Seth Schoen
70592bfdff
and we've moved ancient out of daemon_common into policy
2012-11-09 11:54:53 -08:00
Seth Schoen
ee3a942118
let's have a CA server policy file
2012-11-09 11:54:37 -08:00
Seth Schoen
1b8db0695c
whoops, forgot to add these in this directory after deleting the subdirectory
2012-11-09 11:36:37 -08:00
Seth Schoen
5fb6a5b07d
som eminor changes, fixes, and reorganization
2012-11-05 17:32:35 -08:00
Seth Schoen
a70cda636a
formalize disabling Observatory check for now
2012-10-22 16:39:47 -07:00
Seth Schoen
900120de95
move docstring to the right place
2012-10-18 17:20:59 -07:00
Seth Schoen
de867e26c8
reorganize daemons!
...
This splits out the single daemon into four different daemons (for
makechallenge, testchallenge, and issue, and for logging), switches
all but the logging daemon to no longer use pubsub (but instead
use brpop, which is a blocking queue pop), and tracks the number of
times that a given session has been tested (limited to 3).
There are also new scripts to try to start and stop all the daemons
with a single command.
2012-10-17 18:36:24 -07:00
Seth Schoen
4dfd31a315
implement requirement of hashcash *per subject name*
2012-10-10 12:15:33 -07:00
Seth Schoen
8ea8f361a1
more detailed comment
2012-10-08 18:05:02 -07:00
Seth Schoen
ed9a02af65
only schedule sessions for testing if they aren't already scheduled for testing
2012-10-05 17:47:54 -07:00
Seth Schoen
b4eaf10a49
poll_interval variable to control frequency of client requests
2012-10-03 12:33:55 -07:00
Seth Schoen
0fa26c1cf3
push notification implementation with one-shot lock
2012-10-03 12:29:14 -07:00
Seth Schoen
7c486c7c63
Pythonic, not LISPy, naming
2012-08-31 15:45:04 -07:00
Seth Schoen
da59639b8b
organize exit nodes by country
2012-08-31 15:43:43 -07:00
Seth Schoen
d6d55e159b
and my cached-consensus exit geography parser
2012-08-31 11:42:29 -07:00
Seth Schoen
2731f85032
(old) partial upstream pygeoip (LGPLv3)
2012-08-31 11:41:53 -07:00
Seth Schoen
985652be87
script to hash factorable moduli and store them in the blacklist
2012-08-20 15:40:54 -07:00
Seth Schoen
f212aa207c
fix typo on format string
2012-08-13 00:55:36 -07:00
Seth Schoen
41b59fbc91
improving logging again
2012-08-13 00:52:31 -07:00
Seth Schoen
2d1ca6bf6f
show what names the cert was issued for
2012-08-13 00:47:48 -07:00
Seth Schoen
4847670654
even nicer logging :-)
2012-08-13 00:42:06 -07:00
Seth Schoen
57a48d1c1d
balance parens
2012-08-13 00:38:38 -07:00
Seth Schoen
ae0e4a422a
try to failure reason textual instead of numeric
2012-08-13 00:36:32 -07:00
Seth Schoen
d03bc6f8ea
add space after comma for prettier logs
2012-08-13 00:25:57 -07:00
Seth Schoen
6e897496b3
use pubsub for logging!
2012-08-13 00:16:38 -07:00
Seth Schoen
34e3e27a6e
use abbreviated session IDs in logging for readability
2012-08-12 23:42:24 -07:00
Seth Schoen
036e7f3bed
fix typo
2012-08-12 23:32:47 -07:00
Seth Schoen
4a892b0e02
more logging including client IP address
2012-08-12 23:31:32 -07:00
Seth Schoen
8cda7066b4
make logging clearer to read
2012-08-12 23:22:35 -07:00
Seth Schoen
24f4e065e5
lowercase names and remove duplicates
2012-08-12 18:49:26 -07:00
Seth Schoen
d10434974a
check wildcards in Observatory
2012-08-12 18:32:16 -07:00
Faidon Liambotis
b8d3aab7a5
Move protocol and client into Python modules
...
Shuffle files around in an initial attempt of creating trustify,
trustify.protocol and trustify.client Python modules. The reference
implemntation of the server remains where it was for now.
2012-08-12 07:49:45 +03:00
Seth Schoen
8b082f9fde
evidently, current best practice is to include ALL DNS names, including the primary name, as SANs
2012-08-10 16:26:25 -07:00
Seth Schoen
12ef7489ec
output the name that we're doing the test for
2012-08-10 10:41:29 -07:00
Seth Schoen
f3d1b4b996
fix logic to not test ancientness of nonexistent sessions
2012-08-10 10:18:35 -07:00
Seth Schoen
f449f538dd
upstream changed API :-)
2012-08-09 17:41:38 -07:00
Seth Schoen
c9cc928dc4
implement Observatory blacklist
2012-08-09 14:20:18 -07:00
Seth Schoen
c6453513b6
switch to Peter's round-robin scheduling approach
2012-08-08 17:30:44 -07:00
James Kasten
c1e3da6395
Merge branch 'master' of github.com:research/chocolate
2012-08-08 17:02:38 -04:00
James Kasten
0bd5bf57d5
Added check to see if certificate exists
2012-08-08 17:01:54 -04:00
Seth Schoen
c4c8bd04f9
argh, ugly hack for problem of stale requests poisoning queues
2012-08-08 13:41:15 -07:00
Peter Eckersley
84eb5058c6
Disable raw IPv6 addresses by default
...
(they're scarier than I thought, and a bit dangerous in Web and maybe Windows
shell contexts)
2012-08-06 15:27:05 -07:00
James Kasten
fc56a875d0
Added code to auto-configure the Apache server for SNI challenges
2012-08-01 19:31:21 -04:00
James Kasten
91907b1264
Slight update to README
2012-08-01 14:23:25 -04:00
Seth Schoen
c75f154bd6
have daemon send a pubsub message to itself to achieve prompt clean shutdowns
2012-07-20 23:54:58 -07:00
Seth Schoen
7ee2b9ef21
note priority inversion bug is now somewhat less severe
2012-07-20 18:47:29 -07:00
Seth Schoen
2ba0eae5d6
support for distributing certificate chain file
2012-07-20 18:37:47 -07:00
Seth Schoen
cb5922edd8
switch to pubsub mechanism instead of polling
2012-07-20 16:48:10 -07:00
Seth Schoen
d02883ca38
add field for certficate chain
2012-07-20 16:43:42 -07:00
Seth Schoen
8db37e5501
add cert_chain_file config option
2012-07-20 16:43:18 -07:00
