upstream/certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-03-27 12:53:05 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
certbot/server-ca
History
Eric Wustrow 9ccd7d2e1e use M2Crypto (patched to support X509.Request.get_extensions) to read the SANs from the CSR; remove pkcs10.py
2012-07-12 19:38:37 -04:00
..
demoCA changes to make CSR.issue() successfully issue certs 2012-07-09 00:01:19 -07:00
sni_challenge Added a fetch OID TODO 2012-07-11 15:10:44 -04:00
CA.sh changes to make CSR.issue() successfully issue certs 2012-07-09 00:01:19 -07:00
chocolate.py A bit less annoying - you can init a BIO with a string 2012-07-12 19:16:48 -04:00
chocolate_protocol.proto remove disused debug flag in protocol 2012-07-09 22:33:02 -07:00
CSR.py use M2Crypto (patched to support X509.Request.get_extensions) to read the SANs from the CSR; remove pkcs10.py 2012-07-12 19:38:37 -04:00
daemon.py make daemon exit cleanly after interrupt signals 2012-07-12 14:30:56 -07:00
Makefile use M2Crypto (patched to support X509.Request.get_extensions) to read the SANs from the CSR; remove pkcs10.py 2012-07-12 19:38:37 -04:00
README moving everything server-side to server-ca directory 2012-07-06 14:45:26 -07:00
REDIS moving everything server-side to server-ca directory 2012-07-06 14:45:26 -07:00

README 

In this directory is a reference CA implementation of the Chocolate protocol,
DV and signing mechanism.

Set CHOCOLATESERVER environment variable for "make deploy"!


chocolate.py - server-side, requires web.py (python-webpy),
        PyCrypto (python-crypto) 2.3 (not 2.1!!), redis, python-redis,
        python-protobuf, python-nss
	probably wants to run under a web server like lighttpd with fastcgi


chocolate_protocol.proto - protocol definition; needs protobuf-compiler

sni_challenge -
	Assumes Apache server with name based virtual hosts is running 
	(for intended address).
	Call perform_sni_cert_challenge(address, r, nonce) to do the whole 
	challenge.
	Example code is given in main method
	Right now requires full path specification of CSR/KEY in the Global 
	Variables (how should this be specified?)