intecture / auth Goto Github PK

installer.sh should set more aggressive default permissions for the certificate store directory (<sysconfdir>/intecture/certs), and ensure it is owned by root.

• Remove GitHub dependencies from Cargo.toml
• Check metadata in Cargo.toml
• Update other projects to reference crates.io when including this lib as a dependency

This is likely due to a child thread loop that does not get told to terminate. In this case, a ZMQ pipe should be used to send a $TERM signal to the child thread when the parent's drop() fn is called.

By defaulting Auth to 7103 and 7104, it will eliminate potential port clashes with Agent, standardise the configuration and simplifies the user story.

Currently when the Auth CLI creates a new certificate, it adds it directly to the disk store. This means that the Auth server is unaware of the certificate until the daemon is restarted, resulting in much confusion among users!

Instead, the CLI should wrap the ZMQ API so that it is published as soon as it's created. If this fails, it can fall back to the current behaviour with a warning that it couldn't connect to the API:

WARNING: Could not connect to the API to register this certificate, which either means that the Auth daemon is not running, or there's a connectivity issue. If the daemon is running, please restart it to register this certificate.

In order to properly daemonise the process, it needs to have an init script to look after starting/stopping/restarting the process, recording the PID etc.

Must support:

• Upstart
• Systemd
• BSD init
• MacOS launchd

This issue is blocked by #1.

The book mentions that you can compile from source using make. This is great. However, it would even be better if we also have instructions on how to build and configure manually without using the Makefile. Specifically, mention:-

• cargo build --release,
• and how to setup /etc/intecture

so commands like inauth_cli user add <username> can just work out of the out of the box.

Create RustBucket package for Server & CLI components.