 Seth Schoen
|
b1bc65b082
|
also deploy demoCA to server
|
2012-07-10 18:34:23 -07:00 |
|
|
Seth Schoen
|
07792d6fd0
|
rename verify_sni_challenge.py for shorter import
|
2012-07-10 18:33:38 -07:00 |
|
|
Peter Eckersley
|
d1c2572a03
|
Merge branch 'master' of github.com:research/chocolate
|
2012-07-10 18:04:40 -07:00 |
|
|
Peter Eckersley
|
2f8de2efab
|
Add m3crypto as a submodule
|
2012-07-10 18:04:18 -07:00 |
|
|
Seth Schoen
|
2f35f39797
|
deploy and build sni_challenge code on Chocolate server
|
2012-07-10 17:01:32 -07:00 |
|
|
Seth Schoen
|
2a514f5166
|
adjust daemon to use sni_challenge package
|
2012-07-10 16:59:04 -07:00 |
|
|
Seth Schoen
|
208ded9d02
|
make this a Python package that can be imported
|
2012-07-10 16:48:36 -07:00 |
|
|
James Kasten
|
e1bbcd04b7
|
changed format for perform_sni_challenge to [(addr, y, nonce, ext)], csr, key
|
2012-07-10 17:27:26 -04:00 |
|
|
James Kasten
|
87918f6124
|
added in code to catch SSL connection failures
|
2012-07-10 17:06:26 -04:00 |
|
|
James Kasten
|
6ac9d358af
|
minor postConnectionCheck fix
|
2012-07-10 17:00:59 -04:00 |
|
|
James Kasten
|
662e935bdf
|
removed postConnectionCheck
|
2012-07-10 16:46:38 -04:00 |
|
|
James Kasten
|
ec33d2be6e
|
Merge branch 'master' of github.com:research/chocolate
|
2012-07-10 16:20:18 -04:00 |
|
|
James Kasten
|
cd7b849366
|
Fixed conference call bug, made challenge servers only accessible by SNI name
|
2012-07-10 16:17:10 -04:00 |
|
|
James Kasten
|
b8c3856dfd
|
Changed extension conf to critical
|
2012-07-10 15:43:49 -04:00 |
|
|
Seth Schoen
|
3f03dc4e5c
|
implement dvsni challenge checking
|
2012-07-10 00:25:11 -07:00 |
|
|
Seth Schoen
|
cfc4cbaae3
|
remove disused debug flag in protocol
|
2012-07-09 22:33:02 -07:00 |
|
|
Seth Schoen
|
ee9343469f
|
more explicit clarification about concurrency
|
2012-07-09 22:23:44 -07:00 |
|
|
Seth Schoen
|
1f45a4cfe5
|
enforce some protocol sanity checks
|
2012-07-09 22:22:20 -07:00 |
|
|
James Kasten
|
a3435b7982
|
added ability for concurrent sni challenges, made choc ext critical, allows variable oid
|
2012-07-09 07:59:30 -04:00 |
|
|
Seth Schoen
|
ac3441a972
|
changes to make CSR.issue() successfully issue certs
|
2012-07-09 00:01:19 -07:00 |
|
|
Peter Eckersley
|
93cec72f7a
|
Merge branch 'master' of github.com:research/chocolate
|
2012-07-07 13:13:13 -07:00 |
|
|
Peter Eckersley
|
9bfc24c279
|
The demoCA is usable now
|
2012-07-07 13:12:00 -07:00 |
|
|
Seth Schoen
|
bd578f9796
|
moving everything server-side to server-ca directory
|
2012-07-06 14:45:26 -07:00 |
|
|
Eric Wustrow
|
28c9f8fdf2
|
add comments to verify_sni_challenge, make nonce be an ascii string
|
2012-07-06 15:28:17 -04:00 |
|
|
Seth Schoen
|
97e7b1a7b2
|
I forgot, I have a stub in CSR.py that already pretends to issue certs :-)
|
2012-07-04 22:05:41 -07:00 |
|
|
Seth Schoen
|
6df1976070
|
get subject public key and use it to encrypt dvsni parameter r as y
|
2012-07-03 18:03:30 -07:00 |
|
|
Seth Schoen
|
0fa6fb49c4
|
specific python-crypto version dependency
|
2012-07-03 18:03:11 -07:00 |
|
|
Seth Schoen
|
f0605fd65e
|
hopefully the right RSA encryption operation for computing y = E(r)
|
2012-07-03 01:56:26 -07:00 |
|
|
Seth Schoen
|
2e91aafa86
|
now successfully gets challenge data from server
|
2012-07-03 01:45:14 -07:00 |
|
|
Seth Schoen
|
800f255db6
|
fix several bugs to allow sending challenges from server correctly
|
2012-07-03 01:44:58 -07:00 |
|
|
Seth Schoen
|
4136f32091
|
expressions in Python function definition default values are evaluated only once, when the functions are defined
|
2012-07-03 00:55:53 -07:00 |
|
|
Seth Schoen
|
721f28068f
|
better document wire protocol
|
2012-07-02 19:53:34 -07:00 |
|
|
Seth Schoen
|
28f25b7dc1
|
remarks on timeouts and session states
|
2012-07-02 18:13:09 -07:00 |
|
|
Seth Schoen
|
14689bf2f4
|
documentation; never advance dead sessions' state
|
2012-07-02 18:10:54 -07:00 |
|
|
Seth Schoen
|
388f7577d0
|
deploy daemon.py
|
2012-07-02 17:57:44 -07:00 |
|
|
Seth Schoen
|
6667fb837b
|
use blank session ID for error if client-supplied session is unsafe
|
2012-07-02 17:52:00 -07:00 |
|
|
Seth Schoen
|
fce64442ec
|
deploy pkcs10.py to server
|
2012-07-02 17:47:44 -07:00 |
|
|
Seth Schoen
|
bca9360449
|
comments on protocol compliance enforcement
|
2012-07-02 17:46:06 -07:00 |
|
|
Seth Schoen
|
5e44ccba90
|
keep subject names in original requested order
|
2012-07-02 12:04:32 -07:00 |
|
|
Seth Schoen
|
c196bef0ab
|
infrastructure for actually issuing cert
|
2012-07-02 12:03:28 -07:00 |
|
|
Seth Schoen
|
83a1ee779b
|
there must be at least one subject name to sign
|
2012-07-01 23:14:55 -07:00 |
|
|
Seth Schoen
|
a927dae732
|
makechallenge functionality was moved into daemon.py
|
2012-07-01 23:12:29 -07:00 |
|
|
Seth Schoen
|
ffa30bf012
|
fix typo and logic
|
2012-07-01 23:11:15 -07:00 |
|
|
Seth Schoen
|
03379489c6
|
remove typo
|
2012-07-01 23:01:16 -07:00 |
|
|
Seth Schoen
|
8e1aa9b70f
|
daemon for CA to advance state of existing requests
|
2012-07-01 23:00:42 -07:00 |
|
|
Seth Schoen
|
bd331d3789
|
more concise file content search using list comprehension
|
2012-07-01 22:41:26 -07:00 |
|
|
Seth Schoen
|
0e8b5c053f
|
information about CA's session database structure
|
2012-07-01 22:20:35 -07:00 |
|
|
Seth Schoen
|
ad0adf3a21
|
instead of challengeid, just use the order presented
|
2012-07-01 22:13:34 -07:00 |
|
|
Seth Schoen
|
272d49d2f0
|
start on Redis queue structure
|
2012-07-01 18:15:29 -07:00 |
|
|
Seth Schoen
|
64c48f36e1
|
challenge ID before challenge type
|
2012-07-01 12:20:41 -07:00 |
|