jpetree331
f97d4845af
Complete RedFlag codebase with two major security audit implementations.
== A-1: Ed25519 Key Rotation Support ==
Server:
- SignCommand sets SignedAt timestamp and KeyID on every signature
- signing_keys database table (migration 020) for multi-key rotation
- InitializePrimaryKey registers active key at startup
- /api/v1/public-keys endpoint for rotation-aware agents
- SigningKeyQueries for key lifecycle management
Agent:
- Key-ID-aware verification via CheckKeyRotation
- FetchAndCacheAllActiveKeys for rotation pre-caching
- Cache metadata with TTL and staleness fallback
- SecurityLogger events for key rotation and command signing
== A-2: Replay Attack Fixes (F-1 through F-7) ==
F-5 CRITICAL - RetryCommand now signs via signAndCreateCommand
F-1 HIGH - v3 format: "{agent_id}:{cmd_id}:{type}:{hash}:{ts}"
F-7 HIGH - Migration 026: expires_at column with partial index
F-6 HIGH - GetPendingCommands/GetStuckCommands filter by expires_at
F-2 HIGH - Agent-side executedIDs dedup map with cleanup
F-4 HIGH - commandMaxAge reduced from 24h to 4h
F-3 CRITICAL - Old-format commands rejected after 48h via CreatedAt
Verification fixes: migration idempotency (ETHOS #4), log format
compliance (ETHOS #1), stale comments updated.
All 24 tests passing. Docker --no-cache build verified.
See docs/ for full audit reports and deviation log (DEV-001 to DEV-019).
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
68 lines
2.8 KiB
Go
68 lines
2.8 KiB
Go
package models
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/google/uuid"
|
|
)
|
|
|
|
// AgentUpdatePackage represents a signed agent binary package
|
|
type AgentUpdatePackage struct {
|
|
ID uuid.UUID `json:"id" db:"id"`
|
|
Version string `json:"version" db:"version"`
|
|
Platform string `json:"platform" db:"platform"`
|
|
Architecture string `json:"architecture" db:"architecture"`
|
|
BinaryPath string `json:"binary_path" db:"binary_path"`
|
|
Signature string `json:"signature" db:"signature"`
|
|
Checksum string `json:"checksum" db:"checksum"`
|
|
FileSize int64 `json:"file_size" db:"file_size"`
|
|
CreatedAt time.Time `json:"created_at" db:"created_at"`
|
|
CreatedBy string `json:"created_by" db:"created_by"`
|
|
IsActive bool `json:"is_active" db:"is_active"`
|
|
}
|
|
|
|
// AgentUpdateRequest represents a request to update an agent
|
|
type AgentUpdateRequest struct {
|
|
AgentID uuid.UUID `json:"agent_id,omitempty"` // Optional when agent ID is in URL path
|
|
Version string `json:"version" binding:"required"`
|
|
Platform string `json:"platform" binding:"required"`
|
|
Scheduled *string `json:"scheduled_at,omitempty"`
|
|
Nonce string `json:"nonce" binding:"required"` // Required security nonce to prevent replay attacks
|
|
}
|
|
|
|
// BulkAgentUpdateRequest represents a bulk update request
|
|
type BulkAgentUpdateRequest struct {
|
|
AgentIDs []uuid.UUID `json:"agent_ids" binding:"required"`
|
|
Version string `json:"version" binding:"required"`
|
|
Platform string `json:"platform" binding:"required"`
|
|
Scheduled *string `json:"scheduled_at,omitempty"`
|
|
}
|
|
|
|
// AgentUpdateResponse represents the response for an update request
|
|
type AgentUpdateResponse struct {
|
|
Message string `json:"message"`
|
|
UpdateID string `json:"update_id,omitempty"`
|
|
DownloadURL string `json:"download_url,omitempty"`
|
|
Signature string `json:"signature,omitempty"`
|
|
Checksum string `json:"checksum,omitempty"`
|
|
FileSize int64 `json:"file_size,omitempty"`
|
|
EstimatedTime int `json:"estimated_time_seconds,omitempty"`
|
|
}
|
|
|
|
// SignatureVerificationRequest represents a request to verify an agent's binary signature
|
|
type SignatureVerificationRequest struct {
|
|
AgentID uuid.UUID `json:"agent_id" binding:"required"`
|
|
BinaryPath string `json:"binary_path" binding:"required"`
|
|
MachineID string `json:"machine_id" binding:"required"`
|
|
PublicKey string `json:"public_key" binding:"required"`
|
|
Signature string `json:"signature" binding:"required"`
|
|
}
|
|
|
|
// SignatureVerificationResponse represents the response for signature verification
|
|
type SignatureVerificationResponse struct {
|
|
Valid bool `json:"valid"`
|
|
AgentID string `json:"agent_id"`
|
|
MachineID string `json:"machine_id"`
|
|
Fingerprint string `json:"fingerprint"`
|
|
Message string `json:"message"`
|
|
} |