nextcloud/lib/private/Security
Roeland Jago Douma 5a61a794d4
Do not write and read rootcerts.crt at the same time
(Possibly) fixes #3470

When updating the main file /files_external/rootcerts.crt we should not
read from /files_external/rootcerts.crt at the same time.

For 2 reasons: writing to a file and reading from it at the same time
can have non deterministic results

And we don't want all the certificates to appear 2 times in there.

This isn't caught by our standard file locking (that does not allow this
actually) because it is in a non locked path....

Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>
2017-05-09 13:00:07 +02:00
..
Bruteforce Mark IP as whitelisted if brute force protection is disabled 2017-05-01 18:31:45 +02:00
CSP Safari CSPv3 support is sub-par 2016-12-14 13:17:20 +01:00
CSRF Fix missing update of session, when it was already used. 2016-11-02 20:30:36 +01:00
IdentityProof Add Identityproof tests 2016-11-24 21:50:19 +01:00
Normalizer Add support for ratelimiting via annotations 2017-04-13 12:00:16 +02:00
RateLimiting Remove expired attempts 2017-04-13 12:00:18 +02:00
Certificate.php Update with robin 2016-07-21 18:13:58 +02:00
CertificateManager.php Do not write and read rootcerts.crt at the same time 2017-05-09 13:00:07 +02:00
CredentialsManager.php Remove unused use statements 2017-04-22 19:23:31 -05:00
Crypto.php Fix others 2016-07-21 18:13:57 +02:00
Hasher.php Fix others 2016-07-21 18:13:57 +02:00
SecureRandom.php Remove unused use statements 2017-04-22 19:23:31 -05:00
TrustedDomainHelper.php Fix others 2016-07-21 18:13:57 +02:00