Seth Schoen
|
215c305842
|
more global variables
|
2012-08-10 17:59:54 -07:00 |
|
Seth Schoen
|
efa9714b23
|
use global version of server variable
|
2012-08-10 17:59:09 -07:00 |
|
Seth Schoen
|
846d476d21
|
extra closing paren
|
2012-08-10 17:58:21 -07:00 |
|
Seth Schoen
|
8cdc23a132
|
set server on command line with --server, or CHOCOLATESERVER
|
2012-08-10 17:57:17 -07:00 |
|
Seth Schoen
|
3988f6f04b
|
integrate some of the curses interface
|
2012-08-10 17:49:41 -07:00 |
|
Seth Schoen
|
8b082f9fde
|
evidently, current best practice is to include ALL DNS names, including the primary name, as SANs
|
2012-08-10 16:26:25 -07:00 |
|
Seth Schoen
|
12ef7489ec
|
output the name that we're doing the test for
|
2012-08-10 10:41:29 -07:00 |
|
Seth Schoen
|
f3d1b4b996
|
fix logic to not test ancientness of nonexistent sessions
|
2012-08-10 10:18:35 -07:00 |
|
Seth Schoen
|
6dcf213ff6
|
rename function and add sanity-checking assertion
|
2012-08-09 23:38:46 -07:00 |
|
James Kasten
|
7e4069f691
|
Added commented import statements for pending trustify package
|
2012-08-10 00:07:59 -04:00 |
|
Seth Schoen
|
b3dba8e6db
|
function to generate RSA keypair and corresponding CSR
|
2012-08-09 18:52:12 -07:00 |
|
Seth Schoen
|
f449f538dd
|
upstream changed API :-)
|
2012-08-09 17:41:38 -07:00 |
|
Seth Schoen
|
f167fe732b
|
show ncurses menu for configuration choices
|
2012-08-09 17:26:56 -07:00 |
|
Seth Schoen
|
f6e3a301a8
|
now there is a dependency on python-dialog
|
2012-08-09 16:36:52 -07:00 |
|
Seth Schoen
|
bff90ee86f
|
let's use dialog and getopt!
|
2012-08-09 16:36:27 -07:00 |
|
James Kasten
|
b28e657e65
|
variable name fix
|
2012-08-09 19:04:12 -04:00 |
|
James Kasten
|
e142ad7f5f
|
All client functionality is now contained in authenticate()
|
2012-08-09 18:39:03 -04:00 |
|
Seth Schoen
|
c9cc928dc4
|
implement Observatory blacklist
|
2012-08-09 14:20:18 -07:00 |
|
Peter Eckersley
|
cb0f7d5389
|
Merge branch 'master' of github.com:research/chocolate
|
2012-08-08 17:39:55 -07:00 |
|
Seth Schoen
|
c6453513b6
|
switch to Peter's round-robin scheduling approach
|
2012-08-08 17:30:44 -07:00 |
|
James Kasten
|
7c814bd7b1
|
Fixed SERVER_ROOT directory, improved sni_challenge test
|
2012-08-08 20:06:41 -04:00 |
|
James Kasten
|
9e96153d84
|
Moved all hardcoded constants to CONFIG file
|
2012-08-08 19:54:32 -04:00 |
|
Peter Eckersley
|
913dbd5581
|
The hashcash binary is also a client-webserver dependency now
|
2012-08-08 16:12:01 -07:00 |
|
James Kasten
|
ca7d7f8ab7
|
Small bug fixes from last commit
|
2012-08-08 19:10:38 -04:00 |
|
James Kasten
|
c0a3fd3f0d
|
Quick separation of work_directory from config_directory
|
2012-08-08 19:01:44 -04:00 |
|
James Kasten
|
c1e3da6395
|
Merge branch 'master' of github.com:research/chocolate
|
2012-08-08 17:02:38 -04:00 |
|
James Kasten
|
0bd5bf57d5
|
Added check to see if certificate exists
|
2012-08-08 17:01:54 -04:00 |
|
Seth Schoen
|
c4c8bd04f9
|
argh, ugly hack for problem of stale requests poisoning queues
|
2012-08-08 13:41:15 -07:00 |
|
Seth Schoen
|
cb2040a3ac
|
add missing colon
|
2012-08-08 13:13:14 -07:00 |
|
James Kasten
|
76f449f650
|
slight modifications
|
2012-08-08 01:06:30 -04:00 |
|
James Kasten
|
17e7b14f81
|
Fix short lived error
|
2012-08-08 00:31:51 -04:00 |
|
James Kasten
|
b13364a647
|
Fixed a bug with the default name based vhost, made sni_challenge create challenge_vhosts with IP_address of target vhost
|
2012-08-08 00:08:03 -04:00 |
|
James Kasten
|
c9fcad82ff
|
Added a check for a failed sni_challenge
|
2012-08-07 22:56:46 -04:00 |
|
James Kasten
|
da01500a68
|
Reworked deploy_cert to use find_directive
|
2012-08-07 21:32:51 -04:00 |
|
James Kasten
|
3b25a87667
|
Added is_site_enabled, added documentation
|
2012-08-07 18:02:05 -04:00 |
|
James Kasten
|
55f12a61a7
|
Merge branch 'master' of github.com:research/chocolate
|
2012-08-07 15:59:36 -04:00 |
|
James Kasten
|
1693414a69
|
Added get_all_names function for configurator
|
2012-08-07 15:56:05 -04:00 |
|
Peter Eckersley
|
84eb5058c6
|
Disable raw IPv6 addresses by default
(they're scarier than I thought, and a bit dangerous in Web and maybe Windows
shell contexts)
|
2012-08-06 15:27:05 -07:00 |
|
Peter Eckersley
|
e119f50f14
|
Explain the tree a bit; note some debian dependencies
|
2012-08-06 15:00:51 -07:00 |
|
James Kasten
|
498c47f2f6
|
Added enable_site and enable_mod_ssl
|
2012-08-03 15:52:07 -04:00 |
|
James Kasten
|
6804ccb41f
|
Added apache/sni_challenge cleanup
|
2012-08-02 18:46:01 -04:00 |
|
James Kasten
|
6fd9d01644
|
Revert to EC2 testing variables
|
2012-08-01 19:46:34 -04:00 |
|
James Kasten
|
cdafed5427
|
Using Augeas to add Include directive for challenge vhosts
|
2012-08-01 19:42:18 -04:00 |
|
James Kasten
|
fc56a875d0
|
Added code to auto-configure the Apache server for SNI challenges
|
2012-08-01 19:31:21 -04:00 |
|
James Kasten
|
a0ca971c2e
|
Updated README
|
2012-08-01 14:25:20 -04:00 |
|
James Kasten
|
91907b1264
|
Slight update to README
|
2012-08-01 14:23:25 -04:00 |
|
James Kasten
|
5a07d530f9
|
Example ec2 client auto-installs certificates upon receiving cert
|
2012-07-30 19:26:03 -04:00 |
|
James Kasten
|
2c9629046a
|
Made quick changes to client to allow for deployment of cert on test servers
|
2012-07-30 18:19:40 -04:00 |
|
James Kasten
|
de89d1fe63
|
Added error handling for Augeas save files
|
2012-07-30 14:47:41 -04:00 |
|
James Kasten
|
94d1827838
|
Added make_server_sni_ready, fixed vhost.addrs bug, cleaned up some code
|
2012-07-30 14:03:06 -04:00 |
|