1
0
mirror of https://github.com/certbot/certbot.git synced 2026-01-27 19:42:53 +03:00
Commit Graph

7180 Commits

Author SHA1 Message Date
Peter Eckersley
3c85ecbfee Test farm test fixes (#3582) 2016-10-04 16:45:24 -07:00
Brad Warren
2146ec9535 Remove psutil dep (#3579)
* Build letsencrypt-auto-source/letsencrypt-auto to bring it up to date

* Remove psutil dep from certbot-auto (fixes #3341)
2016-10-04 14:48:06 -07:00
Peter Eckersley
3ae6c90a6a The sudo environments take longer to allocate (#3578)
One more tiny tweak, placing the slower sudo environments back up the list. I expect this should save us another 10-20 seconds.

- there's about a 50 second delay in starting apacheconftest, so move
   it back up the priority queue of jobs to start
2016-10-04 12:47:36 -07:00
Peter Eckersley
bde1d9fdb1 Renew symlink safety (#3560)
Re-do the fix for #3497 to ensure it works in all cases.

* If lineages are in an inconsistent (non-deployed) state, deploy them

* Test new _handle_identical_cert case

* Move lineage.has_pending_deployment() check up to _auth_from_domains

Less conceptually nice, but in the "renew" verb case it wasn't being called :(

* Swap _auth_from_domains return type

 * It now matches _treat_as_renewal & _handle_identical_cert_request etc

* Revert "Move lineage.has_pending_deployment() check up to _auth_from_domains"

This reverts commit a7fe734d73.

* Move test back to handle_identical_cert_request

* We need to check for non-deployment on two separate code paths

 - Once high up in "renew" (because failure to be deployed stops us from
   divind down the stack)
 - Once way down in _handle_identical_cert_request (because that's where it
   makes the most sense for run / certonly)
 - So refactor that work into storage.py

* We don't necessarily reinstall
2016-10-04 10:18:05 -07:00
Peter Eckersley
290c112217 Tweak for Travis performance (#3562)
* Tweak for Travis performance

 - merge cover and py27 BOULDER_INTEGRATION into one matrix entry
 - re-order to put the fastest environments last, improving average
   case parallelism

* Also put the things most likely to fail at the top
2016-09-30 20:27:04 -07:00
Erica Portnoy
c9bc034512 Update Nginx redirect enhancement process to modify appropriate blocks (#3546)
* Cache the vhost we find during nginx deployment for OCSP enhancement.

* Refactor to pass domain into enhancement functions

* Add https redirect to most name-matching block listening non-sslishly.

* Redirect enhancement chooses the vhost most closely matching target_name that is listening to port 80 without using ssl.

* Add default listen 80 directive when it is implicitly defined
2016-09-29 16:16:07 -07:00
Erica Portnoy
5fda61f271 Allow validation of cross-domain redirects (#3561)
* Update compatibility validator to pass redirect check when redirecting to a different domain, whether http or https.
2016-09-29 15:31:13 -07:00
Brad Warren
769ebfce5e Remove pointless question (#3526)
* remove unhelpful question about servernames and default vhosts

* add prefix about names found in config files

* test we include configuration files prefix

* Tell the user what kind of conf files were missing domains

* Revert "Tell the user what kind of conf files were missing domains"

This reverts commit 1066a88dae.
2016-09-28 15:52:08 -07:00
Joona Hoikkala
b65ea31b42 Add rope directory to gitignore (#3554)
* Ignore .ropeproject
2016-09-28 10:42:00 -07:00
Jacob Hoffman-Andrews
4358c81f06 Improve CHANGES.rst. (#3541)
Link to a more accurate / useful GitHub page.

Partial fix for #3420.

* Improve CHANGES.rst.
2016-09-27 12:08:32 -07:00
Jacob Hoffman-Andrews
1d552630fc Update CONTRIBUTING.md to be more welcoming. (#3540) 2016-09-26 16:44:27 -07:00
Erica Portnoy
9f2dfc15fe Restructure how Nginx parser re-finds vhosts, and disable creating new server blocks. (#3528)
* Restructure add_server_directives to take a vhost as argument. This is the first step towards fixing vhost selection in nginx.

* Save path to vhost in file while parsing in get_vhosts().

* Disable creating a new server block when no names match.

* Make parser select vhost based on information in the vhost it found previously, rather than searching again for a match.

* Make add_server_directives update the passed vhost

* Update boulder config to pass test

* Add testing code for the _do_for_subarray function

* documentation and formatting updates
2016-09-26 13:13:29 -07:00
Peter Eckersley
3b9a87cd2f If lineages are in an inconsistent (non-deployed) state, deploy them (#3533)
* If lineages are in an inconsistent (non-deployed) state, deploy them

* Test new _handle_identical_cert case

* Lint

* Fix find & replace SNAFU
2016-09-23 17:48:50 -07:00
Peter Eckersley
7b269183c6 Merge pull request #3500 from aidin36/issue-3239
Issue #3239: Checking signal's default action before handling it.
2016-09-23 16:51:37 -07:00
Peter Eckersley
2434b4a549 Merge pull request #3507 from certbot/only-suggest-valid-names
Only suggest names LE will accept
2016-09-22 14:23:19 -07:00
Peter Eckersley
1584ee8ac6 Merge pull request #3466 from certbot/all-together-now
DNS challenge support in the manual plugin and general purpose --preferred-challenges flag
2016-09-22 14:15:25 -07:00
Peter Eckersley
4660c0da7b Merge pull request #3523 from certbot/nginx-ocsp-stapling
Tie Nginx OCSP stapling to enhancements system
2016-09-22 14:10:36 -07:00
Brad Warren
74ac006f14 fix spacing 2016-09-21 17:48:17 -07:00
Brad Warren
0165269c05 denit cli.py 2016-09-21 17:37:47 -07:00
Peter Eckersley
e28017a110 Lint 2016-09-21 16:45:42 -07:00
Peter Eckersley
f6c605cd15 Add tests for the --preferred-challenges cli parser 2016-09-21 16:43:35 -07:00
Peter Eckersley
107a3e6aa9 Allow & document --preferred-challenges dns,http 2016-09-21 16:17:31 -07:00
Brad Warren
93a9e8c836 list 'staple-ocsp' as supported in nginx 2016-09-21 15:48:24 -07:00
Brad Warren
8b553fa88f tie oscp stapling to enhancements system 2016-09-21 15:38:37 -07:00
Peter Eckersley
6c066ef10c Better section link 2016-09-21 15:24:15 -07:00
Peter Eckersley
9219617b0c Nicer table formatting 2016-09-21 15:20:06 -07:00
Peter Eckersley
741a57c976 Accept --preferred-challenges "dns-01, http-01" 2016-09-21 15:02:03 -07:00
Peter Eckersley
a18a8f051d Improve documentation for --preferred-challenges 2016-09-21 15:01:01 -07:00
Peter Eckersley
a03834ffcd Merge pull request #3516 from certbot/increase-log-count
Include log retention count to 1000.
2016-09-19 16:51:49 -07:00
Jacob Hoffman-Andrews
2bdf1258ad Include log retention count to 1000.
This is a quick fix to https://github.com/certbot/certbot/issues/3382, so that
Python log rotation is less likely to delete files before logrotate can get to
them. Specifically, if logrotate's config says to preserve fewer than 1000 logs,
it will do the right thing.
2016-09-19 15:43:26 -07:00
Brad Warren
dff1368765 add staple-ocsp test 2016-09-19 15:05:16 -07:00
Brad Warren
fea079400f Provide chain_path for enhance config 2016-09-19 14:55:26 -07:00
Brad Warren
3a8a5598a3 update constants.py 2016-09-19 14:44:34 -07:00
Brad Warren
7f8fb07f99 Merge pull request #3504 from certbot/no-installers-error
Improve error message for "no installer plugin."
2016-09-19 12:04:37 -07:00
Aidin Gharibnavaz
7c79e96249 Issue #3239: SIGTERM was added twice by mistake. 2016-09-17 21:55:36 +04:30
Jacob Hoffman-Andrews
3eaafcecad Use cli_command to print. 2016-09-16 18:45:21 -07:00
Brad Warren
307b2e5307 Reject domains with only one label 2016-09-16 16:53:25 -07:00
Brad Warren
275e3f748e filter names returned by get_all_names 2016-09-16 16:47:02 -07:00
Brad Warren
f2e0afc96c add enforce_le_validity function 2016-09-16 16:08:51 -07:00
Brad Warren
72ca219097 fix typo -- domains should be domain 2016-09-16 15:05:39 -07:00
Jacob Hoffman-Andrews
6e0a68f844 Improve error message for "no installer plugin." 2016-09-16 14:21:13 -07:00
Aidin Gharibnavaz
b7853f2031 Issue #3239: Checking signal's default action before handling it. 2016-09-15 18:34:27 +04:30
Brad Warren
b1826d657f Merge pull request #3496 from certbot/cffix
Fixes cffi errors in Travis during oldest tests
2016-09-14 10:50:53 -07:00
Brad Warren
cd74a07edf Fix Travis tests due to cffi error 2016-09-14 10:31:31 -07:00
Brad Warren
cb982af635 put dnspython in alphabetical order 2016-09-14 10:27:39 -07:00
Peter Eckersley
b414a32751 Merge pull request #3453 from certbot/dedupe
Removes duplication between README.rst and resources.rst
2016-09-13 18:03:01 -07:00
Peter Eckersley
688b2de8fe Merge pull request #3463 from Gordin/master
Fixed hash_bucket_size detection for nginx
2016-09-09 17:44:52 -07:00
Brad Warren
a8b2880963 fix ip logging prompt for manual-test-mode 2016-08-29 18:45:16 -07:00
Brad Warren
021313acd1 make port flags more visible with better help 2016-08-29 17:08:46 -07:00
Brad Warren
5d8127177c correct challenge domain name 2016-08-29 16:48:31 -07:00