fleet/server/mdm
Victor Lyuboslavsky 6b7d232522
Additional CA validation (#27169)
For #26623

- Updated `github.com/groob/plist` to `github.com/micromdm/plist` -- it
was renamed
- Added validation that restricts DigiCert Fleet variables to
`com.apple.security.pkcs12` payloads plus additional restrictions
- Added validation that restricts Custom SCEP Fleet variables to
`com.apple.security.scep` payloads plus additional restrictions
- Enabled multiple CAs (Fleet variables) to be present in an Apple MDM
profile. But each CA can only be used once. For example, we can have
DigiCert CA and Custom SCEP CA in one Apple profile.

# Checklist for submitter
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Added/updated automated tests
- [x] A detailed QA plan exists on the associated ticket (if it isn't
there, work with the product group's QA engineer to add it)
- [x] Manual QA for all new/changed functionality
2025-03-19 08:27:55 -05:00
..
android Refactoring Android datastore interface (#26982) 2025-03-13 14:28:52 -05:00
apple Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
assets NDES SCEP proxy backend (#22542) 2024-10-09 13:47:27 -05:00
crypto Update nanomdm dependency with latest bug fixes and improvements. (#23906) 2024-11-20 11:47:11 -06:00
cryptoutil Refactoring crypto code for future reuse. (#25148) 2025-01-07 16:14:12 -06:00
internal/commonmdm friday tidy up party (#18106) 2024-04-08 08:42:42 -03:00
lifecycle Proposal fix/plan for 24024 (#24207) 2024-11-27 12:11:08 -05:00
linux Linux Encryption Docs (#23622) 2024-12-10 08:26:46 -07:00
maintainedapps Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
microsoft Revert "Disallow user-scoped profiles for Windows MDM" (#26940) 2025-03-07 08:33:40 -06:00
nanodep Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
nanomdm Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
scep Custom SCEP integration (#27121) 2025-03-17 10:59:07 -05:00
testing_utils Add datastore methods for host certificates feature (#26416) 2025-02-18 17:49:02 -06:00
mdm.go DigiCert backend (#26914) 2025-03-10 13:02:49 -05:00
mdm_test.go add missing activity items, fix CLI error messages 2024-03-29 14:43:28 -03:00