10392 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Peter Eckersley	93cec72f7a	Merge branch 'master' of github.com:research/chocolate	2012-07-07 13:13:13 -07:00
Peter Eckersley	9bfc24c279	The demoCA is usable now	2012-07-07 13:12:00 -07:00
Seth Schoen	bd578f9796	moving everything server-side to server-ca directory	2012-07-06 14:45:26 -07:00
Eric Wustrow	28c9f8fdf2	add comments to verify_sni_challenge, make nonce be an ascii string	2012-07-06 15:28:17 -04:00
Seth Schoen	97e7b1a7b2	I forgot, I have a stub in CSR.py that already pretends to issue certs :-)	2012-07-04 22:05:41 -07:00
Seth Schoen	6df1976070	get subject public key and use it to encrypt dvsni parameter r as y	2012-07-03 18:03:30 -07:00
Seth Schoen	0fa6fb49c4	specific python-crypto version dependency	2012-07-03 18:03:11 -07:00
Seth Schoen	f0605fd65e	hopefully the right RSA encryption operation for computing y = E(r)	2012-07-03 01:56:26 -07:00
Seth Schoen	2e91aafa86	now successfully gets challenge data from server	2012-07-03 01:45:14 -07:00
Seth Schoen	800f255db6	fix several bugs to allow sending challenges from server correctly	2012-07-03 01:44:58 -07:00
Seth Schoen	4136f32091	expressions in Python function definition default values are evaluated only once, when the functions are defined	2012-07-03 00:55:53 -07:00
Seth Schoen	721f28068f	better document wire protocol	2012-07-02 19:53:34 -07:00
Seth Schoen	28f25b7dc1	remarks on timeouts and session states	2012-07-02 18:13:09 -07:00
Seth Schoen	14689bf2f4	documentation; never advance dead sessions' state	2012-07-02 18:10:54 -07:00
Seth Schoen	388f7577d0	deploy daemon.py	2012-07-02 17:57:44 -07:00
Seth Schoen	6667fb837b	use blank session ID for error if client-supplied session is unsafe	2012-07-02 17:52:00 -07:00
Seth Schoen	fce64442ec	deploy pkcs10.py to server	2012-07-02 17:47:44 -07:00
Seth Schoen	bca9360449	comments on protocol compliance enforcement	2012-07-02 17:46:06 -07:00
Seth Schoen	5e44ccba90	keep subject names in original requested order	2012-07-02 12:04:32 -07:00
Seth Schoen	c196bef0ab	infrastructure for actually issuing cert	2012-07-02 12:03:28 -07:00
Seth Schoen	83a1ee779b	there must be at least one subject name to sign	2012-07-01 23:14:55 -07:00
Seth Schoen	a927dae732	makechallenge functionality was moved into daemon.py	2012-07-01 23:12:29 -07:00
Seth Schoen	ffa30bf012	fix typo and logic	2012-07-01 23:11:15 -07:00
Seth Schoen	03379489c6	remove typo	2012-07-01 23:01:16 -07:00
Seth Schoen	8e1aa9b70f	daemon for CA to advance state of existing requests	2012-07-01 23:00:42 -07:00
Seth Schoen	bd331d3789	more concise file content search using list comprehension	2012-07-01 22:41:26 -07:00
Seth Schoen	0e8b5c053f	information about CA's session database structure	2012-07-01 22:20:35 -07:00
Seth Schoen	ad0adf3a21	instead of challengeid, just use the order presented	2012-07-01 22:13:34 -07:00
Seth Schoen	272d49d2f0	start on Redis queue structure	2012-07-01 18:15:29 -07:00
Seth Schoen	64c48f36e1	challenge ID before challenge type	2012-07-01 12:20:41 -07:00
Seth Schoen	8ef5909963	mention dependency on python-libnss	2012-07-01 11:58:38 -07:00
Seth Schoen	10ba09926b	check goodness of all names from request	2012-06-29 17:30:00 -07:00
Seth Schoen	93e21e9ba8	pass through subject_names request from CSR.py to pkcs10.py	2012-06-29 17:28:26 -07:00
Seth Schoen	bf74fe286e	a clean subject_names() function	2012-06-29 17:25:56 -07:00
Seth Schoen	b595bb0db2	CSR parser from freeipa, modified by Dan and Seth - GPLv2, depends on libnss and python-nss	2012-06-29 17:23:18 -07:00
Seth Schoen	de04dea2fb	add specific challenge types, multiple challenge data fields	2012-06-29 16:40:19 -07:00
James Kasten	e689c033a0	Formatted SNI README	2012-06-28 22:46:59 -04:00
James Kasten	4ccaf0e275	Modified README to reflect Makefile changes	2012-06-28 22:29:17 -04:00
Eric Wustrow	7fd249071f	make clean removes all generated cruft now	2012-06-28 22:23:35 -04:00
Eric Wustrow	1f02acf1b3	remove old shell script; replaced by Makefile	2012-06-28 22:22:24 -04:00
Eric Wustrow	b6eea87587	Merge branch 'master' of github.com:research/chocolate	2012-06-28 22:21:00 -04:00
Eric Wustrow	c7e15999ce	need to use _ for swig to be happy	2012-06-28 22:20:50 -04:00
James Kasten	68f85d9f1a	Added READMEs for SNI Challenge, renamed variables, added options-ssl-conf	2012-06-28 22:15:17 -04:00
Eric Wustrow	b98900d3e8	using gnumake instead of shell script to build sni_support.so	2012-06-28 22:00:37 -04:00
Peter Eckersley	a4ca9335e2	Add README explanation	2012-06-28 15:19:28 -07:00
Peter Eckersley	9da7a473dc	Make this change to match	2012-06-28 15:17:57 -07:00
Peter Eckersley	bc4987bc0e	The "webserver" dirname was confusing; client-webserver is better	2012-06-28 15:16:21 -07:00
James Kasten	6a83c0cd7d	Added testing key, cleaned up some code, added ext conf file	2012-06-28 17:50:05 -04:00
Seth Schoen	0f42253931	this is a CSR containing subject alternate names	2012-06-28 12:36:53 -07:00
Seth Schoen	1e66e2c87b	clobber request nonce	2012-06-27 21:17:46 -07:00