Commit Graph
9506 Commits
Author SHA1 Message Date
Seth SchoenandBrad Warren be457ffa95 Test more in nginx compatibility tests
* Highlight failures more with asterisks

* Filter out wildcard names from all_names

* Only test -ai, not -aie (no redirects)

* Modified versions of almost all of 79 configs corpus

* Re-enable now-working stanza with 301 redirect

* Change another redirect to go to :443
2017-06-20 17:14:22 -07:00
Alexandre de VerteuilandBrad Warren ed717d6bc4 tls-sni-01 with the manual plugin (#4636)
* Add TLS-SNI-01 support to Manual plugin

* Add environment variable CERTBOT_SNI_DOMAIN for manual-auth-hook

* Make AuthenticatorTest inherit from TempDirTestCase

* Add test_get_z_domain()

* Document CERTBOT_SNI_DOMAIN in docs/using.rst
2017-06-19 09:39:14 -07:00
Matt DaintyandZach Shepherd 811d436d5a RFC 2136 DNS Authenticator (#4701)
Introduce a plugin that automates the process of completing a dns-01 challenge by creating, and subsequently removing, TXT records using RFC 2136 Dynamic Updates (a.k.a. nsupdate).

This plugin has been tested with BIND, but may work with other RFC 2136-compatible DNS servers, such as PowerDNS.
2017-06-16 16:53:46 -07:00
Brad WarrenandPeter Eckersley bb8e504a02 Add warning about changing the UA (#4843) 2017-06-16 15:01:13 -07:00
Zach ShepherdandBrad Warren 3f86e13acc LuaDNS DNS Authenticator (#4605)
Implement an Authenticator which can fulfill a dns-01 challenge using
the LuaDNS API. Applicable only for domains using LuaDNS for DNS.

Testing Done:
 * `tox -e py27`
 * `tox -e lint`
 * Manual testing:
    * Used `certbot certonly --dns-luadns -d`, specifying a
      credentials file as a command line argument. Verified that a
      certificate was successfully obtained without user interaction.
 * Negative testing:
    * Path to non-existent credentials file.
    * Credentials file with unsafe permissions (644).
    * Path to credentials file without an email.
    * Path to credentials file with an invalid email.
    * Path to credentials file without a token.
    * Path to credentials file with an invalid token.
    * Domain name not registered to LuaDNS account.
2017-06-16 14:43:12 -07:00
Zach ShepherdandBrad Warren 32f7e82a69 add module-level documentation for DNS Made Easy (#4845)
Add module-level documentation describing the use of
certbot-dns-dnsmadeeasy, including discussion of credential management.
2017-06-16 13:30:24 -07:00
Zach ShepherdandBrad Warren 87f6e18ac4 Add certbot-dns-dnsmadeeasy to release script (#4844) 2017-06-16 10:35:52 -07:00
Zach ShepherdandBrad Warren f51d345d5b Low-impact cleanup of IDisplay (#4818)
Remove unused help-related display code. When NcursesDisplay was
removed[1], help was deprecated. This change removes the remaining
bits and pieces of code.

Remove unused escape-related display code. When NcursesDisplay was
removed[1], escape was deprecated. This change removes the remaining
bits and pieces of code.

Remove uses of unused menu parameters.

Remove unused default_status/default_state argument from checklist.
(This seems safe because not only is it unused, the parameter has
different names in the interface and implementation)

1 - d54cb76432

Resolves #4795.
2017-06-15 17:14:38 -07:00
Zach ShepherdandBrad Warren 0a269f31d0 DNS Made Easy DNS Authenticator (#4603)
Implement an Authenticator which can fulfill a dns-01 challenge using
the DNS Made Easy API. Applicable only for domains using DNS Made Easy.

Testing Done:
 * `tox -e py27`
 * `tox -e lint`
 * Manual testing:
   (`http://api.sandbox.dnsmadeeasy.com/V2.0` used as the
    `api_endpoint` for all manual testing)
    * Used `certbot certonly --dns-dnsmadeeasy -d`, specifying a
      credentials file as a command line argument. Verified that a
      certificate was successfully obtained without user interaction.
 * Negative testing:
    * Path to non-existent credentials file.
    * Credentials file with unsafe permissions (644).
    * Path to credentials file with an invalid API key.
    * Path to credentials file with a malformed API key.
    * Path to credentials file with an invalid Secret key.
    * Path to credentials file with a malformed Secret key.
    * Domain name not registered to DNS Made Easy account.
2017-06-15 16:41:00 -07:00
Brad WarrenandGitHub efe5b4c82f Pin zope.interface in oldest tests (#4842)
* pin zope.interface in oldest tests

* pin zope.component in oldest tests
2017-06-15 15:33:42 -07:00
Brad WarrenandGitHub 22ee81bdfd fix sphinx build failures (#4831) 2017-06-15 14:57:06 -07:00
Noah SwartzandGitHub 8279caea01 Merge pull request #4796 from zjs/topic/zjs/docs
Provide basic DNS authenticator documentation
2017-06-14 13:39:08 -07:00
Erik RoseandBrad Warren 98805ccae0 Upgrade cryptography to 1.9 for certbot-auto. Fix #4640. (#4815)
* Upgrade cryptography to 1.9 for certbot-auto. Fix #4640.

* Update cffi to the latest, as cryptography now requires >=1.7.
2017-06-12 13:50:21 -07:00
Noah SwartzandGitHub 6d4aaad8c6 Merge pull request #4817 from zjs/topic/zjs/docs-route53
route53: add module-level documentation
2017-06-12 10:30:39 -07:00
Felix YanandBrad Warren 4866e9fe61 Fix a typo: syncronization -> synchronization (#4826) 2017-06-12 08:20:51 -07:00
Andrew IttnerandBrad Warren cafd4802b7 Add more useful usage instructions for all subcommands (#4710)
* Add more useful usage instructions for all subcommands

Fixes #3875.

* Update usage instructions

Address PR comments.  Fixes #3875.

* Fix line length

* Suffix usage lines with two empty lines

Per review, this brackets all usage text in 2 newlines to match existing
text.
2017-06-12 08:12:41 -07:00
Felix YanandBrad Warren aab097bf7f Add DNS Authenticator plugins (#4822) 2017-06-12 07:41:50 -07:00
Felix YanandBrad Warren 6d74a0d3ce Fix digitalocean plugin tests for Python 3 (#4821)
assertItemsEqual() doesn't exist in Python 3.x. Travis didn't fail because of some nose errors (so not all tests were run).
2017-06-12 07:41:35 -07:00
Johannes KeyserandBrad Warren 498f8ad75c Add AAAA record check suggestion (#4824) 2017-06-12 07:40:56 -07:00
Zach ShepherdandBrad Warren a04f63bd31 route53: autogenerate documentation (#4816)
Creates documentation boilerplate for certbot-dns-route53 using
tools/sphinx-quickstart.sh.

Adds trivial `authenticator.rst` and `dns_route53.rst` files.
2017-06-09 16:01:59 -07:00
Noah SwartzandGitHub 2ae225ee70 Merge pull request #4813 from certbot/keep-space
Keep trailing space on prompt
2017-06-09 15:22:27 -07:00
Zach Shepherd 31d5d27887 route53: add module-level documentation
Add module-level documentation describing the use of certbot-dns-route53
including discussion of credential management.
2017-06-09 13:47:39 -07:00
Brad Warren d3549e18a7 Correct message about vhost ambiguity.
When our Apache plugin is unable to determine which virtual host to use in
non-interactive mode, it raises an error about vhost ambiguity with
instructions on how to fix the problem. These instructions stated that we
require one vhost per file which is no longer accurate since #4706 so I removed
this part of the error message.
2017-06-09 12:48:59 -07:00
Zach Shepherd 3b3c878b11 fixup! fixup! Add documentation for Google 2017-06-09 12:06:49 -07:00
Brad WarrenandGitHub 9610320ee7 remove #certbot@OFTC from using.rst (#4812) 2017-06-09 11:57:31 -07:00
Brad Warren 2ebd8e9763 Add trailing space to prompt. 2017-06-09 10:50:21 -07:00
Brad Warren 1871f0d1b9 Deduplicate code using textwrap.fill. 2017-06-09 10:46:51 -07:00
Jacob Hoffman-AndrewsandBrad Warren cd34c4272d Improve text of manual plugin. (#4810) 2017-06-09 10:09:45 -07:00
Felix YanandBrad Warren 228726597b Update Arch package name for acme (#4811)
We have migrated to use Python 3 variant of acme, so let's list python-acme instead of the old python2-acme one.
2017-06-09 10:04:24 -07:00
Jacob Hoffman-AndrewsandBrad Warren 76ecb7035f Remove "alpha" and "beta" qualifiers from docs. (#4808) 2017-06-09 08:35:04 -07:00
Zach Shepherd 5ee47e9210 fixup! Add documentation for CloudXNS 2017-06-08 16:19:30 -07:00
Zach Shepherd c353fd349a fixup! Add documentation for Google 2017-06-08 16:13:13 -07:00
Zach Shepherd de7e55688f fixup! Add documentation for Google 2017-06-08 15:56:38 -07:00
Zach Shepherd 25d6369b04 Add documentation for NS1 2017-06-08 15:51:47 -07:00
Zach Shepherd 14b1d2d72b Explicitly mention the permissions warning and chmod 600 2017-06-08 15:44:38 -07:00
Brad WarrenandGitHub d570bf5f2d Update CHANGELOG.md for 0.15.0 (#4803)
* Update CHANGELOG.md for 0.15.0

* mention #4575 in CHANGELOG.md
2017-06-08 15:25:22 -07:00
Zach Shepherd c180a1065f Add documentation for Google 2017-06-08 15:08:11 -07:00
Zach Shepherd 0325ad9244 Add documentation for DNSimple 2017-06-08 14:18:52 -07:00
Zach Shepherd 502ea82ac4 Add documentation for DigitalOcean 2017-06-08 13:58:53 -07:00
Brad WarrenandGitHub 650611bd1f Fix oldest tests (#4782)
* Add pip_install_editable.sh

* add install_and_test.sh

* simplify tox.ini and fix oldest tests

* Put paths & packages on their own line in tox.ini
2017-06-08 12:22:46 -07:00
Zach Shepherd 9f56693ad4 Add documentation for CloudXNS 2017-06-08 12:18:56 -07:00
Yen Chi HsuanandBrad Warren ba3b14d4da Add Arch Linux constants for Apache (#4466) 2017-06-08 12:08:47 -07:00
Zach Shepherd 1ac7848ce6 Respond to review feedback
* Clarify that the challenge involves TXT records
* Clarify potential consequences of credential exposure
2017-06-08 11:53:52 -07:00
Zach Shepherd 0387031550 Various improvements 2017-06-08 11:53:52 -07:00
Zach Shepherd 1817cfe460 Document arguments 2017-06-08 11:53:52 -07:00
Zach Shepherd 9f7c9decce Expand documentation 2017-06-08 11:53:52 -07:00
Zach Shepherd 215c85d7be Provide basic Cloudflare documentation 2017-06-08 11:53:52 -07:00
Zach Shepherd 0671b492d6 Fix warning in Cloudflare docs 2017-06-08 11:53:52 -07:00
Brad WarrenandGitHub 895a5254be Merge pull request #4802 from certbot/candidate-0.15.0
Release 0.15.0
2017-06-08 11:30:42 -07:00
Brad Warren 0aab244846 Bump version to 0.16.0 2017-06-08 09:32:57 -07:00