{"push_id":2592259117,"size":67,"distinct_size":67,"ref":"refs/heads/develop","head":"fabae574f3f9b0517c88aea627811addf9c61a0c","before":"e3b6e01a6cc9acf40d15840ec3981cfe2252cd99","commits":[{"sha":"26bff17c6a8ae078788a5adbca0238afda5b084e","author":{"name":"Nicholas Clarke","email":"75ef9faee755c70589550b513ad881e5a603182c@topos.org.uk"},"message":"[CDEC-293] Rework storage layer to store blocks and undos in the same file\n\nThis is an attempt at \"simplest possible change\" which moves us in the\ndirection of using fewer files for the block storage. However, this also\ntries to tidy up some of the way 'SerializedBlunds' were handled. It avoids\ncases where we end up doing serialize/deserialize loops, and tries to remove\na bunch of unneeded functions.\n\nI still don't like this way of handling things - in particular, the contract\non _how_ exactly a `Blund` is stored is completely implicit, yet not isolated\nto this module.","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/26bff17c6a8ae078788a5adbca0238afda5b084e"},{"sha":"810ba906ea9a95224733013541df5ca7d16eb2a0","author":{"name":"Nicholas Clarke","email":"75ef9faee755c70589550b513ad881e5a603182c@topos.org.uk"},"message":"[CDEC-293] Consolidate blund information on read","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/810ba906ea9a95224733013541df5ca7d16eb2a0"},{"sha":"b280fbc328ea79b8fd68356e03da816057c99a80","author":{"name":"Erik de Castro Lopo","email":"1586a8e151fb6d548e7a343b9bcdfea42e83ffc0@mega-nerd.com"},"message":"wallet: Remove redundant constraints","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/b280fbc328ea79b8fd68356e03da816057c99a80"},{"sha":"7d3a27dd80725222c8b2f348cda87115b4076dfe","author":{"name":"Erik de Castro Lopo","email":"1586a8e151fb6d548e7a343b9bcdfea42e83ffc0@mega-nerd.com"},"message":"[CDEC-317] Move binary/Pos to binary/src/Pos","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/7d3a27dd80725222c8b2f348cda87115b4076dfe"},{"sha":"350d5564d764aea3667cb5e31e26b837bf16dbce","author":{"name":"Erik de Castro Lopo","email":"1586a8e151fb6d548e7a343b9bcdfea42e83ffc0@mega-nerd.com"},"message":"[CDEC-317] Move test modules to a separate package","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/350d5564d764aea3667cb5e31e26b837bf16dbce"},{"sha":"3786f5f7a31680703ef292ca38b9ab7289fcc65f","author":{"name":"Erik de Castro Lopo","email":"1586a8e151fb6d548e7a343b9bcdfea42e83ffc0@mega-nerd.com"},"message":"[CDEC-317] Follow changes to binary package","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/3786f5f7a31680703ef292ca38b9ab7289fcc65f"},{"sha":"62ec77afc0453fc9c7b51130418c4735d9673dff","author":{"name":"Denis Shevchenko","email":"b3ba130d5684fac379314e80abafadb70d0b75dd@iohk.io"},"message":"[CSL-2209] Check client certs, WIP.","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/62ec77afc0453fc9c7b51130418c4735d9673dff"},{"sha":"69e6c0a0c5a4c6e7287eb23e7f9306efa83c9fc5","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Fix Server-side certificate checks\n\nThe library we pulled in (Data.X509) seems to be thought from a client\nperspective (at least for the default validation) as I suppose it is the\nmost common use-case. Hence, by default, the validate function tries to\nverify that the hostname we're trying to reach actually matches one of\nthe alternative names in the target certificate (see #ValidationHooks).\nThis is wrong in our server check for we can't really assume anything\nabout the client's origin. What we can (ought to) do here however is to\nverify the client's name / identifier to match against a list of\naccepted client (provided the certificate is valid and was delivered by\nthe approved server's authority).","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/69e6c0a0c5a4c6e7287eb23e7f9306efa83c9fc5"},{"sha":"cbb417ff5db959b5b830a4c1f48b79045b501a77","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Re-generate fresh certificates (server & client)\n\nThis is done using build-certificates-unix.sh from 'deadalus'. The script's configuration has\nbeen slightly altered to be more lenient with the server's alternative names (localhost etc..)","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/cbb417ff5db959b5b830a4c1f48b79045b501a77"},{"sha":"d99e9c62d03e9bcb50ebfbda4d97507b0a3c7ac7","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Complete CLI parser for TLS clients\n\nThere's a bit of duplication between wallet and wallet-new but I guess this is acceptable provided\nwe'll be getting rid of 'wallet' rather soon in favor of wallet-new","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/d99e9c62d03e9bcb50ebfbda4d97507b0a3c7ac7"},{"sha":"e5e901e58ae396c610ab5db20d4dfc45a467a0b2","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Disjoin documentation from API and serve it on a different port\n\nThe documentation was being serve by the same server which we just protected with client cert\nverification. Therefore, for the browser, it'd require a user to install a certificate in order\nto be able to access the documentation. Yet, there's no clear reason to require a two-way\nauthentication in that case. We can't really whitelist some paths of the server as TLS happens\none layer before that. Therefore, we had to decouple the documentation from the API and serves it\nfrom a different port, using another web server.","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/e5e901e58ae396c610ab5db20d4dfc45a467a0b2"},{"sha":"caedd164ae065a9604b37c2bccf0d1131658caf5","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Re-Use Text.splitOn method instead of splitOn on strings","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/caedd164ae065a9604b37c2bccf0d1131658caf5"},{"sha":"572edef58e206d4355000963ff12fc95abebb83d","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Remove 'accepted clients' from CLI and server-side check\n\nAs discussed, this is only cluttering the feature at the moment. We don't do\nanything with this and only have one client anyway. We may introduce that later on\nif required.\nInstead, I've replaced the check on the client's name with a check on\nthe keyusage purpose of the underlying client certificate since it was\nthe original intent with that name check (to prevent server certs to be\nused instead of client certs).","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/572edef58e206d4355000963ff12fc95abebb83d"},{"sha":"3fb92f7cce391baba2983ebbe468271f79d28869","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Update bits of documentation about accessing API doc (now behind 8091)","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/3fb92f7cce391baba2983ebbe468271f79d28869"},{"sha":"8a79e641a924a634e7a82132a2b3579909c33ad3","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Remove previously introduced type-aliases\n\nTurns out they make signatures more readable but also more opaque. Trying to reduce cognitive load here in favor\nof some extra lines.","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/8a79e641a924a634e7a82132a2b3579909c33ad3"},{"sha":"404d520f6f117adb1bf67a93b475dd89a209754d","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Remove outdated docker.md and slightly tweak exchange-onboarding\n\nAs discussed with @disasm, this docker doc is a bit outdated and more information are actually available in exchange-onboarding\nabout using docker.","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/404d520f6f117adb1bf67a93b475dd89a209754d"},{"sha":"198f824fb0b810f26528add9ccb9e17882828e6a","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2209] Add nix attribute to override wallet-doc-address\n\nAnd associated documentation in sample-wallet-config.nix & docs/exchange-onboarding.md","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/198f824fb0b810f26528add9ccb9e17882828e6a"},{"sha":"2def58666b137f3bc0012114db58e222bcf8228c","author":{"name":"Alfredo Di Napoli","email":"bf75133d1be9d19c0d04692c43bcbb1362e1bd70@iohk.io"},"message":"Merge pull request #2821 from input-output-hk/KtorZ/CSL-2209/server-side-TLS-check\n\n[CSL 2209] - Server side tls check","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/2def58666b137f3bc0012114db58e222bcf8228c"},{"sha":"9e7a01d3a53192195f0b13a60fef328caf9b303d","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2406] Create Haskell utility to generate X.509 certificates for TLS authentication\n\nThis is a pure Haskell implementation (no OpenSSL) to be used during installation to generate certificates now required\nfor authenticating Daedalus with Cardano-SL (see CBR-82). A couple of things are configurable on certificates, such as\nthe Subject Alternative Names for the server or the expiration date (default to 10 years for CA and 1 for other certs).\n\nBy default, the utility doesn't output the CA private key (which is therefore lost after having signed all certificates).","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/9e7a01d3a53192195f0b13a60fef328caf9b303d"},{"sha":"253628edbe3306410dbb6740502246a48ff6c8d3","author":{"name":"KtorZ","email":"17303806017397e3e49ec1557041092526beb5e7@gmail.com"},"message":"[CSL-2406] Add README to utility and explain common use-case","distinct":true,"url":"https://api.github.com/repos/intricate/cardano-sl/commits/253628edbe3306410dbb6740502246a48ff6c8d3"}]}
{"actor":{"display_login":"intricate"}}