Commit Graph
6308 Commits
Author SHA1 Message Date
sagi 4e41e65bfc Merge remote-tracking branch 'upstream/master' into fix_cert_path 2016-05-23 23:13:43 +00:00
bmw 860ee5c174 Merge pull request #3054 from certbot/quikfix
Pin old pkginfo version
2016-05-23 15:50:35 -07:00
Brad Warren 4919814dd1 Pin old pkginfo version 2016-05-23 15:39:00 -07:00
bmw 13ad59d01b Merge pull request #3052 from NoodlesNZ/patch-1
Fixing package names for Debian Jessie
2016-05-23 10:51:52 -07:00
Nick Le Mouton fd899d2125 Fixing package names for Debian Jessie 2016-05-23 09:44:06 +12:00
schoen 9a640e01fd Merge pull request #2962 from chrismarget/master
Randomize serial numbers of DVSNI challenge certificates.
2016-05-20 16:39:24 -07:00
sagi 7689de2ad8 Fix tests 2016-05-20 01:18:50 +00:00
Noah Swartz 686e60b4bf Merge pull request #3033 from certbot/reredirect
Fix warning about already enabled redirect in Apache
2016-05-19 16:12:25 -07:00
Sagi KedmiandJacob Hoffman-Andrews ad76de2502 OCSP Stapling Enhancement for Apache (#2723)
Currently supports only Apache >=2.3.3.
letsencrypt --staple-ocsp -d dumpbits.com [no problem to set it on for apache => 2.3.3]
To check OCSP Stapling:
[~]$ echo QUIT | openssl s_client -connect dumpbits.com:443 -status 2>/dev/null | grep -A 31 'OCSP Resp'
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
    Produced At: Mar 26 17:54:00 2016 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D
      Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1
      Serial Number: 032A2108AAA650E6EE2E6B041C03C2612A19
    Cert Status: good
    This Update: Mar 26 17:00:00 2016 GMT
    Next Update: Apr  2 17:00:00 2016 GMT

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:71:02:6a:97:d9:eb:13:c1:5c:7a:f5:eb:26:89:3b:40:
         e3:08:82:f7:71:d4:fa:61:4a:8e:4a:7d:e9:53:84:e9:3a:89:
         67:66:08:d9:0e:79:65:9a:8d:dc:fb:07:cc:93:4f:eb:4e:3c:
         cc:7f:cd:fd:db:8f:c3:25:c3:54:87:a9:9c:35:6f:c1:39:31:
         e0:b1:f6:b1:3d:52:5d:db:bb:69:0f:23:05:fe:33:29:1f:ff:
         c6:af:17:a5:98:58:50:3a:48:93:5c:09:4b:f3:91:36:48:31:
         ed:ee:47:4d:66:c3:25:cf:56:b7:f4:48:80:eb:b8:f0:27:b1:
         97:18:b4:88:71:c6:55:5d:bb:25:16:48:98:85:8a:12:8d:64:
         bf:51:df:39:b1:44:91:e1:f2:c6:c3:7d:23:2b:d2:0f:4c:7f:
         57:b1:c9:ae:ec:32:b5:6a:87:bd:83:43:f1:f7:3c:8c:11:5c:
         9d:a5:12:fa:e6:79:87:45:c6:1d:46:c8:14:1e:8d:d1:de:7a:
         0d:e4:53:f2:c9:b6:e5:6e:cb:91:14:bb:04:38:36:4f:71:55:
         e1:ff:71:c7:a6:31:ed:db:6c:0f:d7:f5:ef:0c:6e:08:6b:e0:
         37:cf:ca:a5:67:89:c2:de:8e:36:6d:2f:41:7f:9f:10:c6🇩🇪
         4d:b1:2d:09
======================================
2016-05-19 16:04:18 -07:00
sagi 3589b25dc3 Make lint happy 2016-05-19 19:35:38 +00:00
sagi 501c19ef2a Syntax 2016-05-19 19:33:04 +00:00
sagi e1eb3eff16 Improve code reuse 2016-05-19 19:27:18 +00:00
sagi fde151848d Use set_by_cli for fullchain_path and chain_path 2016-05-19 19:11:25 +00:00
sagi e737481129 WIP 2016-05-19 18:20:27 +00:00
Brad Warren 66a1399920 Add tests for multidomain vhost redirects 2016-05-19 09:40:17 -07:00
Brad Warren 574d20ecc4 Record enhancements applied to vhosts 2016-05-19 09:28:26 -07:00
Telepenin NikolayandJacob Hoffman-Andrews e385274cca Error/Warning with build docker container from Dockerfile (#3004)
When I try to build container I see in logs 
```
debconf: unable to initialize frontend: Dialog
debconf: (TERM is not set, so the dialog frontend is not usable.)
debconf: falling back to frontend: Readline
debconf: unable to initialize frontend: Readline
debconf: (This frontend requires a controlling tty.)
debconf: falling back to frontend: Teletype
```

`DEBIAN_FRONTEND=noninteractive` fixed this warning
2016-05-18 16:35:17 -07:00
Peter Eckersley 0294db7061 Merge pull request #2992 from certbot/post-hook
Only run post-hook if pre-hook was (or would have been, if it existed)
2016-05-18 16:31:00 -07:00
Peter Eckersley d3c4a9e04f Merge pull request #2994 from tapple/master
system python path has changed on el capitan
2016-05-18 14:37:53 -07:00
Peter Eckersley df9174b81f Fix whitespace 2016-05-18 14:36:07 -07:00
Peter Eckersley 8b7a7f2e4b Merge pull request #3011 from certbot/webroot-map-renewal
Allow modifying webroot-map during renewal
2016-05-18 14:32:48 -07:00
Peter Eckersley b88a2f22e6 Merge pull request #3016 from certbot/quiet-no-quiet
Make certbot-auto quieter without implementing --quiet
2016-05-18 14:22:36 -07:00
Peter Eckersley 38eef78d94 Merge pull request #3025 from SwartzCr/issue_2884
change github URL
2016-05-18 14:19:21 -07:00
Noah Swartz c4fc7b30e3 change github URL 2016-05-18 13:44:29 -07:00
Noah Swartz 03f77c1b79 Merge pull request #3014 from sagi/rewrite_engine_detection
Detect RewriteEngine  directives that originates in a VirtualHost directive
2016-05-18 13:15:02 -07:00
Peter Eckersley 4e46e325d1 Merge pull request #3021 from mgedmin/relax-hook-validation
Hook validation: skip leading spaces/newlines
2016-05-18 12:07:25 -07:00
Peter Eckersley 1549678ca0 Merge pull request #3019 from mgedmin/patch-3
Renewal hooks mean this note is outdated
2016-05-18 12:04:53 -07:00
Marius Gedminas 321a806b91 Hook validation: skip leading spaces/newlines
Improves the situation with #3020 a bit.

Does nothing about other valid shell commands that the current
validation would reject:

  - shell builtins like --post-hook 'if [ -x /my/script ]; then /my/script; fi'
  - variable assignments like --post-hook 'ENV_VAR=value command'
  - comments
  - redirections like --post-hook '<infile command'
  - I'm sure I'm missing many other exciting possibilities
2016-05-18 11:57:50 +03:00
Marius Gedminas 279cb35256 Oops, ReST syntax is weird 2016-05-18 11:05:23 +03:00
Marius Gedminas f55ef8e286 Renewal hooks mean this note is outdated 2016-05-18 11:03:18 +03:00
Brad Warren 507b154276 Don't saying you're requesting root unless you really are 2016-05-17 20:11:02 -07:00
Brad Warren 502eba1cc4 Simplify SUDO certbot prompt 2016-05-17 20:07:45 -07:00
Brad Warren 45b7c407c1 Don't tell people you check for updates on every run 2016-05-17 20:07:06 -07:00
Brad Warren af41345967 Put arg parsing in one place 2016-05-17 20:06:35 -07:00
Brad Warren 14778c15ce Run build to make le-auto up to date 2016-05-17 20:05:47 -07:00
sagi 7e3c9399e5 Use cli.set_by_cli to detect if the user explicitly set cert_path 2016-05-17 22:12:11 +00:00
Peter Eckersley 248dc0962e Merge pull request #2895 from dietsche/joyent
Joyent SmartOS Zone Bootstrap Support [revised]
2016-05-17 14:54:08 -07:00
Peter Eckersley 4118da2c53 Merge pull request #3010 from certbot/autopts
Fix *-auto command line parsing
2016-05-17 14:33:25 -07:00
chrismarget 6dd9991371 Fix invalid attribute for pylint 2016-05-17 20:10:20 +00:00
chrismarget 85e9624555 Added test for random certificate serial numbers from gen_ss_cert. 2016-05-17 19:50:57 +00:00
sagi 886776d741 Make lint happy 2016-05-17 18:29:39 +00:00
sagi 3cf3e5b685 Detect RewriteEngine directives that originate in VirtualHosts 2016-05-17 18:07:52 +00:00
Noah Swartz 4b1d9e0af2 Merge pull request #2986 from certbot/doc-cleanup
Doc cleanup
2016-05-16 20:14:02 -07:00
Brad Warren accc83a1ca add py2.6 compatibility 2016-05-16 18:03:17 -07:00
Brad Warren b9c97954ee Add comment about removing the exception in the future 2016-05-16 17:48:26 -07:00
Brad Warren 323bb34144 Add test to prevent regressions 2016-05-16 17:45:52 -07:00
Brad Warren 9efdd3b38f Fixes 2977 2016-05-16 17:34:30 -07:00
sagi c0228ef1aa Boulder integration scripts provides a cert_path 2016-05-16 22:11:15 +00:00
Brad Warren d39dee20ad fix auto arg parsing 2016-05-16 15:06:51 -07:00
sagi f092669347 If cert_path provided - do not randomize it 2016-05-16 21:19:44 +00:00