Peter Eckersley
2eba47a716
Verify more of the policy language
2014-06-16 14:23:51 -07:00
Peter Eckersley
8d6b6c358a
Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere
...
Conflicts:
MTAConfigGenerator.py
2014-06-16 02:47:15 -07:00
Peter Eckersley
9da4f93ae5
Changes for live demo
2014-06-16 02:46:46 -07:00
Jacob Hoffman-Andrews
43d457aa77
Typo cleanup in MTAConfigGenerator
2014-06-12 13:18:20 -04:00
Jacob Hoffman-Andrews
499f6c2fad
Add comment to ProcessgoogleSTARTTLSDomains.py
2014-06-12 11:53:02 -04:00
Jacob Hoffman-Andrews
9cd71642fb
Fix italicization boundaries
2014-06-12 11:50:39 -04:00
Jacob Hoffman-Andrews
7a7329fa19
Merge remote-tracking branch 'pde/master'
2014-06-12 11:49:09 -04:00
Jacob Hoffman-Andrews
9ce047980a
Add .gitignore
2014-06-12 11:40:17 -04:00
Peter Eckersley
02abaf57bd
Remove stray conf entry from README
2014-06-12 05:24:51 -07:00
Peter Eckersley
3d7b53daf1
Tune verbosity; reload postfix conf if we can
2014-06-12 05:24:05 -07:00
Peter Eckersley
e99abfacfd
Include the demo example with the real stuff, temporarily
2014-06-12 05:22:30 -07:00
Peter Eckersley
a2ee328bc0
Paramaterise "/etc/postfix"
2014-06-11 10:32:52 -07:00
Peter Eckersley
34cba3accf
Now successfully parsing the larger policy set
2014-06-11 09:51:56 -07:00
Peter Eckersley
3712a45399
Further (and different, and better) standardisation
2014-06-11 09:48:43 -07:00
Peter Eckersley
182e9b29e4
Trying to standardize JSON terms
2014-06-11 09:42:17 -07:00
Peter Eckersley
2540f1f1e8
Writing to the domain-wise policy file actually works now.
2014-06-11 09:31:41 -07:00
Peter Eckersley
eea1b0d8c5
Switch naming conventions so that modules are importable :)
...
It turns out that python won't import modules with hyphens in their names.
It seems that CamelCase is most consistent with our Class naming. However
feel free to do something different instead :)
2014-06-11 09:18:56 -07:00
Peter Eckersley
6e1bcfdb2a
WIP implementing domain-wise TLS policies
2014-06-11 09:17:50 -07:00
Peter Eckersley
d7e4d93190
Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere
2014-06-11 09:13:01 -07:00
Jacob Hoffman-Andrews
0c4e332811
Set up test CA and valid signed cert by that CA.
...
Also require valid cert for host 'valid'.
2014-06-11 11:45:28 -04:00
Peter Eckersley
46ce09d36d
MTA config wrangling seems to work
2014-06-11 05:01:46 -07:00
Peter Eckersley
269f15f9ee
Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere
2014-06-11 00:38:40 -07:00
Jacob Hoffman-Andrews
21e841fd13
Move synced folders into a common one.
...
Also, create certificates.
2014-06-10 15:08:52 -04:00
Peter Eckersley
a03db04ff4
WIP implementing deletion of existing cf lines
2014-06-10 08:08:40 -07:00
Peter Eckersley
d0bcc13059
Break ground on an postfix config wrangling engine
2014-06-10 08:08:17 -07:00
Jacob Hoffman-Andrews
17425e7337
Merge branch 'master' of github.com:jsha/starttls-everywhere
...
Conflicts:
README.md
2014-06-09 14:56:34 -07:00
jsha
7bdb63376c
Merge pull request #2 from pde/master
...
Initial checkin of config parser, some changes to the config format.
2014-06-09 14:53:23 -07:00
Jacob Hoffman-Andrews
bdbc46fc84
Add candidate starttls-everywhere config json
2014-06-09 13:10:43 -07:00
Jacob Hoffman-Andrews
0d43d2988a
Update check-starttls.py to generate starttls everywhere config.
2014-06-09 13:08:01 -07:00
Jacob Hoffman-Andrews
79924108c7
Reorder JSON file to emphasize MX policies over address-domain -> MX domain mapping.
2014-06-09 10:12:09 -07:00
Peter Eckersley
c033905b16
Now validating most of the config json
2014-06-08 06:22:32 -07:00
Peter Eckersley
839c523048
Fix typos
2014-06-08 06:22:22 -07:00
Peter Eckersley
7c81f23a07
Merge branch 'master' of ssh://github.com/jsha/starttls-everywhere
2014-06-07 06:50:21 -07:00
Jacob Hoffman-Andrews
e534a43d1a
Make sender actually attempt TLS on outbound connections.
2014-06-06 16:07:38 -07:00
Peter Eckersley
fcd1a98201
Break ground on a config parser
2014-06-06 15:54:33 -07:00
Peter Eckersley
dc606eac7d
Some tweaks to the config format
2014-06-06 15:54:22 -07:00
Jacob Hoffman-Andrews
372c96d9fd
Update Postfix configuration and mail-send-loop
2014-06-06 14:06:08 -07:00
Jacob Hoffman-Andrews
5a9f90dc30
Merge branch 'master' of github.com:jsha/starttls-everywhere
2014-06-06 14:05:03 -07:00
Jacob Hoffman-Andrews
ce0a6a1814
Add example config.json
2014-06-06 14:04:38 -07:00
jsha
fa5acdf674
Simplify SPKI hash usage
2014-06-06 13:44:03 -07:00
jsha
31db3b7034
Merge pull request #1 from pde/master
...
Add specific postfix configs
2014-06-06 12:59:41 -07:00
Peter Eckersley
30938260d4
Split postfix configs across the VMs, and start making them do things
2014-06-05 19:45:21 -07:00
Peter Eckersley
7bd06a4d35
Work in progress
2014-06-05 17:04:28 -07:00
Peter Eckersley
ace9d2383d
Start work on forcing TLS to valid
2014-06-05 16:51:38 -07:00
Jacob Hoffman-Andrews
ed0c024209
Improved provisioning and certificate checking.
2014-06-05 16:01:07 -07:00
Jacob Hoffman-Andrews
714cb17dcb
Clarify example usage of pinsets by including a CA
2014-06-05 14:26:45 -07:00
Jacob Hoffman-Andrews
6fb51d5422
Example shouldn't include hashes from Chrome source.
2014-06-05 14:11:08 -07:00
jsha
4b5b9f164f
nexthop-domains -> address-domains
2014-06-05 11:51:19 -07:00
jsha
3d9d5607bd
Formatting issue #2 in design doc
2014-06-05 11:34:12 -07:00
jsha
aa417eec15
Formatting issue in design doc
2014-06-05 11:10:07 -07:00
Peter Eckersley