Mercurial > libervia-backend
view docker/backend-dev-e2e/certificates/server1.test/cert.pem @ 4212:5f2d496c633f
core: get rid of `pickle`:
Use of `pickle` to serialise data was a technical legacy that was causing trouble to store
in database, to update (if a class was serialised, a change could break update), and to
security (pickle can lead to code execution).
This patch remove all use of Pickle in favour in JSON, notably:
- for caching data, a Pydantic model is now used instead
- for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation
- in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and
`to_dict` method have been implemented to do serialisation.
- new methods to (de)serialise data can now be specified with Identity data types. It is
notably used to (de)serialise `path` of avatars.
A migration script has been created to convert data (for upgrade or downgrade), with
special care for XEP-0373 case. Depending of size of database, this migration script can
be long to run.
rel 443
author | Goffi <goffi@goffi.org> |
---|---|
date | Fri, 23 Feb 2024 13:31:04 +0100 |
parents | 3b64b503f250 |
children |
line wrap: on
line source
-----BEGIN CERTIFICATE----- MIIDijCCAnKgAwIBAgIIDeCLzDPl9XswDQYJKoZIhvcNAQELBQAwIDEeMBwGA1UE AxMVbWluaWNhIHJvb3QgY2EgNTE2NDdkMB4XDTIzMTIxMDIxMzUzMloXDTI2MDEw OTIxMzUzMlowFzEVMBMGA1UEAxMMc2VydmVyMS50ZXN0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA0n+pYi3xo4QkG0RutafvGBRBJgMo6AEm4YhsWVhB GxEaJIqcPlhn0m1ADHeVFhz9jK75UoxOGOA2ru3TVuIclHi7084m3bO4gS7toOcY Q2ODOLdgfvs8ubwqZL+WIwRuUkawGdk3RjSbVi4co66TiVf+Z+h2n9A8fg6xHYMm c5VqlM7YCfKdu3p4CGFn1a2G8GCIMq1YZXHHDaJj1MosHO2BlExVdumEnJODBJan h/AVba+qotRAqUEOs9+cp75GsZSwVfdxzgGBUbJFJebVHLGmprztO6N2repiOSB8 r/ULBHkuu7OfEcA4392iWOBcOyihAKOSmY8rbg/Honb4rwIDAQABo4HQMIHNMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD VR0TAQH/BAIwADAfBgNVHSMEGDAWgBQn64ZnjZJ98LYUuQRuFPA2PU8VETBtBgNV HREEZjBkggxzZXJ2ZXIxLnRlc3SCDiouc2VydmVyMS50ZXN0ggxzZXJ2ZXIyLnRl c3SCDHNlcnZlcjMudGVzdIIVbGliZXJ2aWEtYmFja2VuZC50ZXN0ghFsaWJlcnZp YS13ZWIudGVzdDANBgkqhkiG9w0BAQsFAAOCAQEAJJxot+yYt+AApxR7Y6J7WRdU HVdDE2oVKp/ArC024M+FIGDXzbiGWb1BMw4Hv9Ivdb4WLMzZzKDhei5RF9acvMaS eubWpFumTyOqPJw8Z8eccOFN9uSEC4PhjoimVBRriuuF6Xtmwx/jga6VA4Rsn7t2 6YwwgNJxuGfyku2g4Shdfa21WEANSJElvWgD5ng/OPmhlpnBYJj++2BJcT6kW/Po M4lD8ocFwyVPnkNihbnM6rWUs9OZfhwQ1wWymuSdLihQEB7XrQ/fh8isMaVk8J7e 3HL4T0+AzVMLFfvrqGm2QfZ/ioy8TvWbH1ns5q4ugR1mmzb2T8o3lCqcZ4RCLQ== -----END CERTIFICATE-----