10392 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Peter Eckersley	30938260d4	Split postfix configs across the VMs, and start making them do things	2014-06-05 19:45:21 -07:00
Alex Halderman	f3b0ab0db7	Update README	2014-06-05 18:45:03 -07:00
Peter Eckersley	7bd06a4d35	Work in progress	2014-06-05 17:04:28 -07:00
Peter Eckersley	ace9d2383d	Start work on forcing TLS to valid	2014-06-05 16:51:38 -07:00
Jacob Hoffman-Andrews	ed0c024209	Improved provisioning and certificate checking.	2014-06-05 16:01:07 -07:00
Jacob Hoffman-Andrews	714cb17dcb	Clarify example usage of pinsets by including a CA	2014-06-05 14:26:45 -07:00
Jacob Hoffman-Andrews	6fb51d5422	Example shouldn't include hashes from Chrome source.	2014-06-05 14:11:08 -07:00
jsha	4b5b9f164f	nexthop-domains -> address-domains	2014-06-05 11:51:19 -07:00
jsha	3d9d5607bd	Formatting issue #2 in design doc	2014-06-05 11:34:12 -07:00
jsha	aa417eec15	Formatting issue in design doc	2014-06-05 11:10:07 -07:00
jsha	844ec79f01	Add design doc	2014-06-05 11:05:08 -07:00
Jacob Hoffman-Andrews	f0b9ef2716	Add a Vagrantfile and the list of golden domains.	2014-06-05 10:43:01 -07:00
Jacob Hoffman-Andrews	8857302347	check-starttls and process-google-starttls-domains.py	2014-06-04 14:41:18 -07:00
EKR	2ad063217f	First import of ACIP draft	2014-02-05 13:39:26 -08:00
Seth Schoen	74af7a350e	per ENISA report, switched to PKCS#1 PSS signature method	2013-10-31 12:39:00 -07:00
Seth Schoen	c5f6ff92eb	try to forget private keys more proactively after using them	2013-10-31 12:38:02 -07:00
Seth Schoen	f35fb42096	in demo, only do POP challenge if the challenge type is POP challenge	2013-10-31 12:37:44 -07:00
Seth Schoen	1c5e4e2698	steps to generate the keys used by this demo script	2013-10-24 15:15:05 -07:00
Seth Schoen	ae5bf2b177	working demonstration of proof-of-possession logic	2013-10-23 18:56:25 -07:00
Peter Eckersley	ee01e0f968	tweaks	2013-08-11 17:48:24 +02:00
Peter Eckersley	fddb19fe4a	Import draft Trustify protocol docs from Etherpad	2013-08-11 17:47:48 +02:00
James Kasten	788e0c413a	syntax fix	2013-05-23 22:25:47 -04:00
James Kasten	402eadd208	Fix configurator restart	2013-05-23 22:20:14 -04:00
James Kasten	98e70df5e4	Added restart to rollback call	2013-05-23 22:11:15 -04:00
James Kasten	cbef46463d	Remove orphan file use	2013-05-23 21:58:33 -04:00
James Kasten	79b88de225	recovery_routine needs to occur before VH objects are instantiated	2013-05-23 18:36:11 -04:00
James Kasten	be85cfc620	Remove augeas backup save system, fix various syntax errors	2013-05-23 18:00:53 -04:00
James Kasten	c9f3d1d7fc	Instituted new file registration to make all config transactions atomic	2013-05-23 17:04:53 -04:00
James Kasten	a6d9b0f599	Fix --view-checkpoints	2013-05-23 14:43:41 -04:00
James Kasten	13e4babfb5	Fixed save() to run checkpoint_update anytime files are added	2013-05-22 18:49:01 -04:00
James Kasten	405a3d501b	SNI Challenge now relies on Configurator checkpoint system to cleanup.	2013-05-22 18:15:01 -04:00
James Kasten	49fe7e2a32	Standardized safe directory creation, created trustify_util.py for common functions	2013-05-22 16:56:52 -04:00
James Kasten	fea37e40c3	Allow finalize_checkpoint to occur even if there are no current saves	2013-05-22 01:19:54 -04:00
James Kasten	3ac7452ca7	Added a few fixes for new checkpoint system	2013-05-22 00:38:12 -04:00
James Kasten	b5e374ee2b	Reworked Configurator save/checkpoint system	2013-05-21 23:36:14 -04:00
James Kasten	bed2c5049a	Add Augeas parsing error check, support for Augeas case-insensitive sections	2013-05-21 17:22:38 -04:00
James Kasten	db5dfea9b9	Changed __case_i to be a public function	2013-05-20 15:38:47 -04:00
James Kasten	7f29aef2cc	Add support for case insensitive directives	2013-05-20 15:21:05 -04:00
James Kasten	9bd7b4ff7b	Final touches before case insensitive Augeas testing begins	2013-05-19 14:12:33 -04:00
James Kasten	e75489b2df	Added configtest at beginning of client authentication, included a few fixes	2013-05-17 00:11:38 -04:00
James Kasten	a256054c72	Added view checkpoints and rollback feature as options to cmd line	2013-05-16 14:20:54 -04:00
James Kasten	c8dfdf104d	Finished refactoring client.py	2013-05-16 13:19:53 -04:00
James Kasten	5f782aebd6	Fixed some API naming issues	2013-05-15 18:24:28 -04:00
James Kasten	01ed93a8b0	Fixed a few variable name errors	2013-05-15 17:41:45 -04:00
James Kasten	0913a9a8aa	Clean up client.py, make object oriented, add robustness	2013-05-15 17:30:00 -04:00
James Kasten	281b9ca592	Removed testing specific code for new features	2013-04-11 00:56:52 -04:00
James Kasten	719f50cbde	Added a secure initialization script and removed DNS lookups for private IPs	2013-04-11 00:44:36 -04:00
James Kasten	e6cd2ff80c	Removed brackets for parentheses	2012-12-01 23:06:39 -05:00
James Kasten	6818153660	Added tiered CA shuffling for CA choices	2012-12-01 22:28:25 -05:00
James Kasten	c16d2ab2d5	erase redundant return statement	2012-12-01 21:50:11 -05:00