lauri/certidude
1
0
Fork 0
mirror of https://github.com/laurivosandi/certidude synced 2026-09-19 05:48:18 +00:00
Code Issues Activity
266 Commits 2 Branches 0 Tags
2629709709e857efb300853a93f50617cdd391df
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
lauri 2629709709 Attempt to specify ca as alias for ca.example.lan 2017-05-01 16:32:06 +00:00
lauri 3f286aa1f8 Click not available in Ubuntu 14.04 repos 2017-05-01 16:26:26 +00:00
lauri b0683b268d Attempt to run client as part of unittests 2017-05-01 16:20:50 +00:00
lauri cc4f13086e Improve init/openvpn handler 
* Create systemd service for signaling OpenVPN client after suspend
* Use tun instead of tap
* Update DNS server/domain upon (dis)connect
* Include necessary templates
 2017-04-29 22:09:31 +03:00
lauri e87d1c574b Mode coverage for token tests 2017-04-26 09:26:14 +03:00
lauri 9aab212647 Add tests for token mechanism 2017-04-26 09:13:41 +03:00
lauri c3477ef635 Make sure signer is spawned before testing anything 2017-04-26 00:14:02 +03:00
lauri 5ddbf87ed2 Add test for fetching logs 2017-04-26 00:10:12 +03:00
lauri 0168b03f6b Remove dependency on nonexistant package python-sqlite2 2017-04-25 23:54:08 +03:00
lauri d6d998a9e6 Add tests for SQLite based logging 2017-04-25 23:42:55 +03:00
lauri b867eee67e Add more API tests for lease, attribs etc 2017-04-25 23:32:21 +03:00
lauri 1517b902d6 Add tests for certificate revocation via API 2017-04-25 22:52:49 +03:00
lauri 316fe7aba0 Another attempt to fix PAM auth 2017-04-25 22:29:49 +03:00
lauri b0f5306297 Attempt to fix PAM auth in Travis 2017-04-25 22:25:36 +03:00
lauri cd9e896206 Require sudo for Travis 2017-04-25 22:17:19 +03:00
lauri a5c776621b Attempt to create test users via Travis 2017-04-25 22:01:18 +03:00
lauri 9ff260c2ea Add simplepam as dependency for Travis 2017-04-25 21:53:02 +03:00
lauri 15ae064f55 Preliminary tests for auth 2017-04-25 21:47:41 +03:00
lauri 3ef4d96b1c Use application/x-pem-file mimetype for user certs 2017-04-25 16:48:04 +03:00
lauri f9429b2e94 Add autosign handling for request submission test 2017-04-25 16:40:33 +03:00
lauri 4c9744308a Better branch handling for request API calls 2017-04-25 16:15:39 +03:00
lauri 7225726d66 Add request submission API call tests 2017-04-25 16:04:11 +03:00
lauri 4eb3c4146f Add tests for non-existant certificate 2017-04-25 13:58:21 +03:00
lauri 108b6ebfaf Use Falcon framework testing modules 2017-04-25 13:52:10 +03:00
lauri d54982daed Attempt to handle multithreading in tests 2017-04-25 13:25:21 +03:00
lauri ba9dca910f Add tests for API calls 2017-04-25 13:06:59 +03:00
lauri d5edbe50c5 Token mechanism fixes 2017-04-24 20:33:55 +03:00
lauri 9658d8cc83 Fixes, add some screenshots 2017-04-22 22:48:29 +03:00
lauri 029ee357fb Token mechanism fixes: 
* Save token secret to config
* OpenVPN profile fixes for Ubuntu 16.04
* Raise correct exceptions for invalid tokens
* Display token expiration time in local time
 2017-04-22 14:10:54 +03:00
lauri 7651c220c8 Remove unused import 2017-04-22 06:04:55 +00:00
lauri 0344141faf Add token based auth for profiles 2017-04-21 21:22:08 +00:00
lauri 9a793088c6 Use local MTA for sending e-mail 2017-04-21 16:58:01 +00:00
lauri 66e2b5fc35 api: Validate certificate serial only if serial is supplied 2017-04-20 14:17:03 +00:00
lauri a5b880c020 Fix dependency on subprocess 2017-04-20 05:23:09 +00:00
lauri 5e812f5194 Fixes 2017-04-20 05:20:10 +00:00
lauri 772886e4d4 Fix typo 2017-04-14 20:32:59 +03:00
lauri ca0386b649 StrongSwan gateway setup script cleanups 2017-04-14 20:21:31 +03:00
lauri b57fbfa696 Fix typo 2017-04-14 11:08:26 +00:00
lauri b9ac55fe26 Configuration generation fixes for nchan 2017-04-14 11:06:09 +00:00
lauri d6265c10d6 Fix font family name for headings 2017-04-14 10:14:14 +00:00
lauri 91f8f09854 StrongSwan client setup fixes 2017-04-14 02:49:11 +03:00
lauri 8bf9ebfebb Merge branch 'master' of github.com:laurivosandi/certidude 2017-04-14 01:50:33 +03:00
lauri a3adba02a5 Fix CRL path for configuration generators 2017-04-14 01:50:04 +03:00
lauri 216af460cf Better system keytab checking for client 2017-04-14 01:49:32 +03:00
lauri c5a0b34b0a Update README 2017-04-14 01:47:28 +03:00
lauri bc43fdc402 Lazier evaluation for dependencies 2017-04-13 22:37:31 +00:00
lauri 1c5913ee3b Add dynamic package installation via decorators 2017-04-13 22:30:20 +00:00
lauri 6264846284 Add OpenSSL as dependency for P12 generation 2017-04-13 21:20:02 +00:00
lauri b0f593dae3 Use falcon from pip instead of apt for Travis 2017-04-13 21:12:59 +00:00
lauri 0498f959b3 Add pyasn1 as dependency 2017-04-13 21:10:05 +00:00
lauri 721cce05ac Don't enforce dependency on ldap module 2017-04-13 21:03:26 +00:00
lauri 413029c5ae Fix Travis for Ubuntu 14.04 2017-04-13 20:55:46 +00:00
lauri 02b2f041cc Clean up dependencies and Travis 2017-04-13 20:52:09 +00:00
lauri 52d35012a4 Various fixes 2017-04-13 20:30:56 +00:00
lauri d91e12942d Tagging fixes 2017-04-13 15:42:38 +00:00
lauri 7a7f22c1a1 Add clock sync tolerance of 5min for signed certs 2017-04-13 15:35:08 +00:00
lauri 4a9abab362 Fix nginx configuration generation 2017-04-13 15:19:26 +00:00
lauri d7a2c7c193 Fix OpenVPN client configuration generation 2017-04-13 18:17:05 +03:00
lauri a22e1eb557 Fix server certificate extensions for StrongSwan 2017-04-13 15:12:56 +00:00
lauri 02482e8d79 Migrate to python-gssapi 2017-04-13 14:33:40 +00:00
lauri 51d7dffa9b Bugfixes 2017-04-12 13:56:29 +00:00
lauri 0201a84a64 Merge branch 'master' of github.com:laurivosandi/certidude 2017-04-12 13:22:21 +00:00
lauri 09724e04dc Add preliminary bootstrap API call 2017-04-12 13:21:49 +00:00
lauri e68829732d Merge branch 'master' of github.com:laurivosandi/certidude 2017-04-07 10:57:38 +03:00
lauri f477fb9ad8 cli: Add Yubikey enrollment command 2017-04-07 10:57:25 +03:00
lauri 848763160b Merge github.com:laurivosandi/certidude 2017-04-04 05:03:33 +00:00
lauri 90b663ce26 Add file based rotating log handler 2017-04-04 05:02:08 +00:00
lauri 5c6097cc40 Fix CSR listing command 2017-03-28 12:24:51 +03:00
lauri e506ea61be Revert back to trusty for Travis, xattr package broken in xenial 2017-03-26 21:20:03 +00:00
lauri 2596543025 More code coverage 2017-03-26 21:16:01 +00:00
lauri db3b89c71f Switch to Ubuntu 16.04 for Travis 2017-03-26 21:15:48 +00:00
lauri d5dcadc346 Remove dependency on pycountries 2017-03-26 20:47:45 +00:00
lauri e3690bedf2 Another attempt to increase code coverage 2017-03-26 20:45:08 +00:00
lauri 44b6f13669 Use random serial for CA certificate 2017-03-26 20:44:47 +00:00
lauri a663efd39e Create directories and set selinux context for certidude request 2017-03-26 17:40:39 +00:00
lauri 77db728294 Fix attribute API call whitelist handling 2017-03-26 16:58:29 +00:00
lauri 13db28aaac Add xattr package dependency for Travis 2017-03-26 10:16:22 +00:00
lauri 32356013fd Correct configuration file tagging section name 2017-03-26 10:12:08 +00:00
lauri f806545bee Use filesystem extended attribute user.xdg.tags for tags, move leases to user.lease namespace 2017-03-26 10:09:18 +00:00
lauri 1813056fc7 Move leases and tagging backend to filesystem extended attributes 2017-03-26 00:10:09 +00:00
lauri 79aa1e18c0 Add explicit renewal flag for certiude request 2017-03-13 19:47:58 +02:00
lauri 7b1dae0901 Renew certificate only when 25% of certificate lifetime remains 2017-03-13 19:42:21 +02:00
lauri b3185bbbf4 Attempt to increase test code coverage 2017-03-13 17:54:33 +02:00
lauri 4fc8fbb287 Run test only once 2017-03-13 17:31:32 +02:00
lauri 2f666d5943 Add missing dependency python-dateutil 2017-03-13 17:24:59 +02:00
lauri 7eb8378562 Attempt to fix tests 2017-03-13 17:20:41 +02:00
lauri 06010ceaf3 Refactor 
* Remove PyOpenSSL based wrapper classes
* Remove unused API calls
* Add certificate renewal via X-Renewal-Signature header
* Remove (extended) key usage handling
* Clean up OpenVPN and nginx server setup code
* Use UDP port 51900 for OpenVPN by default
* Add basic auth fallback for iOS in addition to Android
* Reduce complexity
 2017-03-13 11:42:58 +00:00
lauri d1aa2f2073 Merge branch 'master' of github.com:laurivosandi/certidude 2017-02-09 17:03:18 +00:00
lauri 4eed940a66 Clean up PKCS#12 generation 2017-02-09 17:02:33 +00:00
lauri dae282973e Passphraseless PKCS#12 doesn't play well with Firefox 2017-02-09 16:59:01 +00:00
lauri 94757cf25c Conform to RFC 5280, remove unused variable and a comment 2017-02-09 14:16:01 +00:00
lauri bef97eddab Update requirements.txt 2017-02-08 23:22:41 +02:00
lauri b0e7ad9540 Fix mailbox configuration in the web interface 2017-02-08 20:22:26 +00:00
lauri 2a8109704a Refactor 
* Remove given name and surname attributes because of issues with OpenVPN Connect
* Remove e-mail attribute because of no reliable method of deriving usable address
* Remove organizational unit attribute
* Don't overwrite Kerberos cronjob during certidude setup authority
* Enforce path_length=0 for disabling intermediate CA-s
* Remove SAN attributes
* Add configuration options for outbox sender name and address
* Use common name attribute to derive signature flags
* Use distinct pub/sub URL-s for long poll and event source
 2017-02-07 22:07:21 +00:00
lauri 703970c1d3 Add Mac device identifier string for bundles 2017-02-02 09:44:58 +00:00
lauri 9d29ff74be Add timeago plugin for fuzzy timestamps 2017-01-30 22:59:43 +00:00
lauri 6c1d0bfae9 More fixes to make client work on Mac OS X 2017-01-30 18:12:27 +00:00
lauri 34e8fb9c8c Make Kerberos keytab handling more universal 2017-01-30 17:48:30 +00:00
lauri 9c80c7c2c3 Add OpenVPN client template 2017-01-30 16:36:22 +00:00
lauri 0bca61e61f Add preliminary LDAP fallback support for Kerberos protected API calls 2017-01-30 07:04:05 +00:00