Skip to content

Comments

Renew certificates for e2e integration tests#3243

Merged
akshaymankar merged 2 commits intodevelopfrom
renew-integration-certs
Apr 24, 2023
Merged

Renew certificates for e2e integration tests#3243
akshaymankar merged 2 commits intodevelopfrom
renew-integration-certs

Conversation

@akshaymankar
Copy link
Member

Checklist

  • Add a new entry in an appropriate subdirectory of changelog.d No changelog
  • Read and follow the PR guidelines

@zebot zebot added the ok-to-test Approved for running tests in CI, overrides not-ok-to-test if both labels exist label Apr 24, 2023
@akshaymankar akshaymankar merged commit 5df4fb0 into develop Apr 24, 2023
@akshaymankar akshaymankar deleted the renew-integration-certs branch April 24, 2023 11:04
smatting pushed a commit that referenced this pull request May 3, 2023
* Renew certificates for e2e integration tests

* Document how to renew e2e integration test certs

Co-authored-by: Igor Ranieri <igor@elland.me>
pcapriotti added a commit that referenced this pull request May 3, 2023
* Add variable-sized integer serialisation

* Implement new MLS structures

* Fix KeyPackage parser

* Fix MLS signature verification

Signatures in MLS are computed on a special `SignContent` structure, so
we need to replicate that for verification.

* Update paths now contain leaf nodes

* Remove proposals now have indices instead of refs

* Adapt integration tests to remove proposal changes

* Compute new node index for add proposals

* New commit bundle API

Also replace PublicGroupState with GroupInfo

* Add instances for roundtrip tests of MLS types

* fix adding users to MLS conversations

* change content-type of commit bundle in integration tests
* fix keypackage ref serialisation
* add context to commit bundle parsing

* fix integration test: send other user's commit

* keep track of index map while processing proposals
* add creator client to ProposalAction in epoch 0

* readGroupState for the new group.json format

* Generate welcome recipients when processing bundle

Also remove old unsupported welcome endpoints. All welcome messages now
need to be sent through commit bundles.

* Send recipients as part of a welcome RPC

* Use commit bundles in failure tests

* Implement new proposal ref computation

* fix integration test admin removes user from a conversation

* switch mls-test-cli call to external-proposal

* Implement validation of leaf nodes in galley

- extract core validation function to wire-api
- generalise validation of leaf node source
- implement validation of key packages and leaf nodes in galley
- remove all internal brig endpoints related to validation
- validate leaf node in external commits
- validate leaf node signature

* Apply proposals in the correct order

* Remove redundant GroupContext structure

* Re-implement processing of external commits

* add references from data types to MLS spec

* Remove key package mapping code

* fix more integration tests

* track client scheduled for removal in Cassandra

[ ] conversations
[x] subconversations

* minor typos

* split executing proposals for int and ext commits

* execute remove proposals before add proposals

This makes sure that all leaf indices are freed in the database before
they are occupied again.

* rename Word32 and ref to LeafIndex and idx

* Remove MissingSenderClient error

* Remove some prefixes from MLS structures

* Remove prefixes from RawMLS fields

* Reorganise TODOs

* Check epoch again after taking commit lock

* Remove MLSPackageRefNotFound error

* Simplify testRemoveUserParent

* Simplify testRemoveCreatorParent

* Pass correct list of clients to planClientRemoval

* Fix assertion in external add proposal test

* Propagate actual message, not just commit

* Fix signature calculation when generating messages

* Pass removal key to mls-test-cli on group creation

* Take pending clients into account in removal logic

* Fix assertion in remove proposal test

* apply linter suggestions

* fix unit test: MLS remove proposal

* Upgrade mls-test-cli in the nix environment

* Update cassandra-schema.cql

* disable testing the keypackage lifetime

* remove checks for keypackage assignments

* validate bare proposals and inline proposal

* rephrase and filter the left TODOs

* Verify that capabilities include basic credentials

* Add nonce to PreSharedKeyID structure

* Split Galley.API.MLS.Message

* Inline executeIntCommitProposalAction

* Use more specific type for external commit actions

* Re-organise TODOs

* Simplify processProposal arguments

* Remove LWT in planMLSClientRemoval

* Restore unsupported proposal test

* Restore disabled MLS unit tests

* Add CHANGELOG entries

* Document IndexMap and ClientMap

* fixup! Restore unsupported proposal test

* Linter fix

* fixup! Upgrade mls-test-cli in the nix environment

* Fix: make git-add-cassandra-schema-impl lists to many keyspaces

* postMLSMessageToLocalConv: return no events

* Remove unused paExternalInit

* Renew certificates for e2e integration tests (#3243)

* Renew certificates for e2e integration tests

* Document how to renew e2e integration test certs

Co-authored-by: Igor Ranieri <igor@elland.me>

* fix broken tests

* ExternalCommitAction: remove superfluous ClientIdentity

---------

Co-authored-by: Stefan Matting <stefan@wire.com>
Co-authored-by: Stefan Berthold <stefan.berthold@wire.com>
Co-authored-by: Akshay Mankar <akshay@wire.com>
Co-authored-by: Igor Ranieri <igor@elland.me>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-test Approved for running tests in CI, overrides not-ok-to-test if both labels exist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants