Seth Schoen
|
4453d3fab8
|
Add a missing crypto_util
|
2014-11-24 16:02:30 -08:00 |
|
Seth Schoen
|
b4492042d9
|
For crypto.util, read crypto_util
|
2014-11-24 15:59:32 -08:00 |
|
Seth Schoen
|
c741d969de
|
Correct PEM/DER return behavior
|
2014-11-24 15:52:48 -08:00 |
|
Seth Schoen
|
35c34ec6d4
|
PEP8 formatting fixes
|
2014-11-24 15:52:22 -08:00 |
|
Seth Schoen
|
2e8cdd071a
|
Integrate CSR and private key validation steps into client
|
2014-11-24 14:16:29 -08:00 |
|
Seth Schoen
|
7e71bccf28
|
Add documentation for parameters of new functions
|
2014-11-24 14:10:35 -08:00 |
|
Seth Schoen
|
ea6bec851b
|
Add utility functions for checking CSR and privkey
|
2014-11-23 18:21:56 -08:00 |
|
Seth Schoen
|
faaf101f08
|
More complete list of exceptions that can be raised
The acme.acme_object_validate() function can also raise ValueError
when given something that isn't JSON.
|
2014-11-22 17:36:10 -08:00 |
|
Seth Schoen
|
8b75058783
|
Spelling correction
|
2014-11-22 00:22:52 -08:00 |
|
Seth Schoen
|
b8170a38ec
|
docstrings and add JSON pretty-printing code
|
2014-11-18 16:39:38 -08:00 |
|
Seth Schoen
|
0bbec49880
|
consistent naming of PEM files in CONFIG.py
|
2014-11-17 15:00:36 -08:00 |
|
Seth Schoen
|
16af948b36
|
use JSON Schema schemata for ACME protocol validation
|
2014-11-17 14:50:01 -08:00 |
|
Seth Schoen
|
74af7a350e
|
per ENISA report, switched to PKCS#1 PSS signature method
|
2013-10-31 12:39:00 -07:00 |
|
Seth Schoen
|
c5f6ff92eb
|
try to forget private keys more proactively after using them
|
2013-10-31 12:38:02 -07:00 |
|
Seth Schoen
|
f35fb42096
|
in demo, only do POP challenge if the challenge type is POP challenge
|
2013-10-31 12:37:44 -07:00 |
|
Seth Schoen
|
1c5e4e2698
|
steps to generate the keys used by this demo script
|
2013-10-24 15:15:05 -07:00 |
|
Seth Schoen
|
ae5bf2b177
|
working demonstration of proof-of-possession logic
|
2013-10-23 18:56:25 -07:00 |
|
Seth Schoen
|
85d7437178
|
per discussion, remove clock skew checks; also, two TODOs moved to filed issues
|
2012-11-19 11:59:21 -08:00 |
|
Seth Schoen
|
2acbe09ded
|
the peername is actually unknown, not unspecified, in this case
|
2012-11-19 11:09:09 -08:00 |
|
Seth Schoen
|
05823ba2b0
|
peername may not be set in case of error
|
2012-11-19 11:05:05 -08:00 |
|
Seth Schoen
|
260983bde2
|
more sanity checking, though it's already done by the regular expression
|
2012-11-18 22:51:53 -08:00 |
|
Seth Schoen
|
96c6f1d737
|
log full session ID on a line by itself
|
2012-11-18 22:42:05 -08:00 |
|
Seth Schoen
|
796309a2ad
|
allow one hour in the future
|
2012-11-18 22:39:58 -08:00 |
|
Seth Schoen
|
1bb8dcfacc
|
further minor logging improvements
|
2012-11-18 22:37:20 -08:00 |
|
Seth Schoen
|
2d6af52d21
|
make logging output shorter
|
2012-11-18 22:32:58 -08:00 |
|
Seth Schoen
|
97ea1082ef
|
further shorten short session ID
|
2012-11-18 22:28:16 -08:00 |
|
Seth Schoen
|
f67b5656f6
|
a more concise time format
|
2012-11-18 22:25:25 -08:00 |
|
Seth Schoen
|
bcf842e265
|
add time to the beginning of each log message
|
2012-11-18 22:24:12 -08:00 |
|
Seth Schoen
|
e3dbe1a60f
|
log IP address that payments come from
|
2012-11-18 22:21:06 -08:00 |
|
Seth Schoen
|
d55b871e9f
|
log successful and unsuccessful payment attempts
|
2012-11-18 22:19:18 -08:00 |
|
Seth Schoen
|
5d9e08964b
|
Merge branch 'master' of ssh://github.com/research/chocolate
|
2012-11-18 22:12:48 -08:00 |
|
Seth Schoen
|
445ed85774
|
error_uri to allow displaying useful error messages from server
|
2012-11-18 22:12:28 -08:00 |
|
Seth Schoen
|
83d243923d
|
adding name field to payment form
|
2012-11-18 22:12:00 -08:00 |
|
Seth Schoen
|
4c7126d0cd
|
basic logging about messages from clients
|
2012-11-18 21:31:00 -08:00 |
|
Seth Schoen
|
9d1c0b8b19
|
proxy_peername is always 0.0.0.1 (unspecified)
|
2012-11-18 21:08:07 -08:00 |
|
Seth Schoen
|
2172c64070
|
show very slightly nicer error for bad payments
|
2012-11-18 21:07:20 -08:00 |
|
Seth Schoen
|
14b7d20bf7
|
further attempt to log remote peernames of dvsni test sockets!
|
2012-11-18 21:04:24 -08:00 |
|
Seth Schoen
|
1a830e2ab4
|
attempt to log remote peernames of dvsni test sockets!
|
2012-11-18 21:03:54 -08:00 |
|
Seth Schoen
|
b369e96d06
|
issue daemon doesn't verify challenges
|
2012-11-18 21:02:59 -08:00 |
|
Seth Schoen
|
39d1924990
|
oops
|
2012-11-18 20:56:58 -08:00 |
|
Seth Schoen
|
648d641311
|
make logging daemon log when it's shut down
|
2012-11-18 20:56:24 -08:00 |
|
Seth Schoen
|
2dd531b65d
|
paren in wrong place
|
2012-11-18 20:53:18 -08:00 |
|
Seth Schoen
|
09a2326e8b
|
missing paren
|
2012-11-18 20:52:08 -08:00 |
|
Seth Schoen
|
c4c8b4ed53
|
use logging mechanism instead of print
|
2012-11-18 20:50:05 -08:00 |
|
Seth Schoen
|
a67c5de309
|
second instance of ",".join bug
|
2012-11-18 20:43:19 -08:00 |
|
Seth Schoen
|
24af9acbd0
|
unfortunately there is a scoping issue here
|
2012-11-18 20:42:07 -08:00 |
|
Seth Schoen
|
a96365faf0
|
make all redis objects global for log()
|
2012-11-18 20:40:34 -08:00 |
|
Seth Schoen
|
ca2a40aa33
|
Merge branch 'master' of ssh://github.com/research/chocolate
|
2012-11-18 20:37:43 -08:00 |
|
Seth Schoen
|
12a1782ebe
|
whoops, ",".join instead of join
|
2012-11-18 20:37:27 -08:00 |
|
Seth Schoen
|
8ebdd0a8af
|
make all daemons import the log function
|
2012-11-18 20:35:57 -08:00 |
|
Seth Schoen
|
8da998b4ae
|
sample use of logger :-)
|
2012-11-18 20:34:19 -08:00 |
|
Seth Schoen
|
14caa100d8
|
Merge branch 'master' of ssh://github.com/research/chocolate
|
2012-11-18 20:32:13 -08:00 |
|
Seth Schoen
|
ef8d3b661e
|
add logging function
|
2012-11-18 20:31:58 -08:00 |
|
Seth Schoen
|
99a679209c
|
make daemons say what they are
|
2012-11-18 20:27:04 -08:00 |
|
Seth Schoen
|
91c36318d7
|
make hostname lowercase before checking
|
2012-11-18 20:22:42 -08:00 |
|
Seth Schoen
|
6bf1cef04d
|
names_list, not names
|
2012-11-18 19:49:40 -08:00 |
|
Seth Schoen
|
b66e24ce2a
|
say what names this request applied to
|
2012-11-18 19:49:12 -08:00 |
|
Seth Schoen
|
052644c2e4
|
surely the user will want to know how much money they paid :-)
|
2012-11-18 19:44:38 -08:00 |
|
Seth Schoen
|
e66a8d54c3
|
make "thank you" page nicer too
|
2012-11-18 19:36:49 -08:00 |
|
Seth Schoen
|
5e3a03bd73
|
make font monospaced for credit card number
|
2012-11-18 19:31:23 -08:00 |
|
Seth Schoen
|
c5f475c6fc
|
try to improve spacing again
|
2012-11-18 19:15:26 -08:00 |
|
Seth Schoen
|
a5ad017c72
|
change spacing slightly
|
2012-11-18 19:13:31 -08:00 |
|
Seth Schoen
|
98b4898c8f
|
remove dead code
|
2012-11-18 17:58:00 -08:00 |
|
Seth Schoen
|
674adbf9af
|
add credit card type selector
|
2012-11-18 17:57:30 -08:00 |
|
Seth Schoen
|
5921f4878b
|
actually we assume this is a GET, not a POST!
|
2012-11-18 17:56:22 -08:00 |
|
Seth Schoen
|
0d3e0bd72c
|
actually these references should be relative to the web root
|
2012-11-18 17:06:33 -08:00 |
|
Seth Schoen
|
708677dd65
|
improved payment form
|
2012-11-18 17:02:28 -08:00 |
|
Seth Schoen
|
8e4e2af1fa
|
this is a simple key, not a hash
|
2012-11-18 16:47:58 -08:00 |
|
Seth Schoen
|
647abf8e3c
|
send abbreviated URL for payments, not using session ID
|
2012-11-18 16:43:07 -08:00 |
|
Seth Schoen
|
9f2a49705f
|
the client is calling cleanup() on this challenge type too
|
2012-11-17 01:03:36 -08:00 |
|
Seth Schoen
|
c6fd758acf
|
here, the attempt to log the fact that the session succeeded caused the daemon to crash (!)
|
2012-11-17 00:58:45 -08:00 |
|
Seth Schoen
|
44e6383171
|
another example of "self.id" that should be "session"
|
2012-11-17 00:55:33 -08:00 |
|
Seth Schoen
|
ab2bb1d6d7
|
server didn't realize "payment" was a valid state!
|
2012-11-17 00:50:22 -08:00 |
|
Seth Schoen
|
9c30f984b9
|
maybe I shouldn't just have copied and pasted this code from the corresponding sanity check in chocolate.py
|
2012-11-17 00:44:43 -08:00 |
|
Seth Schoen
|
e3c819178f
|
actually the URL in a payment challenge is element #0 of the data (which is a list)
|
2012-11-17 00:41:01 -08:00 |
|
Seth Schoen
|
56411b57a8
|
embed text of reason into format string
|
2012-11-17 00:38:16 -08:00 |
|
Seth Schoen
|
36fd86cf80
|
this, too, is an instance method
|
2012-11-17 00:37:14 -08:00 |
|
Seth Schoen
|
1c0bfd714b
|
this is always an instance method
|
2012-11-17 00:35:57 -08:00 |
|
Seth Schoen
|
c8428de0a6
|
it looks like dialog must also be imported here
|
2012-11-17 00:34:21 -08:00 |
|
Seth Schoen
|
978bc03777
|
repeat of unicode/str incompatibility problem
|
2012-11-17 00:32:03 -08:00 |
|
Seth Schoen
|
466ff0e525
|
this is a boolean value, not a string
|
2012-11-17 00:26:23 -08:00 |
|
Seth Schoen
|
f759e26e58
|
add $@ to pass command line arguments through to daemons
|
2012-11-16 14:45:31 -08:00 |
|
Seth Schoen
|
2845c8f1f5
|
two CSR sanity-checking todo items
|
2012-11-15 23:31:28 -08:00 |
|
Seth Schoen
|
4a62ac88d5
|
destroy destroy
|
2012-11-15 23:29:00 -08:00 |
|
Seth Schoen
|
c0ad6ac5da
|
tell the client when payment is required by sending payment challenge
|
2012-11-15 21:52:56 -08:00 |
|
Seth Schoen
|
911cd4318f
|
explain why payment-daemon.py is separate from payment.py
|
2012-11-15 21:38:12 -08:00 |
|
Seth Schoen
|
85b1a872ab
|
automatically start up payment daemon
|
2012-11-15 21:35:21 -08:00 |
|
Seth Schoen
|
c3f23f62d2
|
put session into payment state after verifying dvsni if policy calls for a payment
|
2012-11-15 21:34:00 -08:00 |
|
Seth Schoen
|
47fd709853
|
policy to trigger requiring payment
|
2012-11-15 21:30:05 -08:00 |
|
Seth Schoen
|
c23ac10584
|
sanity check, then go to issue state in response to payment message
|
2012-11-15 21:23:43 -08:00 |
|
Seth Schoen
|
8e8d15a0b2
|
further playing with payment form
|
2012-11-15 21:17:08 -08:00 |
|
Seth Schoen
|
ddbf37b75e
|
experimenting with placeholder form
|
2012-11-15 21:09:17 -08:00 |
|
Seth Schoen
|
d62aaf9d13
|
make payment form not actually try to submit CC number
|
2012-11-15 20:56:48 -08:00 |
|
Seth Schoen
|
adc2a62735
|
two-step payment process with atrocious HTML form
|
2012-11-15 15:03:57 -08:00 |
|
Seth Schoen
|
b3be68ba67
|
process payment request from end-user web browser
|
2012-11-15 14:46:45 -08:00 |
|
Seth Schoen
|
f3935fac9e
|
catch GET parameter
|
2012-11-15 14:33:15 -08:00 |
|
Seth Schoen
|
aed32981f1
|
mock payments processor
|
2012-11-15 14:27:23 -08:00 |
|
Seth Schoen
|
7726cfb1e0
|
note AllowDotExit requirement for exit geography
|
2012-11-09 11:57:57 -08:00 |
|
Seth Schoen
|
592663c77f
|
forgot to commit the exit geography demo a while ago
|
2012-11-09 11:57:23 -08:00 |
|
Seth Schoen
|
4f7e9ee3b9
|
stub for the daemon that notices when payments happen
|
2012-11-09 11:55:42 -08:00 |
|