summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Unwrap KEK outside the main loopprototype/fdb-encryptionEric Avdey2020-04-072-35/+355
|
* Cache AAD alongside of KEKEric Avdey2020-04-071-21/+22
|
* Change interface for plugin's unwrap_kekEric Avdey2020-04-073-13/+13
| | | | | | If getting KEK requires a database name, then depending on an encryption provider it could be also necessary for unwrapping it too, so pass it to unwrap function just in case.
* Use macro to choose old vs new crypto API depending on OTP versionEric Avdey2020-04-071-5/+26
|
* Make sure to use mocked config call in get_mek_failure_testEric Avdey2020-04-071-0/+1
|
* Switch to couch_keywrap in encryption providerEric Avdey2020-04-072-43/+125
|
* Use a record for cache entries for better clarityEric Avdey2020-04-071-4/+9
|
* Delegate AAD generation to encryption pluginEric Avdey2020-04-073-20/+41
|
* Request wrapped KEK out of encryption server loopEric Avdey2020-04-071-6/+39
|
* Improvements in encryption serverEric Avdey2020-04-071-32/+31
| | | | | | | | - Set sensitive flags on workers - Use longer timeout for all the calls - Don't trap exit - No superfluous init_st - Properly drain waiters on the server termination
* Encrypt whole stored in fdb value, not just doc bodyEric Avdey2020-04-072-34/+33
| | | | | | | | Instead of serializing and encrypting doc body separately this changes approach to encrypt the whole stored term prior chunkifying. This is now possible because we not depend on a stored in term update counter to derive a key anymore and saves a term/bin convertion per doc write/read.
* Rename encode/decode methods to encrypt/decryptEric Avdey2020-04-072-25/+28
|
* Revert from using update counter back to doc revs for key derivationEric Avdey2020-04-072-42/+33
| | | | This reverts commit 8f9a988c875973a530806be492cb731b55bf7d12.
* Change encryption provider to be defaultEric Avdey2020-04-073-12/+19
| | | | | | | When encryption provided registred in epi's provider chain it intercepts the call chain preventing alternative plugins from working. This changes it to be just a default module, so it'll be used when no other encryption plugins registered.
* Implement key management as an epi pluginEric Avdey2020-04-075-29/+132
|
* Add on/off config switch for encryptionEric Avdey2020-04-073-15/+37
|
* Switch from rev to update counter for key derivationEric Avdey2020-04-072-28/+34
|
* Switch to old crypto API for nowEric Avdey2020-04-071-7/+9
|
* Add basic testsEric Avdey2020-04-071-0/+38
|
* Store wrapped KEK in db configEric Avdey2020-04-072-22/+60
|
* Add basic KEK cacheEric Avdey2020-04-071-5/+15
|
* Grab KEK in main server loopEric Avdey2020-04-071-10/+11
|
* Don't block encryption server on encode/decode operationsEric Avdey2020-04-071-17/+80
|
* Add basic data encryptionEric Avdey2020-04-073-3/+153
|
* remove defer and load_ddocs from mango_utilsGarren Smith2020-04-062-63/+0
| | | | Clean up unused mango_utils functions.
* update mango tests to work with Mango on FDBGarren Smith2020-04-0614-136/+129
|
* Update mango test creds to same as elixir testsGarren Smith2020-04-063-5/+5
|
* Update Mango query to work with couch_viewsGarren Smith2020-04-069-147/+139
|
* Add mango indexingGarren Smith2020-04-067-19/+187
| | | | | | This uses couch_views_updater to create mango indexes in the doc update along with the couch_views_indexer to update the indexes in the background up to the creation versionstamp.
* Remove quorum statsGarren Smith2020-04-063-13/+1
| | | | Removing quorum stats since they are not relevant with FDB.
* Remove view_cb predicate push downGarren Smith2020-04-061-94/+1
| | | | | Removes the view callback that was performed on the nodes before sending the results back to the co-ordinator.
* remove unneeded r/w parameterGarren Smith2020-04-066-67/+6
|
* remove partition opts from mangoGarren Smith2020-04-0610-200/+10
|
* remove mango native procGarren Smith2020-04-063-375/+0
|
* Add couch_views_encoding max valueGarren Smith2020-04-061-0/+12
| | | | | Adds a max value to use for encoding. This is useful when getting the max range when encoding startkey/endkeys.
* Add couch_views_updater interactive indexerGarren Smith2020-04-069-5/+470
| | | | | | This adds the ability for couch_views to index an index in the docs update transaction. This only happens if a design doc has the field <<"interactive">> = true.
* All couch_view queries to run across transactionsGarren Smith2020-04-061-1/+2
|
* Add couch_views_indexer build to creation versionstampGarren Smith2020-04-067-33/+206
| | | | | | This creates a versionstamp for when an indexed was created and build status for indexes. if the index has a creation_vs, then couch_views_indexer will built the index to this creation versionstamp.
* add fabric2 after_doc_write pluginGarren Smith2020-04-062-0/+8
|
* add include_docs option to fold_docsGarren Smith2020-04-061-2/+25
|
* move all_doc view options to fabric2_utilGarren Smith2020-04-062-29/+39
|
* fix all_docs call to return rowGarren Smith2020-04-061-1/+2
|
* Merge pull request #2662 from cloudant/couch_view-rate_limitiilyak2020-04-0226-28/+1839
|\ | | | | Use `couch_rate` application for `couch_view`
| * Use `couch_rate` application for `couch_view`ILYA Khlopotov2020-04-0226-28/+1839
|/
* Merge pull request #2743 from apache/switch-erlfdb-couchRobert Newson2020-04-011-6/+2
|\ | | | | Switch erlfdb to the couchdb repo at tag v1.0.0
| * Switch erlfdb to the couchdb repo at tag v1.0.0Robert Newson2020-04-011-6/+2
|/
* change _all_docs to raw collationGarren Smith2020-03-302-7/+4
|
* Don't advertise unimplemented featuresJay Doane2020-03-283-12/+2
| | | | | | | | | | | Removes the following features from the welcome message: - reshard - partitioned - pluggable-storage-engines - scheduler Although `scheduler` at least will presumably be returned once that feature is complete.
* Return a 400 error code for an invalid update sequenceNick Vatamaniuc2020-03-271-0/+2
| | | | | | | | | | | | | | | | | Currently we return a 500 but a 400 return code makes more sense ``` $ http $DB1/db1/_changes?since=0-1345 HTTP/1.1 400 Bad Request { "error": "invalid_since_seq", "reason": "0-1345", "ref": 442671026 } ```
* Merge pull request #2722 from apache/couch-keywrapRobert Newson2020-03-261-0/+103
|\ | | | | Implement AES KW algorithm