Commit graph

9380 commits

Author SHA1 Message Date
sagi
7689de2ad8 Fix tests 2016-05-20 01:18:50 +00:00
Noah Swartz
22badb2380 tests pass? 2016-05-19 17:29:39 -07:00
Noah Swartz
686e60b4bf Merge pull request #3033 from certbot/reredirect
Fix warning about already enabled redirect in Apache
2016-05-19 16:12:25 -07:00
Sagi Kedmi
ad76de2502 OCSP Stapling Enhancement for Apache (#2723)
Currently supports only Apache >=2.3.3.
letsencrypt --staple-ocsp -d dumpbits.com [no problem to set it on for apache => 2.3.3]
To check OCSP Stapling:
[~]$ echo QUIT | openssl s_client -connect dumpbits.com:443 -status 2>/dev/null | grep -A 31 'OCSP Resp'
OCSP Response Data:
    OCSP Response Status: successful (0x0)
    Response Type: Basic OCSP Response
    Version: 1 (0x0)
    Responder Id: C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
    Produced At: Mar 26 17:54:00 2016 GMT
    Responses:
    Certificate ID:
      Hash Algorithm: sha1
      Issuer Name Hash: 7EE66AE7729AB3FCF8A220646C16A12D6071085D
      Issuer Key Hash: A84A6A63047DDDBAE6D139B7A64565EFF3A8ECA1
      Serial Number: 032A2108AAA650E6EE2E6B041C03C2612A19
    Cert Status: good
    This Update: Mar 26 17:00:00 2016 GMT
    Next Update: Apr  2 17:00:00 2016 GMT

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:71:02:6a:97:d9:eb:13:c1:5c:7a:f5:eb:26:89:3b:40:
         e3:08:82:f7:71:d4:fa:61:4a:8e:4a:7d:e9:53:84:e9:3a:89:
         67:66:08:d9:0e:79:65:9a:8d:dc:fb:07:cc:93:4f:eb:4e:3c:
         cc:7f:cd:fd:db:8f:c3:25:c3:54:87:a9:9c:35:6f:c1:39:31:
         e0:b1:f6:b1:3d:52:5d:db:bb:69:0f:23:05:fe:33:29:1f:ff:
         c6:af:17:a5:98:58:50:3a:48:93:5c:09:4b:f3:91:36:48:31:
         ed:ee:47:4d:66:c3:25:cf:56:b7:f4:48:80:eb:b8:f0:27:b1:
         97:18:b4:88:71:c6:55:5d:bb:25:16:48:98:85:8a:12:8d:64:
         bf:51:df:39:b1:44:91:e1:f2:c6:c3:7d:23:2b:d2:0f:4c:7f:
         57:b1:c9:ae:ec:32:b5:6a:87:bd:83:43:f1:f7:3c:8c:11:5c:
         9d:a5:12:fa:e6:79:87:45:c6:1d:46:c8:14:1e:8d:d1:de:7a:
         0d:e4:53:f2:c9:b6:e5:6e:cb:91:14:bb:04:38:36:4f:71:55:
         e1:ff:71:c7:a6:31:ed:db:6c:0f:d7:f5:ef:0c:6e:08:6b:e0:
         37:cf:ca:a5:67:89:c2🇩🇪8e:36:6d:2f:41:7f:9f:10:c6🇩🇪
         4d:b1:2d:09
======================================
2016-05-19 16:04:18 -07:00
Seth Schoen
b0a2427096 Merge branch 'master' into update_registration 2016-05-19 13:30:59 -07:00
sagi
3589b25dc3 Make lint happy 2016-05-19 19:35:38 +00:00
sagi
501c19ef2a Syntax 2016-05-19 19:33:04 +00:00
sagi
e1eb3eff16 Improve code reuse 2016-05-19 19:27:18 +00:00
Noah Swartz
0bb8b0bcd5 change invocation 2016-05-19 12:27:17 -07:00
Christopher Brown
3aed4fc59d Typo: too many self's
The extra self will push along the arguments, resulting in the accurate but not very helpful error message: "AttributeError: 'JWKRSA' object has no attribute 'kty'"
2016-05-19 14:19:13 -05:00
sagi
fde151848d Use set_by_cli for fullchain_path and chain_path 2016-05-19 19:11:25 +00:00
Noah Swartz
409640fb87 le to cb for test package 2016-05-19 12:05:42 -07:00
sagi
e737481129 WIP 2016-05-19 18:20:27 +00:00
Brad Warren
66a1399920 Add tests for multidomain vhost redirects 2016-05-19 09:40:17 -07:00
Brad Warren
574d20ecc4 Record enhancements applied to vhosts 2016-05-19 09:28:26 -07:00
Noah Swartz
e8e009cc85 Revert "update secret pypi?"
This reverts commit 55755d818a.
2016-05-18 17:00:42 -07:00
Telepenin Nikolay
e385274cca Error/Warning with build docker container from Dockerfile (#3004)
When I try to build container I see in logs 
```
debconf: unable to initialize frontend: Dialog
debconf: (TERM is not set, so the dialog frontend is not usable.)
debconf: falling back to frontend: Readline
debconf: unable to initialize frontend: Readline
debconf: (This frontend requires a controlling tty.)
debconf: falling back to frontend: Teletype
```

`DEBIAN_FRONTEND=noninteractive` fixed this warning
2016-05-18 16:35:17 -07:00
Peter Eckersley
0294db7061 Merge pull request #2992 from certbot/post-hook
Only run post-hook if pre-hook was (or would have been, if it existed)
2016-05-18 16:31:00 -07:00
Seth Schoen
2ba5ce9217 Mention register subcommand in main help 2016-05-18 15:55:25 -07:00
Noah Swartz
55755d818a update secret pypi? 2016-05-18 15:42:55 -07:00
Seth Schoen
70912be5a9 Associate --update-registration with register help topic 2016-05-18 14:57:31 -07:00
Peter Eckersley
d3c4a9e04f Merge pull request #2994 from tapple/master
system python path has changed on el capitan
2016-05-18 14:37:53 -07:00
Peter Eckersley
df9174b81f Fix whitespace 2016-05-18 14:36:07 -07:00
Peter Eckersley
8b7a7f2e4b Merge pull request #3011 from certbot/webroot-map-renewal
Allow modifying webroot-map during renewal
2016-05-18 14:32:48 -07:00
Peter Eckersley
b88a2f22e6 Merge pull request #3016 from certbot/quiet-no-quiet
Make certbot-auto quieter without implementing --quiet
2016-05-18 14:22:36 -07:00
Noah Swartz
01ebab26bf update pypi for auto 2016-05-18 14:21:57 -07:00
Peter Eckersley
38eef78d94 Merge pull request #3025 from SwartzCr/issue_2884
change github URL
2016-05-18 14:19:21 -07:00
Brad Warren
94549219c5 Add get_names_from_csr tests 2016-05-18 14:06:32 -07:00
Seth Schoen
354b5ead2c Merge branch 'master' into update_registration 2016-05-18 14:03:37 -07:00
Brad Warren
77e4be933c Simplify get_names_from_csr 2016-05-18 13:59:17 -07:00
Noah Swartz
c4fc7b30e3 change github URL 2016-05-18 13:44:29 -07:00
Noah Swartz
03f77c1b79 Merge pull request #3014 from sagi/rewrite_engine_detection
Detect RewriteEngine  directives that originates in a VirtualHost directive
2016-05-18 13:15:02 -07:00
Peter Eckersley
4e46e325d1 Merge pull request #3021 from mgedmin/relax-hook-validation
Hook validation: skip leading spaces/newlines
2016-05-18 12:07:25 -07:00
Peter Eckersley
1549678ca0 Merge pull request #3019 from mgedmin/patch-3
Renewal hooks mean this note is outdated
2016-05-18 12:04:53 -07:00
Brad Warren
8e17d7498d Add get_names_from_csr 2016-05-18 10:14:15 -07:00
Brad Warren
50421e99be Factor loading cert/req into its own function 2016-05-18 09:56:34 -07:00
Marius Gedminas
321a806b91 Hook validation: skip leading spaces/newlines
Improves the situation with #3020 a bit.

Does nothing about other valid shell commands that the current
validation would reject:

  - shell builtins like --post-hook 'if [ -x /my/script ]; then /my/script; fi'
  - variable assignments like --post-hook 'ENV_VAR=value command'
  - comments
  - redirections like --post-hook '<infile command'
  - I'm sure I'm missing many other exciting possibilities
2016-05-18 11:57:50 +03:00
Marius Gedminas
279cb35256 Oops, ReST syntax is weird 2016-05-18 11:05:23 +03:00
Marius Gedminas
f55ef8e286 Renewal hooks mean this note is outdated 2016-05-18 11:03:18 +03:00
Marius Gedminas
63c79f98ca Remove dangling footnote
This footnote has no references!
2016-05-18 10:59:58 +03:00
Brad Warren
507b154276 Don't saying you're requesting root unless you really are 2016-05-17 20:11:02 -07:00
Brad Warren
502eba1cc4 Simplify SUDO certbot prompt 2016-05-17 20:07:45 -07:00
Brad Warren
45b7c407c1 Don't tell people you check for updates on every run 2016-05-17 20:07:06 -07:00
Brad Warren
af41345967 Put arg parsing in one place 2016-05-17 20:06:35 -07:00
Brad Warren
14778c15ce Run build to make le-auto up to date 2016-05-17 20:05:47 -07:00
Amjad Mashaal
d57c943471 Fixing broken tests 2016-05-18 01:57:48 +02:00
Amjad Mashaal
12a0312282 Fixing auto_test.py for Python 2.6 2016-05-18 01:57:48 +02:00
sagi
7e3c9399e5 Use cli.set_by_cli to detect if the user explicitly set cert_path 2016-05-17 22:12:11 +00:00
Peter Eckersley
248dc0962e Merge pull request #2895 from dietsche/joyent
Joyent SmartOS Zone Bootstrap Support [revised]
2016-05-17 14:54:08 -07:00
Peter Eckersley
4118da2c53 Merge pull request #3010 from certbot/autopts
Fix *-auto command line parsing
2016-05-17 14:33:25 -07:00