4348458d30
cli: Add support for /etc/certidude/{client.conf.d,services.conf.d}
2018-05-04 09:55:01 +03:00
root
77c6fc0881
Fix command ordering for provisioning
2018-05-02 08:25:23 +00:00
4e4b551cc2
Several updates #2
...
* Reverse RDN components for all certs
* Less side effects in unittests
* Split help dialog shell snippets into separate files
* Restore 'admin subnets' config option
* Embedded subnets, IKE and ESP proposals now configurable in builder.conf
* Use expr instead of bc for math operations in shell
* Better frontend support for Let's Encrypt certificates
2018-05-02 08:11:01 +00:00
5e9251f365
Several updates
...
* Subnets configuration option for Kerberos machine enrollment
* Configurable script snippets via [service] configuration section
* Preliminary revocation reason support
* Improved signature profile support
* Add domain components to DN to distinguish certificate CN's namespace
* Image builder improvements, add Elliptic Curve support
* Added GetCACaps operation and more digest algorithms for SCEP
* Generate certificate and CRL serial from timestamp (64+32bits) and random bytes (56bits)
* Move client storage pool to /etc/certidude/authority/
* Cleanups & bugfixes
2018-04-27 07:48:15 +00:00
94e5f72566
Migrate signature profiles to separate config file
2018-04-16 12:13:54 +00:00
b9aaec7fa6
Migrate renewal to mutually authenticated TLS connection
2018-04-15 19:27:47 +00:00
1493c0f4a0
api: Check keypair algorithm compatbility during request submission
2018-04-13 13:11:48 +00:00
d7df17dc2c
Install 'attr' for authority and disable interactive dialogs for apt
2018-04-13 12:42:54 +00:00
501493ff12
ui: Improved snippets, toggle visibility for OCSP and CRL snippets
2018-04-13 09:53:51 +00:00
a0e263385b
Fix certificate serial numbering
2018-04-13 07:57:49 +00:00
ffd1281b83
ocsp: Add EC support
2018-04-13 07:56:05 +00:00
6150add67f
tests: Output stdout/stderr
2018-04-10 19:03:15 +03:00
a790df593e
tests: Fix package install/import ordering issues
2018-04-10 10:05:08 +00:00
dbbcec6d64
tests: Fix several issues with signature profiles
2018-04-10 09:29:05 +00:00
360f22ab13
tests: Disable NPM's HTTP for Travis, due to old ca-certificates package
2018-04-10 09:28:56 +00:00
d911e5da33
config: Add 'mail suffix' for POSIX accounts to derive e-mail
2018-04-10 09:28:47 +00:00
1bf3298a21
doc: Add GCM for LEDE instructions
2018-04-09 16:26:18 +03:00
17dd3e95b2
Add jinja2 as dependency
2018-04-09 16:25:51 +03:00
27ded33cc6
Open token URL in a new window/tab
2018-04-09 16:25:39 +03:00
3c27f333fd
Cleaned up LEDE image builder scripts
2018-04-09 16:25:33 +03:00
577962e09b
Several improvements
...
* Add EC support
* Make token form toggleable
* Make client certificates compatible with iOS native IKEv2
* Fix OU for self-enroll
* Improved sample scripts in web UI
2018-04-09 16:25:03 +03:00
9c6872a949
cli: Add $HOSTNAME option for common name config option of client
2018-03-22 11:15:11 +02:00
1c49626f50
Sevral bugfixes
2018-03-03 13:54:31 +00:00
a46ffcba35
Add PowerShell script for requesting certificates
2018-03-03 11:37:43 +00:00
a1f7b5fca5
Merge pull request #40 from plaes/authority-rework
...
Authority refactor
2018-02-03 17:13:44 +02:00
5519f63c0c
travis: Use sudo -H when calling pip
2018-02-03 14:58:29 +02:00
61de861702
travis: Use suggested syntax for caching pip data
2018-02-03 14:58:29 +02:00
7b6175ab37
api.utils.firewall: Drop click usage and remove unneeded imports
2018-02-03 14:43:43 +02:00
2f0569abb4
Move certidude.firewall to api.utils.firewall where it belongs
2018-02-03 14:43:43 +02:00
2eb93e6698
api: scep: Drop unused imports
2018-02-03 14:05:02 +02:00
5439d5560a
api: request: Drop unused imports
2018-02-03 14:05:02 +02:00
167d0cbdfd
api: ocsp: Drop unused imports
2018-02-03 14:05:02 +02:00
8626d78b5c
api: ocsp: Fix logger
2018-02-03 14:05:02 +02:00
f6c0e1ae85
api: __init__: Drop unused imports and fix broken import
2018-02-03 14:05:02 +02:00
d476998c9e
api: log: Drop unused imports
2018-02-03 14:05:02 +02:00
912f5766e4
api: lease: Drop unused imports
2018-02-03 14:05:02 +02:00
1c6043c6c9
api: script: Drop unused imports
2018-02-03 14:05:02 +02:00
a15bdd51db
api: revoked: Drop unused imports
2018-02-03 14:05:02 +02:00
bfcd8ef95b
api: tag: Drop unused imports
2018-02-03 14:05:02 +02:00
f90a19deeb
api: token: Drop unused imports
2018-02-03 14:05:02 +02:00
82b8185bc5
api: bootstrap: Drop unused imports
2018-02-03 14:05:02 +02:00
b82a38edee
api: attrib: Drop unused imports
2018-02-03 14:05:02 +02:00
c9dd058d75
api: Use common AuthorityResource where possible
2018-02-03 14:05:02 +02:00
4580663608
api: Create common AuthorityHandler class with authority attribute
2018-02-03 14:02:23 +02:00
f7d138e303
api: token: drop usage of global authority import
2018-02-03 14:02:23 +02:00
7d514a3bc6
api: tag: drop usage of global authority import
2018-02-03 14:02:23 +02:00
4e50ddfc54
api: signed: drop usage of global authority import
2018-02-03 14:02:23 +02:00
29f3e1fce9
api: script: drop usage of global authority import
2018-02-03 14:02:23 +02:00
1cfb1b3293
api: scep: drop usage of global authority import
2018-02-03 14:02:23 +02:00
239538371f
api: revoked: drop usage of global authority import
2018-02-03 14:02:23 +02:00
