POSA_LEAKSMS/firmware/common
cw2007 73e49fd528 feat: RPi4 누수+온습도 2-모듈 단일 서버 통합 + 보안 하드닝
2번 모듈 신규(raspberry_pi4_sht30/): SHT30 온습도 → cafe24, raw-body X-Signature HMAC, 폐쇄망 오프라인 설치(vendor/install), systemd, CRC/포맷 자가점검. firmware sht30_fw wire 포맷과 byte-parity 검증.

1번 모듈 통합(raspberry_pi4/): 누수+카메라를 동일 서버로. 레거시 sha256(key+json) body-sig → X-Signature HMAC 전환, 사진 canonical=device_id|sensor_id|log_id|timestamp.

서버 통합(php/): api/sensor_data.php 누수 이벤트 수신, api/photo_upload.php 신규(HMAC·finfo·서버생성 파일명·nonce 멱등·sensor 결속), photo.php 인증 사진서빙, dashboard.php 누수 패널+사진, sms_send.php 누수 SMS, config.php 태그/요약.

DB: sql/migration_add_leak.sql(가산·멱등), schema_sht30.sql 통합 스키마.

보안 하드닝(외부 펜테스트 대비, 확정 CRITICAL/HIGH 0): cron_heartbeat api_key fail-closed, setup_mfa 부트스트랩 토큰 post-enrollment 잠금, var/ PHP 실행차단, HSTS.

문서/테스트: SYSTEM_OVERVIEW.md, security_hardening_test.php 갱신. 참고: 사용자 요청으로 세션 외 기존 미커밋 변경도 함께 포함.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-23 16:21:11 +09:00
..
app_config.h feat: RPi4 누수+온습도 2-모듈 단일 서버 통합 + 보안 하드닝 2026-06-23 16:21:11 +09:00
applog.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
applog.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
board_config.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
bsp.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
bsp.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
ethernetif.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
hexutil.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
hexutil.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
httpapi.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
httpapi.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
jsonbody.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
jsonbody.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
net.c feat: RPi4 누수+온습도 2-모듈 단일 서버 통합 + 보안 하드닝 2026-06-23 16:21:11 +09:00
net.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
reporter.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
reporter.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
rtos_hooks.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
secrets.h.example feat: RPi4 누수+온습도 2-모듈 단일 서버 통합 + 보안 하드닝 2026-06-23 16:21:11 +09:00
sha256_backend.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sha256_sw.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30_convert.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sht30_convert.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sig.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
sig.h feat: RPi4 누수+온습도 2-모듈 단일 서버 통합 + 보안 하드닝 2026-06-23 16:21:11 +09:00
timesync.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
timesync.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
tls.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
tls_mbedtls.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
transport.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
watchdog.c chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00
watchdog.h chore: import codebase with security hardening 2026-06-20 09:37:40 +09:00