fleet/orbit/pkg
Victor Lyuboslavsky 6b7d232522
Additional CA validation (#27169)
For #26623

- Updated `github.com/groob/plist` to `github.com/micromdm/plist` -- it
was renamed
- Added validation that restricts DigiCert Fleet variables to
`com.apple.security.pkcs12` payloads plus additional restrictions
- Added validation that restricts Custom SCEP Fleet variables to
`com.apple.security.scep` payloads plus additional restrictions
- Enabled multiple CAs (Fleet variables) to be present in an Apple MDM
profile. But each CA can only be used once. For example, we can have
DigiCert CA and Custom SCEP CA in one Apple profile.

# Checklist for submitter
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-03-19 08:27:55 -05:00
..
augeas fleetctl, API, copy updates around host identifiers (#20220) 2024-07-09 10:25:01 -07:00
bitlocker fix formatting of unrecognized BitLocker erorr (#21220) 2024-08-09 11:52:50 -03:00
build Add user agent to Orbit HTTP client (#5429) 2022-05-02 11:03:49 -07:00
constant Delete Fleet Desktop auth token when we detect a migrated host (#23658) 2024-11-09 23:35:49 -06:00
cryptoinfo Enable staticcheck Go linter. (#23487) 2024-11-05 11:16:24 -06:00
dataflatten Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
dialog add kdialog for kubuntu key escrow (#24405) 2024-12-05 08:44:16 -07:00
execuser Add Fleet Desktop support for Wayland display sessions (#25998) 2025-02-05 14:00:13 -03:00
go-paniclog Fix Fleet Desktop bugs on Windows (#16402) 2024-01-29 18:52:55 -03:00
insecure Make creation of http.Client uniform across the codebase (#3097) 2021-11-24 15:56:54 -05:00
installer Add client-side logging for software installs, scripts, and setup experience (#26078) 2025-02-05 15:41:47 -06:00
kdialog add kdialog for kubuntu key escrow (#24405) 2024-12-05 08:44:16 -07:00
keystore Add gosimple linter (#23250) 2024-10-29 14:17:51 -05:00
logging Reduce orbit logging when the server is down (#16968) 2024-02-21 15:36:15 -03:00
luks Working LUKS key escrow on non-english systems (#26474) 2025-02-21 11:42:44 -05:00
lvm Linux agent LVM volume detection on older Ubuntu versions (#24193) 2024-11-27 10:39:25 -07:00
migration fix: add missing comments 2024-08-15 19:00:47 -04:00
osquery Perform early restart before starting sub-systems and minor refactor of orbit sub-systems (#20610) 2024-07-19 12:44:43 -03:00
osservice 8009 fleet desktop icon duplication (#8017) 2022-10-13 10:58:37 -03:00
packaging Update wine to version 10, replace wine64 with wine (#25997) 2025-02-07 11:05:07 -05:00
platform Only allow once instance of fleet desktop at once (#25821) 2025-02-25 16:46:06 -05:00
process Fleetctl to package .app bundles for osquery (and changes for orbit to support them) (#4393) 2022-03-15 16:04:12 -03:00
profiles Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
scripts Add client-side logging for software installs, scripts, and setup experience (#26078) 2025-02-05 15:41:47 -06:00
setup_experience Add client-side logging for software installs, scripts, and setup experience (#26078) 2025-02-05 15:41:47 -06:00
swiftdialog Swiftdialog Closed method (#23024) 2024-11-12 15:52:46 -05:00
table Add update_url column to orbit_info (#25532) 2025-01-17 11:52:21 -03:00
token Fixing fleetd to NOT make unnecessary duplicate call to orbit/device_token endpoint. (#15543) 2023-12-10 17:00:24 -06:00
update Remove rollback to old TUF (#26081) 2025-02-06 08:17:03 -03:00
user fix: don't attempt to launch fleet desktop until the user is logged into GUI (#16090) 2024-01-17 10:00:28 -05:00
useraction Catch signals for graceful fleet desktop exit (#23054) 2024-10-24 12:09:55 -04:00
windows Add Kolide osquery tables 2023-11-01 20:11:35 -06:00
zenity add kdialog for kubuntu key escrow (#24405) 2024-12-05 08:44:16 -07:00