lauri
1bf3298a21
doc: Add GCM for LEDE instructions
2018-04-09 16:26:18 +03:00
lauri
17dd3e95b2
Add jinja2 as dependency
2018-04-09 16:25:51 +03:00
lauri
27ded33cc6
Open token URL in a new window/tab
2018-04-09 16:25:39 +03:00
lauri
3c27f333fd
Cleaned up LEDE image builder scripts
2018-04-09 16:25:33 +03:00
lauri
577962e09b
Several improvements
...
* Add EC support
* Make token form toggleable
* Make client certificates compatible with iOS native IKEv2
* Fix OU for self-enroll
* Improved sample scripts in web UI
2018-04-09 16:25:03 +03:00
lauri
9c6872a949
cli: Add $HOSTNAME option for common name config option of client
2018-03-22 11:15:11 +02:00
lauri
1c49626f50
Sevral bugfixes
2018-03-03 13:54:31 +00:00
lauri
a46ffcba35
Add PowerShell script for requesting certificates
2018-03-03 11:37:43 +00:00
lauri
a1f7b5fca5
Merge pull request #40 from plaes/authority-rework
...
Authority refactor
2018-02-03 17:13:44 +02:00
lauri
5cb7f89c1b
Bugfixes, OU support and image builder fixes
2018-01-26 14:03:13 +02:00
lauri
388f58574b
Merge pull request #38 from plaes/wip
...
Misc cleanups
2018-01-05 22:25:43 +02:00
lauri
098aa5657d
tests: More explicit errors for OCSP and SCEP
2018-01-05 12:42:14 +00:00
lauri
67dcf4a156
cli: Fix image builder command order
2018-01-03 22:34:52 +00:00
lauri
fba8f5d776
Integrate LEDE image builder
2018-01-03 22:17:35 +00:00
lauri
345c2802ea
api: Fix request submission form
2018-01-03 22:17:35 +00:00
lauri
3d1e6768bb
cli: Self-enroll again only if cert is about to expire
2018-01-03 22:17:35 +00:00
lauri
e594371ee3
api: Update last seen status for VPN gateway during client update
2018-01-03 22:17:35 +00:00
lauri
40d84918eb
doc: Update Certidude screenshot
2017-12-31 23:55:14 +02:00
lauri
15f3e19da7
cli: Atomic write of /etc/systemd/system/openvpn-reconnect.service
2017-12-30 18:56:12 +00:00
lauri
150e3234b9
travis: Make sure /etc/hosts gets reset
2017-12-30 20:38:35 +02:00
lauri
d236af6b01
travis: Even less Travis magic
2017-12-30 20:34:43 +02:00
lauri
6fb7cbbcc7
travis: Set FQDN in advance
2017-12-30 20:28:48 +02:00
lauri
79ae57dc04
travis: Attempt to avoid Travis' Python magic
2017-12-30 20:19:24 +02:00
lauri
fccabddab5
travis: Preserve environment for sudo
2017-12-30 20:09:58 +02:00
lauri
b879b17324
travis: Attempt to use pip from Travis virtualenv
2017-12-30 17:25:29 +02:00
lauri
3ecba8e550
travis: Add system dependencies
2017-12-30 17:22:01 +02:00
lauri
59bedc1f16
Major refactor
...
* Migrate to Python 3
* Update token generator mechanism
* Switch to Bootstrap 4
* Switch from Iconmonstr to Font Awesome icons
* Rename default CA common name to "Certidude at ca.example.lan"
* Add self-enroll for the TLS server certificates
* TLS client auth for lease updating
* Compile assets from npm packages to /var/lib/certidude/ca.example.lan/assets
2017-12-30 14:00:19 +00:00
lauri
d32ec224d7
Install cryptography.io just for unittests
2017-08-16 21:08:20 +00:00
lauri
c45a5df773
Remove unused setproctitle import
2017-08-16 23:30:42 +03:00
lauri
9745367ebd
Add csrbuilder as dependency
2017-08-16 23:26:42 +03:00
lauri
509f7bfaa8
Migrate from cryptography.io to oscrypto
2017-08-16 20:25:16 +00:00
lauri
789d80d712
api: Save enrollment IP address
2017-08-10 00:45:43 +03:00
lauri
783bba3474
Add OpenWrt/LEDE integration guide
2017-08-09 16:18:32 +03:00
lauri
f7d8e95aa8
tests: Fix /api/revoked check
2017-07-29 21:27:15 +00:00
lauri
bce906db36
Migrate authority setup to certbuilder
2017-07-29 20:55:46 +00:00
lauri
f069688a9a
Add basic DoS prevention measures
2017-07-29 23:19:37 +03:00
lauri
dc67e46010
Add OpenWrt/LEDE integration script
2017-07-13 17:36:52 +03:00
lauri
03b9778170
Better starttup/shutdown notification
2017-07-11 18:57:19 +00:00
lauri
d44b6035c2
Embed OCSP responder URL in certificate
2017-07-08 12:08:39 +00:00
lauri
47d2d37684
Add missing import for setxattr
2017-07-08 12:08:23 +00:00
lauri
9008744c48
api: Make logger use unicode literals
2017-07-08 08:56:01 +00:00
lauri
1f1ca2c211
cli: Drop package management provided cryptography.io and falcon
2017-07-08 08:55:43 +00:00
lauri
486a5d3459
tests: Lazier import for xattr
2017-07-08 08:51:00 +00:00
lauri
a48331a9cb
tests: Add test for machine attribute updates
2017-07-07 21:07:25 +00:00
lauri
39363a57c7
tests: More coverage
2017-07-06 09:29:02 +00:00
lauri
34c72aaa9e
tests: Fixes and better code coverage
2017-07-06 08:15:44 +00:00
lauri
e25c774fa3
Bugfixes and test for SCEP
2017-07-05 21:22:02 +00:00
lauri
9b5511212e
Several changes
...
* OCSP workaround for StrongSwan
* Machine attributes framework
* Scripting support
* Default to nginx frontend
2017-07-05 18:22:03 +03:00
lauri
d08a3f9f92
cli: Fix certidude request dependency handling
2017-06-04 14:48:28 +00:00
lauri
ecb1d9b3f3
Better fallback for FQDN detection
2017-06-04 14:33:47 +00:00
lauri
0a98b3f82e
Add tests for OCSP, several bugfixes
2017-06-04 14:19:29 +00:00
lauri
61aa54695e
cli: Migrate client side to oscrypto
2017-05-27 21:17:21 +03:00
lauri
5d48abe973
api: Preliminary OCSP support
2017-05-25 22:20:45 +03:00
lauri
5ae872e1ea
api: Add preliminary SCEP support
2017-05-18 22:29:49 +03:00
lauri
a5ad9238a1
cli: Lazier import for pwd
2017-05-12 20:52:25 +00:00
lauri
f4901593e1
cli: Use variable name authority instead of server
2017-05-12 20:52:06 +00:00
lauri
eecfbee384
tests: Fix signer shutdown and add tests for event source
2017-05-09 09:48:24 +00:00
lauri
b77a427949
api: Submit inner and outer IP address when updating lease
2017-05-08 20:33:20 +00:00
lauri
dfb90689db
tests: Disable LDAP auth check for now
2017-05-08 16:49:45 +00:00
lauri
09f5b11505
tests: Add tests for machine keytab auth
2017-05-08 16:25:59 +00:00
lauri
e27b3ff9d1
tests: Never verify TLS certfs for LDAP
2017-05-08 10:27:27 +00:00
lauri
17c4e157e7
tests: Attempt to build for trusty and xenial both
2017-05-08 10:27:02 +00:00
lauri
4e41655532
api: Better error message when confronted with NTLM
2017-05-08 10:26:11 +00:00
lauri
545febf3d0
tests: Cover LDAP auth and more
2017-05-07 22:14:58 +00:00
lauri
a4a31ca2c6
Mailer always enabled
2017-05-07 20:49:58 +00:00
lauri
f4d660d5eb
tests: Make coverage xml ignore errors
2017-05-07 20:41:31 +00:00
lauri
b1dd6f0093
tests: Checks for /etc/cron.hourly/certidude
2017-05-07 19:51:40 +00:00
lauri
8440cd840d
tests: Fix race condition bugs
2017-05-07 19:29:07 +00:00
lauri
71e77154d7
tests: Preliminary tests for Kerberos/LDAP auth
2017-05-07 19:11:24 +00:00
lauri
60a0f2ba7c
tests: Set up nchan as part of certidude setup authority
2017-05-06 21:35:02 +00:00
lauri
b19e163a82
tests: Attempt to set up nchan as part of unittests
2017-05-06 21:07:41 +00:00
lauri
de1d182320
Add API call for rendering scripts, bugfixes
2017-05-04 17:56:53 +00:00
lauri
a75fb58cb5
tests: Lease and attribute API call fixes
2017-05-04 10:02:14 +00:00
lauri
8c8a3a9930
tests: Better tagging tests
2017-05-04 09:35:39 +00:00
lauri
94944e37f1
tests: Better coverage for tagging tests
2017-05-04 09:14:47 +00:00
lauri
2ffcc64d86
tests: Test CRL checks on client side
2017-05-04 07:38:49 +00:00
lauri
68f6b9f6f6
tests: Attempt to install NetworkManager
2017-05-04 06:55:26 +00:00
lauri
47d518e250
tests: Create /etc/NetworkManager/system-connections/ in advance
2017-05-04 06:47:53 +00:00
lauri
505fa9d557
tests: Fix NetworkManager setup tests
2017-05-04 06:40:47 +00:00
lauri
9922516d24
tests: Test request deletion and signing API calls
2017-05-03 21:54:08 +00:00
lauri
ba678e4b29
api: Remove unused event_source decorator
2017-05-04 00:24:25 +03:00
lauri
aeb5d81aa6
tests: Generate DH params file in single location
2017-05-03 21:12:51 +00:00
lauri
189c604832
tests: Better code coverage
2017-05-03 21:04:34 +00:00
lauri
a5565439ab
tests: Assume NetworkManager is installed
2017-05-03 14:50:10 +00:00
lauri
47aded48d5
tests: Add e-mailing and more cli commands
2017-05-03 14:42:37 +00:00
lauri
3586aee1d9
tests: Allow coverage to write output from forked processes
2017-05-03 07:13:24 +00:00
lauri
649863a77e
tests: Handle forking
2017-05-03 07:04:52 +00:00
lauri
8f9da9c2f1
tests: Add test for certificate renewal
2017-05-02 06:11:28 +00:00
lauri
06b65444d5
tests: Another attempt to fix code coverage
2017-05-01 23:32:01 +00:00
lauri
a168b19cf2
tests: Attempt to fix codecov
2017-05-01 23:11:46 +00:00
lauri
9a7b806ff6
tests: Fix /run/certidude permissions
2017-05-01 23:06:45 +00:00
lauri
60ff382d74
tests: More verbosity
2017-05-01 22:53:24 +00:00
lauri
86df98a117
tests: Attempt to install certidude system-wide
2017-05-01 22:47:21 +00:00
lauri
a9c29d2fbb
tests: Improvements
2017-05-01 22:41:41 +00:00
lauri
58491e7933
tests: Cleanups
2017-05-01 22:32:55 +00:00
lauri
3c8aef4fd2
tests: Better CA cert checks
2017-05-01 21:52:27 +00:00
lauri
1484ad7826
tests: Fix typo
2017-05-01 21:41:34 +00:00
lauri
c60fd6ac9e
tests: Add requests.get for static serving tests
2017-05-01 21:37:56 +00:00
lauri
227902b563
tests: More debugging info for CRL API calls
2017-05-01 21:19:28 +00:00
lauri
be561cc52f
tests: Add test for export_crl() function
2017-05-01 21:06:28 +00:00
lauri