 Peter Eckersley
|
30938260d4
|
Split postfix configs across the VMs, and start making them do things
|
2014-06-05 19:45:21 -07:00 |
|
|
Alex Halderman
|
f3b0ab0db7
|
Update README
|
2014-06-05 18:45:03 -07:00 |
|
|
Peter Eckersley
|
7bd06a4d35
|
Work in progress
|
2014-06-05 17:04:28 -07:00 |
|
|
Peter Eckersley
|
ace9d2383d
|
Start work on forcing TLS to valid
|
2014-06-05 16:51:38 -07:00 |
|
|
Jacob Hoffman-Andrews
|
ed0c024209
|
Improved provisioning and certificate checking.
|
2014-06-05 16:01:07 -07:00 |
|
|
Jacob Hoffman-Andrews
|
714cb17dcb
|
Clarify example usage of pinsets by including a CA
|
2014-06-05 14:26:45 -07:00 |
|
|
Jacob Hoffman-Andrews
|
6fb51d5422
|
Example shouldn't include hashes from Chrome source.
|
2014-06-05 14:11:08 -07:00 |
|
|
jsha
|
4b5b9f164f
|
nexthop-domains -> address-domains
|
2014-06-05 11:51:19 -07:00 |
|
|
jsha
|
3d9d5607bd
|
Formatting issue #2 in design doc
|
2014-06-05 11:34:12 -07:00 |
|
|
jsha
|
aa417eec15
|
Formatting issue in design doc
|
2014-06-05 11:10:07 -07:00 |
|
|
jsha
|
844ec79f01
|
Add design doc
|
2014-06-05 11:05:08 -07:00 |
|
|
Jacob Hoffman-Andrews
|
f0b9ef2716
|
Add a Vagrantfile and the list of golden domains.
|
2014-06-05 10:43:01 -07:00 |
|
|
Jacob Hoffman-Andrews
|
8857302347
|
check-starttls and process-google-starttls-domains.py
|
2014-06-04 14:41:18 -07:00 |
|
|
EKR
|
2ad063217f
|
First import of ACIP draft
|
2014-02-05 13:39:26 -08:00 |
|
|
Seth Schoen
|
74af7a350e
|
per ENISA report, switched to PKCS#1 PSS signature method
|
2013-10-31 12:39:00 -07:00 |
|
|
Seth Schoen
|
c5f6ff92eb
|
try to forget private keys more proactively after using them
|
2013-10-31 12:38:02 -07:00 |
|
|
Seth Schoen
|
f35fb42096
|
in demo, only do POP challenge if the challenge type is POP challenge
|
2013-10-31 12:37:44 -07:00 |
|
|
Seth Schoen
|
1c5e4e2698
|
steps to generate the keys used by this demo script
|
2013-10-24 15:15:05 -07:00 |
|
|
Seth Schoen
|
ae5bf2b177
|
working demonstration of proof-of-possession logic
|
2013-10-23 18:56:25 -07:00 |
|
|
Peter Eckersley
|
ee01e0f968
|
tweaks
|
2013-08-11 17:48:24 +02:00 |
|
|
Peter Eckersley
|
fddb19fe4a
|
Import draft Trustify protocol docs from Etherpad
|
2013-08-11 17:47:48 +02:00 |
|
|
James Kasten
|
788e0c413a
|
syntax fix
|
2013-05-23 22:25:47 -04:00 |
|
|
James Kasten
|
402eadd208
|
Fix configurator restart
|
2013-05-23 22:20:14 -04:00 |
|
|
James Kasten
|
98e70df5e4
|
Added restart to rollback call
|
2013-05-23 22:11:15 -04:00 |
|
|
James Kasten
|
cbef46463d
|
Remove orphan file use
|
2013-05-23 21:58:33 -04:00 |
|
|
James Kasten
|
79b88de225
|
recovery_routine needs to occur before VH objects are instantiated
|
2013-05-23 18:36:11 -04:00 |
|
|
James Kasten
|
be85cfc620
|
Remove augeas backup save system, fix various syntax errors
|
2013-05-23 18:00:53 -04:00 |
|
|
James Kasten
|
c9f3d1d7fc
|
Instituted new file registration to make all config transactions atomic
|
2013-05-23 17:04:53 -04:00 |
|
|
James Kasten
|
a6d9b0f599
|
Fix --view-checkpoints
|
2013-05-23 14:43:41 -04:00 |
|
|
James Kasten
|
13e4babfb5
|
Fixed save() to run checkpoint_update anytime files are added
|
2013-05-22 18:49:01 -04:00 |
|
|
James Kasten
|
405a3d501b
|
SNI Challenge now relies on Configurator checkpoint system to cleanup.
|
2013-05-22 18:15:01 -04:00 |
|
|
James Kasten
|
49fe7e2a32
|
Standardized safe directory creation, created trustify_util.py for common functions
|
2013-05-22 16:56:52 -04:00 |
|
|
James Kasten
|
fea37e40c3
|
Allow finalize_checkpoint to occur even if there are no current saves
|
2013-05-22 01:19:54 -04:00 |
|
|
James Kasten
|
3ac7452ca7
|
Added a few fixes for new checkpoint system
|
2013-05-22 00:38:12 -04:00 |
|
|
James Kasten
|
b5e374ee2b
|
Reworked Configurator save/checkpoint system
|
2013-05-21 23:36:14 -04:00 |
|
|
James Kasten
|
bed2c5049a
|
Add Augeas parsing error check, support for Augeas case-insensitive sections
|
2013-05-21 17:22:38 -04:00 |
|
|
James Kasten
|
db5dfea9b9
|
Changed __case_i to be a public function
|
2013-05-20 15:38:47 -04:00 |
|
|
James Kasten
|
7f29aef2cc
|
Add support for case insensitive directives
|
2013-05-20 15:21:05 -04:00 |
|
|
James Kasten
|
9bd7b4ff7b
|
Final touches before case insensitive Augeas testing begins
|
2013-05-19 14:12:33 -04:00 |
|
|
James Kasten
|
e75489b2df
|
Added configtest at beginning of client authentication, included a few fixes
|
2013-05-17 00:11:38 -04:00 |
|
|
James Kasten
|
a256054c72
|
Added view checkpoints and rollback feature as options to cmd line
|
2013-05-16 14:20:54 -04:00 |
|
|
James Kasten
|
c8dfdf104d
|
Finished refactoring client.py
|
2013-05-16 13:19:53 -04:00 |
|
|
James Kasten
|
5f782aebd6
|
Fixed some API naming issues
|
2013-05-15 18:24:28 -04:00 |
|
|
James Kasten
|
01ed93a8b0
|
Fixed a few variable name errors
|
2013-05-15 17:41:45 -04:00 |
|
|
James Kasten
|
0913a9a8aa
|
Clean up client.py, make object oriented, add robustness
|
2013-05-15 17:30:00 -04:00 |
|
|
James Kasten
|
281b9ca592
|
Removed testing specific code for new features
|
2013-04-11 00:56:52 -04:00 |
|
|
James Kasten
|
719f50cbde
|
Added a secure initialization script and removed DNS lookups for private IPs
|
2013-04-11 00:44:36 -04:00 |
|
|
James Kasten
|
e6cd2ff80c
|
Removed brackets for parentheses
|
2012-12-01 23:06:39 -05:00 |
|
|
James Kasten
|
6818153660
|
Added tiered CA shuffling for CA choices
|
2012-12-01 22:28:25 -05:00 |
|
|
James Kasten
|
c16d2ab2d5
|
erase redundant return statement
|
2012-12-01 21:50:11 -05:00 |
|