Commit Graph

963 Commits (b604203f2f027b84ac0619f92a43ed4851ef472b)

Author SHA1 Message Date
iglocska 7fb6e2f95e Fixed issue with proxy settings attempted to be added in synctool, even if not set 2015-05-15 09:25:07 +02:00
iglocska 88d4a2da83 Merge branch 'certauth' into hotfix-2.3.64 2015-05-13 17:20:15 +02:00
iglocska 35134a7f2e Implemented correct from / to api parameter checks
- based on stevengoossensB's pull request
2015-05-13 16:12:06 +02:00
iglocska b144831b4d Removed debug 2015-05-04 19:02:50 +02:00
iglocska d9f4e996f2 Parse authorization headers for a valid MISP auth key, fixes #478
- Keeps parsing until a valid auth key is found
2015-05-04 19:01:12 +02:00
Guilherme Capilé 3055d153f8 minor typo in the unset -- should be ['User']['gpgkey'] 2015-04-28 11:32:20 -03:00
Guilherme Capilé d2eaccec31 removed session handling from plugin and moved to AppController 2015-04-28 11:25:13 -03:00
Guilherme Capilé d0c3b44e34 Added client SSL certificate authentication as a CakePHP plugin 2015-04-16 22:14:43 -03:00
Iglocska 699e5a9d17 Small fix to editing an event via the api
- adding attributes without a uuid will cause the edit to fail
- attributes without a uuid will now be added as a new attribute
2015-04-16 23:16:15 +02:00
Iglocska e339f0e646 Fixed various issues with the attribute REST api
- also updated the sample curl scripts
2015-04-14 13:50:51 +02:00
Iglocska 06f8a9bbd6 Merge branch 'proxy' into hotfix-2.3.59 2015-04-08 22:36:13 +02:00
Iglocska 094f932616 Merge branch 'disallow_unpublished_events' into hotfix-2.3.59 2015-04-08 22:22:22 +02:00
Iglocska cc5c32fca2 Sync update issue fixed
- attributes were not correctly updated during a manual push due to an incorrect conditional
- re-publishing was unaffected
2015-04-02 00:14:36 +02:00
Richard van den Berg 75f93641dc Use isOK() for version check 2015-03-19 15:09:54 +01:00
Richard van den Berg 850e4bd19f Catch HTTP error codes 2015-03-19 14:05:10 +01:00
Richard van den Berg 2f58fdec0d Catch invalid proxy configuration 2015-03-19 13:33:17 +01:00
Richard van den Berg 106b6cb06b Allow SyncTool with empty $server 2015-03-19 13:03:16 +01:00
Richard van den Berg 0e66ff140f Use SyncTool for diagnostics 2015-03-19 12:31:35 +01:00
Richard van den Berg b62032fc7b Fix typo 2015-03-19 12:20:16 +01:00
Richard van den Berg 2ccab722d7 Add proxy section to server diagnostics 2015-03-19 12:15:28 +01:00
Iglocska c9d1badaa3 Organization field in Servers too short to fit valid organisation identifiers, fixes #436
- updated the MYSQL.sql file for future MISP installations
- added admin script to do the update from the web interface
2015-03-17 00:06:59 +01:00
Iglocska b29e8fdada Site admins can now create proposals, fixes #417
- site admins can now create proposals to an event / attribute as long as the event does not belong to their organisation
- new icon for proposals to differentiate them from edits
2015-03-14 09:01:20 +01:00
Iglocska 524871ab52 Sync users should default to termsaccepted and no password change required, fixes #432 2015-03-14 08:35:24 +01:00
Iglocska 50a03e897d Search in logs fixed, fixes #434
- The log search incorrectly set the search terms for empty fields, meaning that any log entries that had unfilled columns, such as it is the case with admin_email would never return results
2015-03-14 08:29:19 +01:00
iglocska 4239edffc9 Org admins editing privileged users demotes the privileged user to a lower permission level, fixes #408
- an org admin now correctly can select the previously assigned privileged role for a user that he/she is editing
2015-02-20 09:17:25 +01:00
iglocska 6782159b53 API search incorrectly generating JSON with several events, fixes #407
- also fixed the edit button on the index
2015-02-18 11:45:15 +01:00
iglocska 0dd8318fb3 Further work on the exports
- Performance improvements for the event search exports
- JSON view code moved to Lib
- Fixed an issue that didn't restrict the dates correctly with the from / to parameters
2015-02-16 17:31:32 +01:00
iglocska fbca80d680 Added more contextual info for the CSV exports, fixes #391 2015-02-16 14:47:21 +01:00
iglocska 54a86732e4 Relaxed the auth key requirement for nids exports
- incorrect check on the nids exports blocked logged in users from downloading the snort/suricata rules of an event
- check removed
2015-02-16 08:59:53 +01:00
iglocska 701160acd9 Fixed an issue with the free-text import failing on more than ~100 parsed values, fixes #389
- Caused by a 1k variable / form limit imposed by php since 5.3.9
- Form data now collected by JS and passed as a single JSON in the POST request
- Allows massive IOC lists to be imported
- improved performance
2015-02-10 14:42:24 +01:00
Richard van den Berg d5e556ee1e Fixed missing parentheses‎ 2015-02-05 17:40:56 +01:00
iglocska 12d7025bce Patch fixing json download, fixes #387
- World's smallest patch
2015-02-05 17:25:40 +01:00
Richard van den Berg 12dc5b6579 Make unpublished events private if MISP.unpublishedprivate == true 2015-02-05 17:16:40 +01:00
Richard van den Berg d3c0144b25 Merge remote-tracking branch 'upstream/master' 2015-02-05 14:17:10 +01:00
iglocska 2aa902cd4b Removed the old documentation, fixes #378 and some small fixes
- resolved an issue of warnings being generated when an event without attributes / relations gets XML exported.
- added new dump of the documentation
2015-02-05 10:11:29 +01:00
iglocska 2401cedfdc Left off file in previous hotfix added
- added a file that was not pushed during the last hotfix
- some improvements to the XML export to lower memory usage
2015-02-04 11:06:41 +01:00
iglocska fddb06b3c2 Small change to the XML export
- won't write to file after all, simply keeps adding to a string in memory. Should still resolve the XML conversion taking up high amounts of memory issue.
2015-02-03 17:29:46 +01:00
iglocska f0aa849d04 Various improvements to the exports
- Unified the way exports accept negated parameters
- Fixed the documentation
- Most exports are now restrictable by the event date (From/To parameters)
- none cached XML export now writes to file after converting each event, clearing the memory and resolving any potential memory issues
2015-02-03 17:06:05 +01:00
Richard van den Berg 253e579307 Disallow unpublished events 2015-01-27 10:10:22 +01:00
iglocska 6b6c62bd53 Fix to the new sync issues since 2.3.39, fixing #365
Incorrectly trying to look up authenticated user in the model fixed
2015-01-15 13:46:11 +01:00
iglocska cedaac360a Fixes to the scheduled tasks and some documentation issues
- Scheduled pulls should work correctly now
- Scheduled pushes and pulls correctly display in the logs
- Scheduled caching correctly sets the next date of execution
2015-01-12 17:35:08 +01:00
iglocska 43e283a7e0 Copy pasta fail 2014-12-19 15:36:36 +01:00
iglocska bb642579b6 Remote attribute deletion removed
- Deleting attributes on connected MISP instances can cause serious performance issues on multiple interconnected instnaces, temporarily removed
- Version number incremented
2014-12-19 15:01:14 +01:00
iglocska 92679f6b69 New way to download a single event
- The event export buttons have been unified into a single download as... button
- clicking it loads a popup with all of the export formats
- added snort, suricata, text dump to the export options
- added the option for an extra setting for some exports (such as including non IDS flagged attributes, encoding attachments)
- easily extendable system

- moved the hidden popup divs into the general layout, can be easily reused anywhere

- removed the auth refresh option that was re-enabled recently as it seems to sometimes cause issues

- text exports now allow "all" to be specified as type, which will dump all attribute values that the user can see
- text exports now allow restricting the results based on event id
2014-12-19 13:32:16 +01:00
iglocska 3723119d83 Logging of admin emails and auth refresh
- admin emails now generate log entries
- authentication is refreshed on activity
2014-12-12 10:42:12 +01:00
iglocska f14a26444b Fix to some event altering actions not updating the timestamp 2014-12-10 14:08:08 +01:00
iglocska 6e7554a26f Freetext import tool enhancement
- mass edit types where applicable
- ip-src/ip-dst type will create two attributes, one for each
2014-12-10 13:06:52 +01:00
iglocska 67aa9d9859 Admin contact user menu moved next to new/list user buttons, recipient e-mails are now sorted alphabetically 2014-12-05 15:15:28 +01:00
iglocska 2e1dfca943 Attribute search now correctly searches attribute comments too for contained expressions, fixes #342 2014-12-05 10:13:07 +01:00
iglocska 2e28dd2dde Added tooltip for event ID in attribute search results, fixes #351 2014-12-03 17:23:32 +01:00