Code

Add Secure Connections Standard#548

Code

Merged

anjastrunk merged 57 commits intomainSovereignCloudStack/standards:mainfrom feat/secure-communicationSovereignCloudStack/standards:feat/secure-communicationCopy head branch name to clipboardNov 25, 2024

+914-3

Commits

Commits on Jun 27, 2024

• Add first part of the secure connections standard

  Show description for 3a497cd
  markus-hentsch

  committed
  3a497cd

  Copy full SHA for 3a497cd

• Add notes about the classifications

  Show description for 0821bd6
  markus-hentsch

  committed
  0821bd6

  Copy full SHA for 0821bd6

• Add considered options and open questions

  Show description for 291b3da
  markus-hentsch

  committed
  291b3da

  Copy full SHA for 291b3da

• Fix linter problems

  Show description for 2810fbf
  markus-hentsch

  committed
  2810fbf

  Copy full SHA for 2810fbf

• Add TLS standardization

  Show description for efce5f8
  markus-hentsch

  committed
  efce5f8

  Copy full SHA for efce5f8

• Add database and message queue channel security, extend TLS cipher rules

  Show description for 82bbe94
  markus-hentsch

  committed
  82bbe94

  Copy full SHA for 82bbe94

• Add remaining decision sections

  Show description for 297e562
  markus-hentsch

  committed
  297e562

  Copy full SHA for 297e562

• Add testing script for secure connection standard (WIP)

  Show description for 1f1afe3
  markus-hentsch

  committed
  1f1afe3

  Copy full SHA for 1f1afe3

• Turn avoiding CBC mode into a recommendation.

  Show description for b1c6f2b
  markus-hentsch

  committed
  b1c6f2b

  Copy full SHA for b1c6f2b

• Refactor the TLS test script to use SSLyze

  Show description for cb1242d
  markus-hentsch

  committed
  cb1242d

  Copy full SHA for cb1242d

• Add testing README and reference

  Show description for 2ff4d90
  markus-hentsch

  committed
  2ff4d90

  Copy full SHA for 2ff4d90

• Address review feedback

  Show description for 0d35174
  markus-hentsch

  committed
  0d35174

  Copy full SHA for 0d35174

• Fix typo in test script comment

  Show description for 3a9efd9
  markus-hentsch

  committed
  3a9efd9

  Copy full SHA for 3a9efd9

• Add glossary and rephrase "SCS" to "SCS project"

  Show description for 333f953
  markus-hentsch

  committed
  333f953

  Copy full SHA for 333f953

• Rename standard filename due to conflicting counter

  Show description for d69af20
  markus-hentsch

  committed
  d69af20

  Copy full SHA for d69af20

• Refine the scope in regards to the communication channels

  Show description for 13d850d
  markus-hentsch

  committed
  13d850d

  Copy full SHA for 13d850d

• s/IPsec/WireGuard/

  Show description for 914631c
  markus-hentsch

  committed
  914631c

  Copy full SHA for 914631c

• Fix option references for oslo.messaging ssl

  Show description for 096675b
  markus-hentsch

  committed
  096675b

  Copy full SHA for 096675b

• Add RFC link for TLS deprecation

  Show description for 73dce0a
  markus-hentsch

  committed
  73dce0a

  Copy full SHA for 73dce0a

• Don't endorse internal CAs specifically

  Show description for 0ed970d
  markus-hentsch

  committed
  0ed970d

  Copy full SHA for 0ed970d

• Refactor test script to check Mozilla TLS recommendations

  Show description for a2f3e77
  markus-hentsch

  committed
  a2f3e77

  Copy full SHA for a2f3e77

• Update standard to reference Mozilla's TLS recommendations

  Show description for 4885429
  markus-hentsch

  committed
  4885429

  Copy full SHA for 4885429

• Migrate test script requirements to requirements.in

  Show description for 1cbd1d0
  markus-hentsch

  committed
  1cbd1d0

  Copy full SHA for 1cbd1d0

• Add libvirt security choices to design considerations

  Show description for 6a0920a
  markus-hentsch

  committed
  6a0920a

  Copy full SHA for 6a0920a

• Add open question about libvirt hardening

  Show description for 59c7bc8
  markus-hentsch

  committed
  59c7bc8

  Copy full SHA for 59c7bc8

• Relax the requirement for the libvirt port

  Show description for 3bdc8a6
  markus-hentsch

  committed
  3bdc8a6

  Copy full SHA for 3bdc8a6

• Rephrase and clarify libvirt security recommendations and questions

  Show description for d166e7e
  markus-hentsch

  committed
  d166e7e

  Copy full SHA for d166e7e

Commits on Jun 28, 2024

• Add Mozilla TLS JSON override option to test script

  Show description for e757dd2
  markus-hentsch

  committed
  e757dd2

  Copy full SHA for e757dd2

• Fully parameterize Mozilla TLS config in test script

  Show description for 042e5f3
  markus-hentsch

  committed
  042e5f3

  Copy full SHA for 042e5f3

• Rename cli args in test script

  Show description for 23423b8
  markus-hentsch

  committed
  23423b8

  Copy full SHA for 23423b8

• Add Mozilla TLS JSON copy and staging YAML entry

  Show description for e9dacb8
  markus-hentsch

  committed
  e9dacb8

  Copy full SHA for e9dacb8

• Add remark about internal audits

  Show description for 8d92617
  markus-hentsch

  committed
  8d92617

  Copy full SHA for 8d92617

Commits on Jul 26, 2024

• Remove specific MQ SSL config examples, refer to docs

  Show description for 5f7ccd2
  markus-hentsch

  committed
  5f7ccd2

  Copy full SHA for 5f7ccd2

Commits on Aug 9, 2024

• Merge branch 'main' into feat/secure-communication

  bitkeks

  authored
  36780c6

  Copy full SHA for 36780c6

Commits on Aug 19, 2024

• Merge branch 'main' into feat/secure-communication

  markus-hentsch

  authored
  be1848c

  Copy full SHA for be1848c

• Align header naming with latest standards template

  Show description for 71a663c
  markus-hentsch

  committed
  71a663c

  Copy full SHA for 71a663c

Commits on Sep 12, 2024

• Add storage channels

  Show description for c9984db
  markus-hentsch

  committed
  c9984db

  Copy full SHA for c9984db

Commits on Oct 18, 2024

• Merge remote-tracking branch 'origin/main' into feat/secure-communication

  Show description for a503303
  markus-hentsch

  committed
  a503303

  Copy full SHA for a503303

• Assign document number 0122

  Show description for 5405304
  markus-hentsch

  committed
  5405304

  Copy full SHA for 5405304

• Update scs-compatible-test.yaml

  Show description for 2c47877
  markus-hentsch

  committed
  2c47877

  Copy full SHA for 2c47877

Commits on Nov 6, 2024

• Merge branch 'main' into feat/secure-communication

  anjastrunk

  authored
  2be9a0a

  Copy full SHA for 2be9a0a

Commits on Nov 19, 2024

• Remove bare URLs

  Show description for b57c3b5
  anjastrunk

  committed
  b57c3b5

  Copy full SHA for b57c3b5

• Remove tailing whitespaces

  Show description for 2ae9612
  anjastrunk

  committed
  2ae9612

  Copy full SHA for 2ae9612

• Fix markdown linter

  Show description for b6076a5
  anjastrunk

  committed
  b6076a5

  Copy full SHA for b6076a5

• remove bare URLs

  Show description for aeaab38
  anjastrunk

  committed
  aeaab38

  Copy full SHA for aeaab38

• Merge branch 'main' into feat/secure-communication

  anjastrunk

  authored
  71b57a1

  Copy full SHA for 71b57a1

Commits on Nov 25, 2024

• Merge branch 'main' into feat/secure-communication

  anjastrunk

  authored
  73df10d

  Copy full SHA for 73df10d

• Fix markdown lint errors

  Show description for 837c3e1
  anjastrunk

  committed
  837c3e1

  Copy full SHA for 837c3e1

• Fix markdown lint errors

  Show description for 9202d92
  anjastrunk

  committed
  9202d92

  Copy full SHA for 9202d92

• Fix markdown lint errors

  Show description for a687c61
  anjastrunk

  committed
  a687c61

  Copy full SHA for a687c61

• Fix markdown lint errors

  Show description for 9efbaeb
  anjastrunk

  committed
  9efbaeb

  Copy full SHA for 9efbaeb

• Fix markdown lint errors

  Show description for b96fe92
  anjastrunk

  committed
  b96fe92

  Copy full SHA for b96fe92

• Change verison number of secure connection standard as it conflicts with node to node encryption DR

  Show description for 666b549
  anjastrunk

  committed
  666b549

  Copy full SHA for 666b549

• Add new linke char at the end of file to fix MD047

  Show description for 3dbb7d7
  anjastrunk

  committed
  3dbb7d7

  Copy full SHA for 3dbb7d7

• Replace absolute dead links with relative links

  Show description for 4c75d59
  anjastrunk

  committed
  4c75d59

  Copy full SHA for 4c75d59

• Fix dead links

  Show description for 5fcfacd
  anjastrunk

  committed
  5fcfacd

  Copy full SHA for 5fcfacd

• Use absolute path as relative pathes are not allowed

  Show description for 1c2b6a9
  anjastrunk

  committed
  1c2b6a9

  Copy full SHA for 1c2b6a9