 James Kasten
|
1712a024e5
|
Started refactoring code - roughly demo ready
|
2014-11-10 07:30:36 -05:00 |
|
|
James Kasten
|
cbec87e181
|
Fully support Revocation with menus
|
2014-11-09 07:30:40 -05:00 |
|
|
James Kasten
|
19bc2fa084
|
Certificate Issuance/Deployment/Redirection; recovery tokens/contact
|
2014-11-08 06:11:29 -05:00 |
|
|
James Kasten
|
412b28b219
|
Protocol overhaul - initial commit down to certificate issuance
|
2014-11-07 06:38:48 -05:00 |
|
|
James Kasten
|
80799e28a0
|
Initial ACME compliant DVSNI commit
|
2014-11-06 05:37:22 -05:00 |
|
|
Alex Halderman
|
f3b0ab0db7
|
Update README
|
2014-06-05 18:45:03 -07:00 |
|
|
EKR
|
2ad063217f
|
First import of ACIP draft
|
2014-02-05 13:39:26 -08:00 |
|
|
Seth Schoen
|
74af7a350e
|
per ENISA report, switched to PKCS#1 PSS signature method
|
2013-10-31 12:39:00 -07:00 |
|
|
Seth Schoen
|
c5f6ff92eb
|
try to forget private keys more proactively after using them
|
2013-10-31 12:38:02 -07:00 |
|
|
Seth Schoen
|
f35fb42096
|
in demo, only do POP challenge if the challenge type is POP challenge
|
2013-10-31 12:37:44 -07:00 |
|
|
Seth Schoen
|
1c5e4e2698
|
steps to generate the keys used by this demo script
|
2013-10-24 15:15:05 -07:00 |
|
|
Seth Schoen
|
ae5bf2b177
|
working demonstration of proof-of-possession logic
|
2013-10-23 18:56:25 -07:00 |
|
|
Peter Eckersley
|
ee01e0f968
|
tweaks
|
2013-08-11 17:48:24 +02:00 |
|
|
Peter Eckersley
|
fddb19fe4a
|
Import draft Trustify protocol docs from Etherpad
|
2013-08-11 17:47:48 +02:00 |
|
|
James Kasten
|
788e0c413a
|
syntax fix
|
2013-05-23 22:25:47 -04:00 |
|
|
James Kasten
|
402eadd208
|
Fix configurator restart
|
2013-05-23 22:20:14 -04:00 |
|
|
James Kasten
|
98e70df5e4
|
Added restart to rollback call
|
2013-05-23 22:11:15 -04:00 |
|
|
James Kasten
|
cbef46463d
|
Remove orphan file use
|
2013-05-23 21:58:33 -04:00 |
|
|
James Kasten
|
79b88de225
|
recovery_routine needs to occur before VH objects are instantiated
|
2013-05-23 18:36:11 -04:00 |
|
|
James Kasten
|
be85cfc620
|
Remove augeas backup save system, fix various syntax errors
|
2013-05-23 18:00:53 -04:00 |
|
|
James Kasten
|
c9f3d1d7fc
|
Instituted new file registration to make all config transactions atomic
|
2013-05-23 17:04:53 -04:00 |
|
|
James Kasten
|
a6d9b0f599
|
Fix --view-checkpoints
|
2013-05-23 14:43:41 -04:00 |
|
|
James Kasten
|
13e4babfb5
|
Fixed save() to run checkpoint_update anytime files are added
|
2013-05-22 18:49:01 -04:00 |
|
|
James Kasten
|
405a3d501b
|
SNI Challenge now relies on Configurator checkpoint system to cleanup.
|
2013-05-22 18:15:01 -04:00 |
|
|
James Kasten
|
49fe7e2a32
|
Standardized safe directory creation, created trustify_util.py for common functions
|
2013-05-22 16:56:52 -04:00 |
|
|
James Kasten
|
fea37e40c3
|
Allow finalize_checkpoint to occur even if there are no current saves
|
2013-05-22 01:19:54 -04:00 |
|
|
James Kasten
|
3ac7452ca7
|
Added a few fixes for new checkpoint system
|
2013-05-22 00:38:12 -04:00 |
|
|
James Kasten
|
b5e374ee2b
|
Reworked Configurator save/checkpoint system
|
2013-05-21 23:36:14 -04:00 |
|
|
James Kasten
|
bed2c5049a
|
Add Augeas parsing error check, support for Augeas case-insensitive sections
|
2013-05-21 17:22:38 -04:00 |
|
|
James Kasten
|
db5dfea9b9
|
Changed __case_i to be a public function
|
2013-05-20 15:38:47 -04:00 |
|
|
James Kasten
|
7f29aef2cc
|
Add support for case insensitive directives
|
2013-05-20 15:21:05 -04:00 |
|
|
James Kasten
|
9bd7b4ff7b
|
Final touches before case insensitive Augeas testing begins
|
2013-05-19 14:12:33 -04:00 |
|
|
James Kasten
|
e75489b2df
|
Added configtest at beginning of client authentication, included a few fixes
|
2013-05-17 00:11:38 -04:00 |
|
|
James Kasten
|
a256054c72
|
Added view checkpoints and rollback feature as options to cmd line
|
2013-05-16 14:20:54 -04:00 |
|
|
James Kasten
|
c8dfdf104d
|
Finished refactoring client.py
|
2013-05-16 13:19:53 -04:00 |
|
|
James Kasten
|
5f782aebd6
|
Fixed some API naming issues
|
2013-05-15 18:24:28 -04:00 |
|
|
James Kasten
|
01ed93a8b0
|
Fixed a few variable name errors
|
2013-05-15 17:41:45 -04:00 |
|
|
James Kasten
|
0913a9a8aa
|
Clean up client.py, make object oriented, add robustness
|
2013-05-15 17:30:00 -04:00 |
|
|
James Kasten
|
281b9ca592
|
Removed testing specific code for new features
|
2013-04-11 00:56:52 -04:00 |
|
|
James Kasten
|
719f50cbde
|
Added a secure initialization script and removed DNS lookups for private IPs
|
2013-04-11 00:44:36 -04:00 |
|
|
James Kasten
|
e6cd2ff80c
|
Removed brackets for parentheses
|
2012-12-01 23:06:39 -05:00 |
|
|
James Kasten
|
6818153660
|
Added tiered CA shuffling for CA choices
|
2012-12-01 22:28:25 -05:00 |
|
|
James Kasten
|
c16d2ab2d5
|
erase redundant return statement
|
2012-12-01 21:50:11 -05:00 |
|
|
James Kasten
|
635b6a8404
|
Add NameVirtualHost for new SSL Vhost if nonsslvhost had name virtual host enabled
|
2012-12-01 21:44:50 -05:00 |
|
|
James Kasten
|
3f93a1e6c9
|
Fixed issues with running multiple vhosts separately with upgrade from http vhost to https
|
2012-12-01 19:32:06 -05:00 |
|
|
James Kasten
|
44a6a9328f
|
fixed interface for make_vhost_ssl
|
2012-12-01 03:38:33 -05:00 |
|
|
James Kasten
|
ae5ad15bdb
|
minor testing change
|
2012-11-29 21:56:17 -05:00 |
|
|
James Kasten
|
616ae889ea
|
Improved vhost selection algorithm
|
2012-11-29 21:53:29 -05:00 |
|
|
James Kasten
|
afc3102998
|
Removed *:443 fix as the underlying issue was using public ip addresses in vhost when they should have been private
|
2012-11-20 15:20:08 -05:00 |
|
|
James Kasten
|
4503ff8f1d
|
Add restart after adding redirect
|
2012-11-20 01:55:50 -05:00 |
|