Commit graph

10174 commits

Author SHA1 Message Date
Seth Schoen
846d476d21 extra closing paren 2012-08-10 17:58:21 -07:00
Seth Schoen
8cdc23a132 set server on command line with --server, or CHOCOLATESERVER 2012-08-10 17:57:17 -07:00
Seth Schoen
3988f6f04b integrate some of the curses interface 2012-08-10 17:49:41 -07:00
Seth Schoen
8b082f9fde evidently, current best practice is to include ALL DNS names, including the primary name, as SANs 2012-08-10 16:26:25 -07:00
Seth Schoen
12ef7489ec output the name that we're doing the test for 2012-08-10 10:41:29 -07:00
Seth Schoen
f3d1b4b996 fix logic to not test ancientness of nonexistent sessions 2012-08-10 10:18:35 -07:00
Seth Schoen
6dcf213ff6 rename function and add sanity-checking assertion 2012-08-09 23:38:46 -07:00
James Kasten
7e4069f691 Added commented import statements for pending trustify package 2012-08-10 00:07:59 -04:00
Seth Schoen
b3dba8e6db function to generate RSA keypair and corresponding CSR 2012-08-09 18:52:12 -07:00
Seth Schoen
f449f538dd upstream changed API :-) 2012-08-09 17:41:38 -07:00
Seth Schoen
f167fe732b show ncurses menu for configuration choices 2012-08-09 17:26:56 -07:00
Seth Schoen
f6e3a301a8 now there is a dependency on python-dialog 2012-08-09 16:36:52 -07:00
Seth Schoen
bff90ee86f let's use dialog and getopt! 2012-08-09 16:36:27 -07:00
James Kasten
b28e657e65 variable name fix 2012-08-09 19:04:12 -04:00
James Kasten
e142ad7f5f All client functionality is now contained in authenticate() 2012-08-09 18:39:03 -04:00
Seth Schoen
c9cc928dc4 implement Observatory blacklist 2012-08-09 14:20:18 -07:00
Peter Eckersley
cb0f7d5389 Merge branch 'master' of github.com:research/chocolate 2012-08-08 17:39:55 -07:00
Seth Schoen
c6453513b6 switch to Peter's round-robin scheduling approach 2012-08-08 17:30:44 -07:00
James Kasten
7c814bd7b1 Fixed SERVER_ROOT directory, improved sni_challenge test 2012-08-08 20:06:41 -04:00
James Kasten
9e96153d84 Moved all hardcoded constants to CONFIG file 2012-08-08 19:54:32 -04:00
Peter Eckersley
913dbd5581 The hashcash binary is also a client-webserver dependency now 2012-08-08 16:12:01 -07:00
James Kasten
ca7d7f8ab7 Small bug fixes from last commit 2012-08-08 19:10:38 -04:00
James Kasten
c0a3fd3f0d Quick separation of work_directory from config_directory 2012-08-08 19:01:44 -04:00
James Kasten
c1e3da6395 Merge branch 'master' of github.com:research/chocolate 2012-08-08 17:02:38 -04:00
James Kasten
0bd5bf57d5 Added check to see if certificate exists 2012-08-08 17:01:54 -04:00
Seth Schoen
c4c8bd04f9 argh, ugly hack for problem of stale requests poisoning queues 2012-08-08 13:41:15 -07:00
Seth Schoen
cb2040a3ac add missing colon 2012-08-08 13:13:14 -07:00
James Kasten
76f449f650 slight modifications 2012-08-08 01:06:30 -04:00
James Kasten
17e7b14f81 Fix short lived error 2012-08-08 00:31:51 -04:00
James Kasten
b13364a647 Fixed a bug with the default name based vhost, made sni_challenge create challenge_vhosts with IP_address of target vhost 2012-08-08 00:08:03 -04:00
James Kasten
c9fcad82ff Added a check for a failed sni_challenge 2012-08-07 22:56:46 -04:00
James Kasten
da01500a68 Reworked deploy_cert to use find_directive 2012-08-07 21:32:51 -04:00
James Kasten
3b25a87667 Added is_site_enabled, added documentation 2012-08-07 18:02:05 -04:00
James Kasten
55f12a61a7 Merge branch 'master' of github.com:research/chocolate 2012-08-07 15:59:36 -04:00
James Kasten
1693414a69 Added get_all_names function for configurator 2012-08-07 15:56:05 -04:00
Peter Eckersley
84eb5058c6 Disable raw IPv6 addresses by default
(they're scarier than I thought, and a bit dangerous in Web and maybe Windows
shell contexts)
2012-08-06 15:27:05 -07:00
Peter Eckersley
e119f50f14 Explain the tree a bit; note some debian dependencies 2012-08-06 15:00:51 -07:00
James Kasten
498c47f2f6 Added enable_site and enable_mod_ssl 2012-08-03 15:52:07 -04:00
James Kasten
6804ccb41f Added apache/sni_challenge cleanup 2012-08-02 18:46:01 -04:00
James Kasten
6fd9d01644 Revert to EC2 testing variables 2012-08-01 19:46:34 -04:00
James Kasten
cdafed5427 Using Augeas to add Include directive for challenge vhosts 2012-08-01 19:42:18 -04:00
James Kasten
fc56a875d0 Added code to auto-configure the Apache server for SNI challenges 2012-08-01 19:31:21 -04:00
James Kasten
a0ca971c2e Updated README 2012-08-01 14:25:20 -04:00
James Kasten
91907b1264 Slight update to README 2012-08-01 14:23:25 -04:00
James Kasten
5a07d530f9 Example ec2 client auto-installs certificates upon receiving cert 2012-07-30 19:26:03 -04:00
James Kasten
2c9629046a Made quick changes to client to allow for deployment of cert on test servers 2012-07-30 18:19:40 -04:00
James Kasten
de89d1fe63 Added error handling for Augeas save files 2012-07-30 14:47:41 -04:00
James Kasten
94d1827838 Added make_server_sni_ready, fixed vhost.addrs bug, cleaned up some code 2012-07-30 14:03:06 -04:00
Seth Schoen
67da1f65dd just in case there are DOS-style EOLs in the CSR 2012-07-28 18:43:20 -07:00
James Kasten
f2e54b4df0 Added find_directive - searches for directives recursively through conf files, fixed a few bugs 2012-07-27 00:58:12 -04:00