Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ssl support #925

Merged
merged 1 commit into from
Jun 30, 2024
Merged

Ssl support #925

merged 1 commit into from
Jun 30, 2024

Conversation

synfinatic
Copy link
Owner

No description provided.

Copy link

codecov bot commented Jun 29, 2024

Codecov Report

Attention: Patch coverage is 92.30769% with 8 lines in your changes missing coverage. Please review.

Project coverage is 83.64%. Comparing base (8363d9d) to head (0693c6a).

Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #925      +/-   ##
==========================================
+ Coverage   83.40%   83.64%   +0.24%     
==========================================
  Files          40       40              
  Lines        2843     2934      +91     
==========================================
+ Hits         2371     2454      +83     
- Misses        384      388       +4     
- Partials       88       92       +4     
Flag Coverage Δ
unittests 83.64% <92.31%> (+0.24%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files Coverage Δ
internal/storage/json_store.go 95.45% <100.00%> (+0.89%) ⬆️
internal/storage/keyring.go 92.67% <100.00%> (+0.62%) ⬆️
internal/storage/storage.go 96.30% <100.00%> (+1.06%) ⬆️
internal/ecs/client/client.go 92.16% <93.94%> (-0.34%) ⬇️
internal/ecs/server/server.go 92.68% <73.91%> (-7.32%) ⬇️

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8363d9d...0693c6a. Read the comment docs.

@synfinatic synfinatic force-pushed the ssl-support branch 2 times, most recently from 5a6f38e to b196c7c Compare June 29, 2024 03:07
@@ -18,8 +18,7 @@ encrypted over ssh.

**Note:** The root user or anyone with [CAP_NET_RAW or CAP_NET_ADMIN](https://man7.org/linux/man-pages/man7/capabilities.7.html)
will be able to intercept the HTTP traffic on either endpoint and obtain the bearer token
and/or any IAM Credentials stored in the ECS Server. As of this time, `aws-sso` does
[not support HTTPS](https://github.com/synfinatic/aws-sso-cli/issues/518) for full end-to-end encryption.
and/or any IAM Credentials stored in the ECS Server if you have not [enabled SSL](ecs-server.md#enable-ssl).

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚫 [linkspector] reported by reviewdog 🐶
Cannot reach ecs-server.md#enable-ssl. Status: 404 Cannot find section: #enable-ssl in file: /home/runner/work/aws-sso-cli/aws-sso-cli/docs/ecs-server.md.

@synfinatic synfinatic force-pushed the ssl-support branch 6 times, most recently from ced2158 to c250e7b Compare June 30, 2024 04:53
* add `ecs cert` command to load cert/private key
* Stores the cert/private key in the secure store
* Re-think how the http auth CLi args work

Fixes: #518
@synfinatic synfinatic merged commit 42feabc into main Jun 30, 2024
7 checks passed
@synfinatic synfinatic deleted the ssl-support branch June 30, 2024 05:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant