20 commits

Author	SHA1	Message	Date
Seth Schoen	6f5d15cddf	whoops, the past is the past, not the future	2012-07-18 22:28:41 -07:00
Seth Schoen	1e17b222ab	document priority inversion bug	2012-07-18 19:38:00 -07:00
Seth Schoen	707dedbd9b	add verification probe via Tor	2012-07-18 18:43:23 -07:00
Seth Schoen	acd5a77fc3	make the process faster by reducing delay times	2012-07-15 16:37:39 -07:00
Seth Schoen	f07275a99d	another comment on locking	2012-07-15 16:33:23 -07:00
Seth Schoen	ad71e39d31	simplify by removing hashes of random numbers ... There may be circumstances where hashing random numbers might be useful, but in order to justify it we would need to know something about the generator that provides them. However, checking with strace shows that the CSPRNG in Crypto.Random may not reseed its entropy enough, so we might ultimately want to use a different one. It only reseeds 8 bytes per call even if you read megabytes of random numbers from it!	2012-07-15 16:16:28 -07:00
Seth Schoen	1019a47b31	oops, confused module name and class name	2012-07-14 23:02:55 -07:00
Seth Schoen	88c5b270ef	implement locking for issuing certs with openssl ca	2012-07-14 23:01:39 -07:00
Seth Schoen	c1927aed26	switch to hashlib	2012-07-14 15:02:26 -07:00
Seth Schoen	be58b8759a	notes on locking and concurrency	2012-07-14 14:56:19 -07:00
Seth Schoen	2f21a92e82	more appropriate verbosity	2012-07-13 22:55:38 -07:00
Seth Schoen	32c2ba8e71	correctly emit subject alternative names and remove most user-supplied data from cert	2012-07-13 22:50:58 -07:00
Seth Schoen	e2b798fe26	implement session timeouts inside daemon	2012-07-12 18:19:14 -07:00
Seth Schoen	d441355715	make daemon exit cleanly after interrupt signals	2012-07-12 14:30:56 -07:00
Seth Schoen	83d246bc7f	correctly interpret challtime and challtype as ints	2012-07-10 18:51:58 -07:00
Seth Schoen	0a56d7fd60	add debug prints; actually check whether issuance succeeded	2012-07-10 18:34:32 -07:00
Seth Schoen	2a514f5166	adjust daemon to use sni_challenge package	2012-07-10 16:59:04 -07:00
Seth Schoen	3f03dc4e5c	implement dvsni challenge checking	2012-07-10 00:25:11 -07:00
Seth Schoen	ee9343469f	more explicit clarification about concurrency	2012-07-09 22:23:44 -07:00
Seth Schoen	bd578f9796	moving everything server-side to server-ca directory	2012-07-06 14:45:26 -07:00

Renamed from client-webserver/daemon.py (Browse further)