599 Commits
Author SHA1 Message Date
Erica PortnoyandGitHub ce252bd6c9 Allow certbot to get a cert for default_servers (#3652)
* Allow certbot to get a cert for default_servers

* Add to_string method for not printing default_server
2016-10-21 13:56:53 -07:00
Erica PortnoyandPeter Eckersley 4bc3c747cb Mark parsed Nginx addresses as listening sslishly when an ssl on directive is included in the server block. (#3607) 2016-10-10 19:04:35 -07:00
Brad WarrenandPeter Eckersley 76a92d4cde Release Certbot 0.9.0 (#3583)
* Release 0.9.0

* Bump version to 0.10.0
2016-10-05 10:13:28 -07:00
Erica PortnoyandGitHub c9bc034512 Update Nginx redirect enhancement process to modify appropriate blocks (#3546)
* Cache the vhost we find during nginx deployment for OCSP enhancement.

* Refactor to pass domain into enhancement functions

* Add https redirect to most name-matching block listening non-sslishly.

* Redirect enhancement chooses the vhost most closely matching target_name that is listening to port 80 without using ssl.

* Add default listen 80 directive when it is implicitly defined
2016-09-29 16:16:07 -07:00
Erica PortnoyandBrad Warren 9f2dfc15fe Restructure how Nginx parser re-finds vhosts, and disable creating new server blocks. (#3528)
* Restructure add_server_directives to take a vhost as argument. This is the first step towards fixing vhost selection in nginx.

* Save path to vhost in file while parsing in get_vhosts().

* Disable creating a new server block when no names match.

* Make parser select vhost based on information in the vhost it found previously, rather than searching again for a match.

* Make add_server_directives update the passed vhost

* Update boulder config to pass test

* Add testing code for the _do_for_subarray function

* documentation and formatting updates
2016-09-26 13:13:29 -07:00
Peter EckersleyandGitHub 2434b4a549 Merge pull request #3507 from certbot/only-suggest-valid-names
Only suggest names LE will accept
2016-09-22 14:23:19 -07:00
Brad Warren 93a9e8c836 list 'staple-ocsp' as supported in nginx 2016-09-21 15:48:24 -07:00
Brad Warren 8b553fa88f tie oscp stapling to enhancements system 2016-09-21 15:38:37 -07:00
Brad Warren 307b2e5307 Reject domains with only one label 2016-09-16 16:53:25 -07:00
Brad Warren 275e3f748e filter names returned by get_all_names 2016-09-16 16:47:02 -07:00
Gordin f1ff5516d1 Fixed hash_bucket_size detection for nginx 2016-08-28 20:29:22 +02:00
Peter EckersleyandGitHub 7fd249acfe Merge pull request #3383 from certbot/no-conflicting-declarations3
Avoid importing conflicting security policy directives
2016-08-18 14:11:49 -07:00
Peter Eckersley df61b0e349 Check for comments more accurately 2016-08-18 13:56:15 -07:00
Brad Warren 9fd003cd66 Mark the Nginx plugin as alpha 2016-08-17 16:37:01 -07:00
Brad Warren 4e1830b372 hide the nginx plugin 2016-08-17 16:27:23 -07:00
Brad Warren 73fdc08d83 don't hardcode certbot comment 2016-08-16 21:04:28 -07:00
Brad Warren 449487e8cb Catch all pyparsing exceptions 2016-08-16 19:34:16 -07:00
Brad Warren 465aa38143 Revert "Catch all pyparsing exceptions"
This reverts commit 7fb5cf1cf5.
2016-08-16 19:33:19 -07:00
Brad Warren 1aa18a3bad Add test to prevent regressing and not copying ssl_options to /etc/letsencrypt 2016-08-16 19:10:57 -07:00
Brad Warren 5ec22438ff Make sure mod_ssl_conf exists so it can be parsed 2016-08-16 19:04:05 -07:00
Brad Warren 971d6d7540 Don't hardcode comment added by Certbot 2016-08-16 18:50:18 -07:00
Brad Warren 76d17bfd0f Avoid modifying parsed ssl_options 2016-08-16 18:40:05 -07:00
Brad Warren 76c2fe579a Make _comment_directive more defensive 2016-08-16 18:30:45 -07:00
Brad Warren 671d7ee194 Fix up COMMENT constants 2016-08-16 17:45:43 -07:00
Brad Warren 3d4f822be0 Handle case where block is empty -- not sure if it ever happens, but let's not error out unnecessarily 2016-08-16 16:41:23 -07:00
Brad Warren ae23800e53 Comment code that confused bmw 2016-08-16 16:37:40 -07:00
Brad Warren 7fb5cf1cf5 Catch all pyparsing exceptions 2016-08-16 15:46:31 -07:00
Brad Warren 0b0eca323c Remove extra newline 2016-08-16 15:36:41 -07:00
Seth Schoen cfc8ce9db4 Add function docstring 2016-08-10 17:01:34 -07:00
Peter Eckersley 9c168017ae That was not the correct magic 2016-08-08 18:17:02 -07:00
Peter Eckersley b5fa0fbad7 This is reportedly the correct magic 2016-08-08 18:08:11 -07:00
Peter Eckersley 712bd9ee6b Copy nginx options file into integration testing environment 2016-08-08 17:58:22 -07:00
Peter Eckersley 0504882e08 Always newline config edits
Even if they're transient
2016-08-08 17:50:20 -07:00
Seth Schoen e77a3ed7b9 Return individual key, not entire config dictionary! 2016-08-08 17:22:53 -07:00
Peter Eckersley f0c2ed3059 Lint, improve coverage, rm unused code 2016-08-08 15:45:49 -07:00
Peter Eckersley da7e429125 Work around horrible spaciness API usage bug 2016-08-08 15:14:06 -07:00
Peter Eckersley 7deb1f0ad6 Fix bug with UnpsacedList.insert to final position
- which only applied when the list actually contained spaces
2016-08-08 12:15:18 -07:00
Peter Eckersley 0ade03b7bf Merge remote-tracking branch 'origin/master' into no-conflicting-declarations3 2016-08-05 15:41:54 -07:00
Peter Eckersley 460f49778f Fix tests for our new spacey, commented world 2016-08-05 15:37:01 -07:00
Peter Eckersley cdc894601c Tolerate our own added newlines 2016-08-05 15:36:40 -07:00
Peter Eckersley 3a2df72bce Add newlines to the ends of blocks more correctly 2016-08-05 15:36:24 -07:00
Seth Schoen ae6ca4d4ca Minimal fake os_constant() for nginx constants.py 2016-08-05 15:13:04 -07:00
Peter Eckersley a8abde7d8d Merge remote-tracking branch 'origin/no-conflicting-declarations3' into no-conflicting-declarations3 2016-08-05 14:47:41 -07:00
Peter Eckersley 61b81b877d Merge remote-tracking branch 'origin/master' into no-conflicting-declarations3 2016-07-29 17:28:29 -07:00
Peter Eckersley 89758decbb Fix a test 2016-07-29 17:28:22 -07:00
Peter Eckersley 9e9c4dfcf5 fix test 2016-07-27 16:55:23 -07:00
Peter Eckersley d55580025f Extra newlines & spacing 2016-07-27 16:29:30 -07:00
Peter Eckersley 2feeb50109 Fix spacing of nginx redirect blocks 2016-07-27 16:00:43 -07:00
schoenandGitHub 94ea424638 Merge pull request #3287 from certbot/nginx-charset-map
Nginx charset_map and ${VARIABLE_SUBSTITUTION} parsing
2016-07-27 15:14:15 -07:00
Brad Warren 1060ea7c3d delint 2016-07-26 17:36:58 -07:00