Commit Graph
11412 Commits
Author SHA1 Message Date
Peter Eckersley 269f15f9ee Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere 2014-06-11 00:38:40 -07:00
Jacob Hoffman-Andrews 21e841fd13 Move synced folders into a common one.
Also, create certificates.
2014-06-10 15:08:52 -04:00
Peter Eckersley a03db04ff4 WIP implementing deletion of existing cf lines 2014-06-10 08:08:40 -07:00
Peter Eckersley d0bcc13059 Break ground on an postfix config wrangling engine 2014-06-10 08:08:17 -07:00
Jacob Hoffman-Andrews 17425e7337 Merge branch 'master' of github.com:jsha/starttls-everywhere
Conflicts:
	README.md
2014-06-09 14:56:34 -07:00
jsha 7bdb63376c Merge pull request #2 from pde/master
Initial checkin of config parser, some changes to the config format.
2014-06-09 14:53:23 -07:00
Jacob Hoffman-Andrews bdbc46fc84 Add candidate starttls-everywhere config json 2014-06-09 13:10:43 -07:00
Jacob Hoffman-Andrews 0d43d2988a Update check-starttls.py to generate starttls everywhere config. 2014-06-09 13:08:01 -07:00
Jacob Hoffman-Andrews 79924108c7 Reorder JSON file to emphasize MX policies over address-domain -> MX domain mapping. 2014-06-09 10:12:09 -07:00
Peter Eckersley c033905b16 Now validating most of the config json 2014-06-08 06:22:32 -07:00
Peter Eckersley 839c523048 Fix typos 2014-06-08 06:22:22 -07:00
Peter Eckersley 7c81f23a07 Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere 2014-06-07 06:50:21 -07:00
Jacob Hoffman-Andrews e534a43d1a Make sender actually attempt TLS on outbound connections. 2014-06-06 16:07:38 -07:00
Peter Eckersley fcd1a98201 Break ground on a config parser 2014-06-06 15:54:33 -07:00
Peter Eckersley dc606eac7d Some tweaks to the config format 2014-06-06 15:54:22 -07:00
Jacob Hoffman-Andrews 372c96d9fd Update Postfix configuration and mail-send-loop 2014-06-06 14:06:08 -07:00
Jacob Hoffman-Andrews 5a9f90dc30 Merge branch 'master' of github.com:jsha/starttls-everywhere 2014-06-06 14:05:03 -07:00
Jacob Hoffman-Andrews ce0a6a1814 Add example config.json 2014-06-06 14:04:38 -07:00
jsha fa5acdf674 Simplify SPKI hash usage 2014-06-06 13:44:03 -07:00
jsha 31db3b7034 Merge pull request #1 from pde/master
Add specific postfix configs
2014-06-06 12:59:41 -07:00
Peter Eckersley 30938260d4 Split postfix configs across the VMs, and start making them do things 2014-06-05 19:45:21 -07:00
Alex Halderman f3b0ab0db7 Update README 2014-06-05 18:45:03 -07:00
Peter Eckersley 7bd06a4d35 Work in progress 2014-06-05 17:04:28 -07:00
Peter Eckersley ace9d2383d Start work on forcing TLS to valid 2014-06-05 16:51:38 -07:00
Jacob Hoffman-Andrews ed0c024209 Improved provisioning and certificate checking. 2014-06-05 16:01:07 -07:00
Jacob Hoffman-Andrews 714cb17dcb Clarify example usage of pinsets by including a CA 2014-06-05 14:26:45 -07:00
Jacob Hoffman-Andrews 6fb51d5422 Example shouldn't include hashes from Chrome source. 2014-06-05 14:11:08 -07:00
jsha 4b5b9f164f nexthop-domains -> address-domains 2014-06-05 11:51:19 -07:00
jsha 3d9d5607bd Formatting issue #2 in design doc 2014-06-05 11:34:12 -07:00
jsha aa417eec15 Formatting issue in design doc 2014-06-05 11:10:07 -07:00
jsha 844ec79f01 Add design doc 2014-06-05 11:05:08 -07:00
Jacob Hoffman-Andrews f0b9ef2716 Add a Vagrantfile and the list of golden domains. 2014-06-05 10:43:01 -07:00
Jacob Hoffman-Andrews 8857302347 check-starttls and process-google-starttls-domains.py 2014-06-04 14:41:18 -07:00
EKR 2ad063217f First import of ACIP draft 2014-02-05 13:39:26 -08:00
Seth Schoen 74af7a350e per ENISA report, switched to PKCS#1 PSS signature method 2013-10-31 12:39:00 -07:00
Seth Schoen c5f6ff92eb try to forget private keys more proactively after using them 2013-10-31 12:38:02 -07:00
Seth Schoen f35fb42096 in demo, only do POP challenge if the challenge type is POP challenge 2013-10-31 12:37:44 -07:00
Seth Schoen 1c5e4e2698 steps to generate the keys used by this demo script 2013-10-24 15:15:05 -07:00
Seth Schoen ae5bf2b177 working demonstration of proof-of-possession logic 2013-10-23 18:56:25 -07:00
Peter Eckersley ee01e0f968 tweaks 2013-08-11 17:48:24 +02:00
Peter Eckersley fddb19fe4a Import draft Trustify protocol docs from Etherpad 2013-08-11 17:47:48 +02:00
James Kasten 788e0c413a syntax fix 2013-05-23 22:25:47 -04:00
James Kasten 402eadd208 Fix configurator restart 2013-05-23 22:20:14 -04:00
James Kasten 98e70df5e4 Added restart to rollback call 2013-05-23 22:11:15 -04:00
James Kasten cbef46463d Remove orphan file use 2013-05-23 21:58:33 -04:00
James Kasten 79b88de225 recovery_routine needs to occur before VH objects are instantiated 2013-05-23 18:36:11 -04:00
James Kasten be85cfc620 Remove augeas backup save system, fix various syntax errors 2013-05-23 18:00:53 -04:00
James Kasten c9f3d1d7fc Instituted new file registration to make all config transactions atomic 2013-05-23 17:04:53 -04:00
James Kasten a6d9b0f599 Fix --view-checkpoints 2013-05-23 14:43:41 -04:00
James Kasten 13e4babfb5 Fixed save() to run checkpoint_update anytime files are added 2013-05-22 18:49:01 -04:00