Commit graph

10174 commits

Author SHA1 Message Date
Seth Schoen
ae5bf2b177 working demonstration of proof-of-possession logic 2013-10-23 18:56:25 -07:00
Peter Eckersley
ee01e0f968 tweaks 2013-08-11 17:48:24 +02:00
Peter Eckersley
fddb19fe4a Import draft Trustify protocol docs from Etherpad 2013-08-11 17:47:48 +02:00
James Kasten
788e0c413a syntax fix 2013-05-23 22:25:47 -04:00
James Kasten
402eadd208 Fix configurator restart 2013-05-23 22:20:14 -04:00
James Kasten
98e70df5e4 Added restart to rollback call 2013-05-23 22:11:15 -04:00
James Kasten
cbef46463d Remove orphan file use 2013-05-23 21:58:33 -04:00
James Kasten
79b88de225 recovery_routine needs to occur before VH objects are instantiated 2013-05-23 18:36:11 -04:00
James Kasten
be85cfc620 Remove augeas backup save system, fix various syntax errors 2013-05-23 18:00:53 -04:00
James Kasten
c9f3d1d7fc Instituted new file registration to make all config transactions atomic 2013-05-23 17:04:53 -04:00
James Kasten
a6d9b0f599 Fix --view-checkpoints 2013-05-23 14:43:41 -04:00
James Kasten
13e4babfb5 Fixed save() to run checkpoint_update anytime files are added 2013-05-22 18:49:01 -04:00
James Kasten
405a3d501b SNI Challenge now relies on Configurator checkpoint system to cleanup. 2013-05-22 18:15:01 -04:00
James Kasten
49fe7e2a32 Standardized safe directory creation, created trustify_util.py for common functions 2013-05-22 16:56:52 -04:00
James Kasten
fea37e40c3 Allow finalize_checkpoint to occur even if there are no current saves 2013-05-22 01:19:54 -04:00
James Kasten
3ac7452ca7 Added a few fixes for new checkpoint system 2013-05-22 00:38:12 -04:00
James Kasten
b5e374ee2b Reworked Configurator save/checkpoint system 2013-05-21 23:36:14 -04:00
James Kasten
bed2c5049a Add Augeas parsing error check, support for Augeas case-insensitive sections 2013-05-21 17:22:38 -04:00
James Kasten
db5dfea9b9 Changed __case_i to be a public function 2013-05-20 15:38:47 -04:00
James Kasten
7f29aef2cc Add support for case insensitive directives 2013-05-20 15:21:05 -04:00
James Kasten
9bd7b4ff7b Final touches before case insensitive Augeas testing begins 2013-05-19 14:12:33 -04:00
James Kasten
e75489b2df Added configtest at beginning of client authentication, included a few fixes 2013-05-17 00:11:38 -04:00
James Kasten
a256054c72 Added view checkpoints and rollback feature as options to cmd line 2013-05-16 14:20:54 -04:00
James Kasten
c8dfdf104d Finished refactoring client.py 2013-05-16 13:19:53 -04:00
James Kasten
5f782aebd6 Fixed some API naming issues 2013-05-15 18:24:28 -04:00
James Kasten
01ed93a8b0 Fixed a few variable name errors 2013-05-15 17:41:45 -04:00
James Kasten
0913a9a8aa Clean up client.py, make object oriented, add robustness 2013-05-15 17:30:00 -04:00
James Kasten
281b9ca592 Removed testing specific code for new features 2013-04-11 00:56:52 -04:00
James Kasten
719f50cbde Added a secure initialization script and removed DNS lookups for private IPs 2013-04-11 00:44:36 -04:00
James Kasten
e6cd2ff80c Removed brackets for parentheses 2012-12-01 23:06:39 -05:00
James Kasten
6818153660 Added tiered CA shuffling for CA choices 2012-12-01 22:28:25 -05:00
James Kasten
c16d2ab2d5 erase redundant return statement 2012-12-01 21:50:11 -05:00
James Kasten
635b6a8404 Add NameVirtualHost for new SSL Vhost if nonsslvhost had name virtual host enabled 2012-12-01 21:44:50 -05:00
James Kasten
3f93a1e6c9 Fixed issues with running multiple vhosts separately with upgrade from http vhost to https 2012-12-01 19:32:06 -05:00
James Kasten
44a6a9328f fixed interface for make_vhost_ssl 2012-12-01 03:38:33 -05:00
James Kasten
ae5ad15bdb minor testing change 2012-11-29 21:56:17 -05:00
James Kasten
616ae889ea Improved vhost selection algorithm 2012-11-29 21:53:29 -05:00
James Kasten
afc3102998 Removed *:443 fix as the underlying issue was using public ip addresses in vhost when they should have been private 2012-11-20 15:20:08 -05:00
James Kasten
4503ff8f1d Add restart after adding redirect 2012-11-20 01:55:50 -05:00
James Kasten
ec489af5ad Fixed sni challenge private ip bug 2012-11-20 01:27:36 -05:00
James Kasten
07dc3c5506 Merge branch 'master' of github.com:research/chocolate 2012-11-20 01:20:11 -05:00
James Kasten
a757f344d7 Added quick fix to support sni_challenge for private ip addresses 2012-11-20 01:19:51 -05:00
Eric
bf92644572 logger needs to only print strings 2012-11-20 00:30:01 -05:00
James Kasten
6531a9e8c2 get_all_names should return a set, not a list 2012-11-20 00:13:22 -05:00
James Kasten
e7e1aefe83 Return all names should be a set of names, not a list 2012-11-20 00:11:04 -05:00
James Kasten
c5a77bd360 configurator debug statement fixed 2012-11-19 23:50:35 -05:00
Seth Schoen
85d7437178 per discussion, remove clock skew checks; also, two TODOs moved to filed issues 2012-11-19 11:59:21 -08:00
Seth Schoen
2acbe09ded the peername is actually unknown, not unspecified, in this case 2012-11-19 11:09:09 -08:00
Seth Schoen
05823ba2b0 peername may not be set in case of error 2012-11-19 11:05:05 -08:00
Seth Schoen
260983bde2 more sanity checking, though it's already done by the regular expression 2012-11-18 22:51:53 -08:00