starred/certbot-certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-07-30 18:04:31 +02:00
Code Issues Packages Projects Releases Wiki Activity
9,050 Commits 878 Branches 157 Tags
v0.32.0
Commit Graph
11 Commits
Author SHA1 Message Date
Adrien FerrandandGitHub 9c405a3cd1 Fix cryptography OCSP support (#6751) 
* Reenabling OCSP cryptography support

* Refactor the validation logic of OCSP response to match the OpenSSL one

* Prepare runtime for OCSP response test

* Move unrelated test to another relevant place

* Reimplement OCSP status checks in integration tests

* Clean script

* Protect OCSP check against connection errors

* Update tests/certbot-boulder-integration.sh

Co-Authored-By: adferrand <adferrand@users.noreply.github.com>

* Cleaning

* Add a specific script for letsencrypt-auto install+help

* Remove inconsistent assertion

* Add executable permissions

* Remove unused variable

* Move testdata

* Corrected cleanup code

* Empty commit
 2019-02-28 00:16:52 +01:00
Adrien FerrandandBrad Warren d436259437 Forcibly reactivate tls-sni-01 challenges until complete removal. (#6683) 
This PR reactivates tls-sni-01 challenges on recent Boulder versions checkout for integration tests. This allows to continue testing this challenge until it is officially dropped from server (Boulder) and client (Certbot).

Reverts #6679.
 2019-01-29 19:23:08 -08:00
Adrien FerrandandJoona Hoikkala dde27e5aef Remove tls-sni-01 challenges in integration tests (#6679) 
* Remove tls-sni-01 challenges in integration tests

* Remove the tls-sni test in the less invasive way

* Correct code coverage from tls-sni logic not been tested anymore.

* Update certbot-boulder-integration.sh
 2019-01-20 17:53:18 +02:00
Seth Schoen 59bbda51ab Compatibility with more traditional versions of awk 2019-01-03 17:48:09 -08:00
dschlessmanandohemorange f137d55b31 Issue 3816/revamp register subcommand (#6006) 
* address issue #3816

* formatting update

* remove unused variable

* address pylint trailing whitespace error

* revert whitespace add

* update boulder ci test for new update_registration verb

* address code review comments

* Issue 3816: Revert renaming '...update_regristration...' tests to '...update_account...'. Fix removing update_registration default argument value.

* Issue 3816: Fix '--update-registration' not referring to 'update_registration' default as opposed to 'update_account'.

* Issue 3816: delint tox output.

* Issue 3816: Change @example.org domain to @domain.org in boulder test script

* Issue 3816: Update CHANGELOG.md for Issue 3816 and remove extraneous space in main.py

* Issue 3816: Remove extraneous default variable.
 2018-12-11 18:57:33 -08:00
sydneyliandBrad Warren 9c0b27de68 Preserve other-read bit on private keys too (#6544) 
Not updating the guidelines in using.rst-- I don't want to encourage people to use this. now that Certbot preserves gid, the better way to set permissions is to change the group permisisons!

* Preserve other-read bit on private keys too

* fix integration test

* fix and rename permission routines in integration tests
 2018-12-04 10:59:23 -08:00
sydneyliandBrad Warren 7d0ac47139 Change default privkey permissions while preserving group permissions (#6480) 
Fixes #1473.

writes privkey.pem to 0600 by default for new lineages
on renewals where a new privkey is generated, preserves group mode and gid
Things this PR does not do:

we talked about forcing 0600 on privkeys when a Certbot upgrade is detected. Instead, this PR only creates new lineages with the more restrictive permission to prevent renewal breakages.
this doesn't solve many of the problems mentioned in #1473 that are not directly related to the title issue!

* safe_open on archive keyfiles

* keep group from current lineage

* clean up integration test

* safe_open can follow symlinks

* fix tests on windows, maybe

* Address Brad's comments

* Revert changes to safe_open
* Test chown is called when saving new key
* Reorder chown operation

* Changelog and documentation

* Fix documentation style
 2018-11-29 09:33:05 -08:00
Adrien FerrandandBrad Warren 9264561944 Check pattern for both old and new openssl (#6450) 2018-10-29 15:56:30 -07:00
Erica Portnoy b42283f0b3 update boulder integration test to check for new behavior 2018-09-20 19:57:48 -07:00
Jacob Hoffman-AndrewsandGitHub 8f7209de14 Silence spammy integration test cases. (#5934) 2018-09-12 16:35:43 -07:00
Brad WarrenandGitHub 6e23b81dba Separate integration (#5814) 
Main piece of #5810.

* Rename Certbot integration tests

* Remove nginx from certbot tests

* allow for running individual integration tests

* fail under 65

* Add set -e

* Track Nginx coverage and omit it from report later.

* Use INTEGRATION_TEST in script

* add INTEGRATION_TEST=all

* update min certbot percentage
 2018-08-29 14:11:13 -07:00