dummy server that can drain the queue until the status thread
is ready to run properly.
2022-07-19 04:39:00 +08:00
bunnie
5e9e078f8a
remove debug info that can leak password data
2022-07-19 04:38:46 +08:00
bunnie
907ac038ff
make keyboard observer send messages falliable
...
this is a partial work around for the status server queue
overflow problem on boot while handling user interactions
in the auto-update flow.
2022-07-19 04:08:39 +08:00
bunnie
93ebdbcc4f
Merge branch 'backups' into main
2022-07-19 03:18:31 +08:00
bunnie
645291f8eb
add rekey test feature as a comment-option in run
2022-07-19 03:18:01 +08:00
bunnie
8dc9dddfdd
modify pdddbg.py to handle swapped up DNA for verifying rekey ops
2022-07-19 03:17:32 +08:00
bunnie
421542d9da
add auto-rekey flow to boot
2022-07-19 03:17:21 +08:00
bunnie
fa984845ed
add testing commands for rekeying.
2022-07-19 03:17:08 +08:00
bunnie
900df7b223
add testing feature for rekey in hosted mode to LLIO (dna swap)
2022-07-19 03:16:51 +08:00
bunnie
e8188309cf
add rekey operation for PDDB migrations to new devices
2022-07-19 03:16:37 +08:00
bunnie
83eb05273f
sync the PDDB before doing a backup
2022-07-18 03:09:07 +08:00
bunnie
2ca51b7d32
peeling that onion...another key verification failure in restore.
2022-07-17 23:51:45 +08:00
bunnie
8f439f8d61
add the beginning of a CI/analysis tool for backups
...
for now all the tool can do is just make sure that the
header is valid, but it can't decrypt or operate on
the backup itself.
2022-07-17 22:49:03 +08:00
bunnie
8e6728d743
improve error handling in restore script
2022-07-17 22:48:03 +08:00
bunnie
c05e66b32c
fix issue where pubkey was being erased before access
...
verification happens after the private key material is erased,
which incidentally nukes public key material, causing verification
to fail. This caches a copy of the pubkey material before
the erase happens.
2022-07-17 21:15:30 +08:00
bunnie
13e13fdfd6
add some explanation in the restore process
2022-07-17 18:50:28 +08:00
bunnie
a5685c9e62
add debugging around restore verification
...
for some reason we're getting a bogus failure on restore...
2022-07-17 18:50:10 +08:00
bunnie
15ca22eacf
fix hosted mode
2022-07-17 03:46:28 +08:00
bunnie
646a9fc1e5
fix hosted mode
2022-07-17 03:45:50 +08:00
bunnie
0cc2e46b02
fix dangling method invocation
...
complicated thing is complicated
2022-07-17 03:36:36 +08:00
bunnie
802decb55a
initial drafts at the backup and restore helper scripts
...
very, very rough but i was able to run through an entire
cycle exactly once successfully.
much more testing needed.
2022-07-17 03:13:42 +08:00
bunnie
9c7b1e3228
update update script verbiage to reflect the latest flow
2022-07-17 03:13:13 +08:00
bunnie
3550cec14a
fix double-lock on rootkeys object
2022-07-17 03:12:49 +08:00
bunnie
667470ba05
fix restore bugs
...
- read order of keys was wrong from staged data
- make restore a blocking op so the Ux doesn't try to trigger
other things at boot
- fix pubkey check to use staged key for backup flow
- fix some wording and skip redundant messages
2022-07-17 03:10:26 +08:00
