Seth Schoen
|
ae5bf2b177
|
working demonstration of proof-of-possession logic
|
2013-10-23 18:56:25 -07:00 |
|
Peter Eckersley
|
ee01e0f968
|
tweaks
|
2013-08-11 17:48:24 +02:00 |
|
Peter Eckersley
|
fddb19fe4a
|
Import draft Trustify protocol docs from Etherpad
|
2013-08-11 17:47:48 +02:00 |
|
James Kasten
|
788e0c413a
|
syntax fix
|
2013-05-23 22:25:47 -04:00 |
|
James Kasten
|
402eadd208
|
Fix configurator restart
|
2013-05-23 22:20:14 -04:00 |
|
James Kasten
|
98e70df5e4
|
Added restart to rollback call
|
2013-05-23 22:11:15 -04:00 |
|
James Kasten
|
cbef46463d
|
Remove orphan file use
|
2013-05-23 21:58:33 -04:00 |
|
James Kasten
|
79b88de225
|
recovery_routine needs to occur before VH objects are instantiated
|
2013-05-23 18:36:11 -04:00 |
|
James Kasten
|
be85cfc620
|
Remove augeas backup save system, fix various syntax errors
|
2013-05-23 18:00:53 -04:00 |
|
James Kasten
|
c9f3d1d7fc
|
Instituted new file registration to make all config transactions atomic
|
2013-05-23 17:04:53 -04:00 |
|
James Kasten
|
a6d9b0f599
|
Fix --view-checkpoints
|
2013-05-23 14:43:41 -04:00 |
|
James Kasten
|
13e4babfb5
|
Fixed save() to run checkpoint_update anytime files are added
|
2013-05-22 18:49:01 -04:00 |
|
James Kasten
|
405a3d501b
|
SNI Challenge now relies on Configurator checkpoint system to cleanup.
|
2013-05-22 18:15:01 -04:00 |
|
James Kasten
|
49fe7e2a32
|
Standardized safe directory creation, created trustify_util.py for common functions
|
2013-05-22 16:56:52 -04:00 |
|
James Kasten
|
fea37e40c3
|
Allow finalize_checkpoint to occur even if there are no current saves
|
2013-05-22 01:19:54 -04:00 |
|
James Kasten
|
3ac7452ca7
|
Added a few fixes for new checkpoint system
|
2013-05-22 00:38:12 -04:00 |
|
James Kasten
|
b5e374ee2b
|
Reworked Configurator save/checkpoint system
|
2013-05-21 23:36:14 -04:00 |
|
James Kasten
|
bed2c5049a
|
Add Augeas parsing error check, support for Augeas case-insensitive sections
|
2013-05-21 17:22:38 -04:00 |
|
James Kasten
|
db5dfea9b9
|
Changed __case_i to be a public function
|
2013-05-20 15:38:47 -04:00 |
|
James Kasten
|
7f29aef2cc
|
Add support for case insensitive directives
|
2013-05-20 15:21:05 -04:00 |
|
James Kasten
|
9bd7b4ff7b
|
Final touches before case insensitive Augeas testing begins
|
2013-05-19 14:12:33 -04:00 |
|
James Kasten
|
e75489b2df
|
Added configtest at beginning of client authentication, included a few fixes
|
2013-05-17 00:11:38 -04:00 |
|
James Kasten
|
a256054c72
|
Added view checkpoints and rollback feature as options to cmd line
|
2013-05-16 14:20:54 -04:00 |
|
James Kasten
|
c8dfdf104d
|
Finished refactoring client.py
|
2013-05-16 13:19:53 -04:00 |
|
James Kasten
|
5f782aebd6
|
Fixed some API naming issues
|
2013-05-15 18:24:28 -04:00 |
|
James Kasten
|
01ed93a8b0
|
Fixed a few variable name errors
|
2013-05-15 17:41:45 -04:00 |
|
James Kasten
|
0913a9a8aa
|
Clean up client.py, make object oriented, add robustness
|
2013-05-15 17:30:00 -04:00 |
|
James Kasten
|
281b9ca592
|
Removed testing specific code for new features
|
2013-04-11 00:56:52 -04:00 |
|
James Kasten
|
719f50cbde
|
Added a secure initialization script and removed DNS lookups for private IPs
|
2013-04-11 00:44:36 -04:00 |
|
James Kasten
|
e6cd2ff80c
|
Removed brackets for parentheses
|
2012-12-01 23:06:39 -05:00 |
|
James Kasten
|
6818153660
|
Added tiered CA shuffling for CA choices
|
2012-12-01 22:28:25 -05:00 |
|
James Kasten
|
c16d2ab2d5
|
erase redundant return statement
|
2012-12-01 21:50:11 -05:00 |
|
James Kasten
|
635b6a8404
|
Add NameVirtualHost for new SSL Vhost if nonsslvhost had name virtual host enabled
|
2012-12-01 21:44:50 -05:00 |
|
James Kasten
|
3f93a1e6c9
|
Fixed issues with running multiple vhosts separately with upgrade from http vhost to https
|
2012-12-01 19:32:06 -05:00 |
|
James Kasten
|
44a6a9328f
|
fixed interface for make_vhost_ssl
|
2012-12-01 03:38:33 -05:00 |
|
James Kasten
|
ae5ad15bdb
|
minor testing change
|
2012-11-29 21:56:17 -05:00 |
|
James Kasten
|
616ae889ea
|
Improved vhost selection algorithm
|
2012-11-29 21:53:29 -05:00 |
|
James Kasten
|
afc3102998
|
Removed *:443 fix as the underlying issue was using public ip addresses in vhost when they should have been private
|
2012-11-20 15:20:08 -05:00 |
|
James Kasten
|
4503ff8f1d
|
Add restart after adding redirect
|
2012-11-20 01:55:50 -05:00 |
|
James Kasten
|
ec489af5ad
|
Fixed sni challenge private ip bug
|
2012-11-20 01:27:36 -05:00 |
|
James Kasten
|
07dc3c5506
|
Merge branch 'master' of github.com:research/chocolate
|
2012-11-20 01:20:11 -05:00 |
|
James Kasten
|
a757f344d7
|
Added quick fix to support sni_challenge for private ip addresses
|
2012-11-20 01:19:51 -05:00 |
|
Eric
|
bf92644572
|
logger needs to only print strings
|
2012-11-20 00:30:01 -05:00 |
|
James Kasten
|
6531a9e8c2
|
get_all_names should return a set, not a list
|
2012-11-20 00:13:22 -05:00 |
|
James Kasten
|
e7e1aefe83
|
Return all names should be a set of names, not a list
|
2012-11-20 00:11:04 -05:00 |
|
James Kasten
|
c5a77bd360
|
configurator debug statement fixed
|
2012-11-19 23:50:35 -05:00 |
|
Seth Schoen
|
85d7437178
|
per discussion, remove clock skew checks; also, two TODOs moved to filed issues
|
2012-11-19 11:59:21 -08:00 |
|
Seth Schoen
|
2acbe09ded
|
the peername is actually unknown, not unspecified, in this case
|
2012-11-19 11:09:09 -08:00 |
|
Seth Schoen
|
05823ba2b0
|
peername may not be set in case of error
|
2012-11-19 11:05:05 -08:00 |
|
Seth Schoen
|
260983bde2
|
more sanity checking, though it's already done by the regular expression
|
2012-11-18 22:51:53 -08:00 |
|