585 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
James Kasten	1712a024e5	Started refactoring code - roughly demo ready	2014-11-10 07:30:36 -05:00
James Kasten	cbec87e181	Fully support Revocation with menus	2014-11-09 07:30:40 -05:00
James Kasten	19bc2fa084	Certificate Issuance/Deployment/Redirection; recovery tokens/contact	2014-11-08 06:11:29 -05:00
James Kasten	412b28b219	Protocol overhaul - initial commit down to certificate issuance	2014-11-07 06:38:48 -05:00
James Kasten	80799e28a0	Initial ACME compliant DVSNI commit	2014-11-06 05:37:22 -05:00
Alex Halderman	f3b0ab0db7	Update README	2014-06-05 18:45:03 -07:00
EKR	2ad063217f	First import of ACIP draft	2014-02-05 13:39:26 -08:00
Seth Schoen	74af7a350e	per ENISA report, switched to PKCS#1 PSS signature method	2013-10-31 12:39:00 -07:00
Seth Schoen	c5f6ff92eb	try to forget private keys more proactively after using them	2013-10-31 12:38:02 -07:00
Seth Schoen	f35fb42096	in demo, only do POP challenge if the challenge type is POP challenge	2013-10-31 12:37:44 -07:00
Seth Schoen	1c5e4e2698	steps to generate the keys used by this demo script	2013-10-24 15:15:05 -07:00
Seth Schoen	ae5bf2b177	working demonstration of proof-of-possession logic	2013-10-23 18:56:25 -07:00
Peter Eckersley	ee01e0f968	tweaks	2013-08-11 17:48:24 +02:00
Peter Eckersley	fddb19fe4a	Import draft Trustify protocol docs from Etherpad	2013-08-11 17:47:48 +02:00
James Kasten	788e0c413a	syntax fix	2013-05-23 22:25:47 -04:00
James Kasten	402eadd208	Fix configurator restart	2013-05-23 22:20:14 -04:00
James Kasten	98e70df5e4	Added restart to rollback call	2013-05-23 22:11:15 -04:00
James Kasten	cbef46463d	Remove orphan file use	2013-05-23 21:58:33 -04:00
James Kasten	79b88de225	recovery_routine needs to occur before VH objects are instantiated	2013-05-23 18:36:11 -04:00
James Kasten	be85cfc620	Remove augeas backup save system, fix various syntax errors	2013-05-23 18:00:53 -04:00
James Kasten	c9f3d1d7fc	Instituted new file registration to make all config transactions atomic	2013-05-23 17:04:53 -04:00
James Kasten	a6d9b0f599	Fix --view-checkpoints	2013-05-23 14:43:41 -04:00
James Kasten	13e4babfb5	Fixed save() to run checkpoint_update anytime files are added	2013-05-22 18:49:01 -04:00
James Kasten	405a3d501b	SNI Challenge now relies on Configurator checkpoint system to cleanup.	2013-05-22 18:15:01 -04:00
James Kasten	49fe7e2a32	Standardized safe directory creation, created trustify_util.py for common functions	2013-05-22 16:56:52 -04:00
James Kasten	fea37e40c3	Allow finalize_checkpoint to occur even if there are no current saves	2013-05-22 01:19:54 -04:00
James Kasten	3ac7452ca7	Added a few fixes for new checkpoint system	2013-05-22 00:38:12 -04:00
James Kasten	b5e374ee2b	Reworked Configurator save/checkpoint system	2013-05-21 23:36:14 -04:00
James Kasten	bed2c5049a	Add Augeas parsing error check, support for Augeas case-insensitive sections	2013-05-21 17:22:38 -04:00
James Kasten	db5dfea9b9	Changed __case_i to be a public function	2013-05-20 15:38:47 -04:00
James Kasten	7f29aef2cc	Add support for case insensitive directives	2013-05-20 15:21:05 -04:00
James Kasten	9bd7b4ff7b	Final touches before case insensitive Augeas testing begins	2013-05-19 14:12:33 -04:00
James Kasten	e75489b2df	Added configtest at beginning of client authentication, included a few fixes	2013-05-17 00:11:38 -04:00
James Kasten	a256054c72	Added view checkpoints and rollback feature as options to cmd line	2013-05-16 14:20:54 -04:00
James Kasten	c8dfdf104d	Finished refactoring client.py	2013-05-16 13:19:53 -04:00
James Kasten	5f782aebd6	Fixed some API naming issues	2013-05-15 18:24:28 -04:00
James Kasten	01ed93a8b0	Fixed a few variable name errors	2013-05-15 17:41:45 -04:00
James Kasten	0913a9a8aa	Clean up client.py, make object oriented, add robustness	2013-05-15 17:30:00 -04:00
James Kasten	281b9ca592	Removed testing specific code for new features	2013-04-11 00:56:52 -04:00
James Kasten	719f50cbde	Added a secure initialization script and removed DNS lookups for private IPs	2013-04-11 00:44:36 -04:00
James Kasten	e6cd2ff80c	Removed brackets for parentheses	2012-12-01 23:06:39 -05:00
James Kasten	6818153660	Added tiered CA shuffling for CA choices	2012-12-01 22:28:25 -05:00
James Kasten	c16d2ab2d5	erase redundant return statement	2012-12-01 21:50:11 -05:00
James Kasten	635b6a8404	Add NameVirtualHost for new SSL Vhost if nonsslvhost had name virtual host enabled	2012-12-01 21:44:50 -05:00
James Kasten	3f93a1e6c9	Fixed issues with running multiple vhosts separately with upgrade from http vhost to https	2012-12-01 19:32:06 -05:00
James Kasten	44a6a9328f	fixed interface for make_vhost_ssl	2012-12-01 03:38:33 -05:00
James Kasten	ae5ad15bdb	minor testing change	2012-11-29 21:56:17 -05:00
James Kasten	616ae889ea	Improved vhost selection algorithm	2012-11-29 21:53:29 -05:00
James Kasten	afc3102998	Removed *:443 fix as the underlying issue was using public ip addresses in vhost when they should have been private	2012-11-20 15:20:08 -05:00
James Kasten	4503ff8f1d	Add restart after adding redirect	2012-11-20 01:55:50 -05:00