Commit Graph

122 Commits

Author SHA1 Message Date
Lauri Võsandi 59bedc1f16 Major refactor
* Migrate to Python 3
* Update token generator mechanism
* Switch to Bootstrap 4
* Switch from Iconmonstr to Font Awesome icons
* Rename default CA common name to "Certidude at ca.example.lan"
* Add self-enroll for the TLS server certificates
* TLS client auth for lease updating
* Compile assets from npm packages to /var/lib/certidude/ca.example.lan/assets
2017-12-30 14:00:19 +00:00
Lauri Võsandi c45a5df773 Remove unused setproctitle import 2017-08-16 23:30:42 +03:00
Lauri Võsandi 509f7bfaa8 Migrate from cryptography.io to oscrypto 2017-08-16 20:25:16 +00:00
Lauri Võsandi bce906db36 Migrate authority setup to certbuilder 2017-07-29 20:55:46 +00:00
Lauri Võsandi 03b9778170 Better starttup/shutdown notification 2017-07-11 18:57:19 +00:00
Lauri Võsandi 9008744c48 api: Make logger use unicode literals 2017-07-08 08:56:01 +00:00
Lauri Võsandi 39363a57c7 tests: More coverage 2017-07-06 09:29:02 +00:00
Lauri Võsandi e25c774fa3 Bugfixes and test for SCEP 2017-07-05 21:22:02 +00:00
Lauri Võsandi 9b5511212e Several changes
* OCSP workaround for StrongSwan
* Machine attributes framework
* Scripting support
* Default to nginx frontend
2017-07-05 18:22:03 +03:00
Lauri Võsandi d08a3f9f92 cli: Fix `certidude request` dependency handling 2017-06-04 14:48:28 +00:00
Lauri Võsandi 0a98b3f82e Add tests for OCSP, several bugfixes 2017-06-04 14:19:29 +00:00
Lauri Võsandi 61aa54695e cli: Migrate client side to oscrypto 2017-05-27 21:17:21 +03:00
Lauri Võsandi 5d48abe973 api: Preliminary OCSP support 2017-05-25 22:20:45 +03:00
Lauri Võsandi a5ad9238a1 cli: Lazier import for pwd 2017-05-12 20:52:25 +00:00
Lauri Võsandi eecfbee384 tests: Fix signer shutdown and add tests for event source 2017-05-09 09:48:24 +00:00
Lauri Võsandi 09f5b11505 tests: Add tests for machine keytab auth 2017-05-08 16:25:59 +00:00
Lauri Võsandi 17c4e157e7 tests: Attempt to build for trusty and xenial both 2017-05-08 10:27:02 +00:00
Lauri Võsandi 71e77154d7 tests: Preliminary tests for Kerberos/LDAP auth 2017-05-07 19:11:24 +00:00
Lauri Võsandi 60a0f2ba7c tests: Set up nchan as part of certidude setup authority 2017-05-06 21:35:02 +00:00
Lauri Võsandi b19e163a82 tests: Attempt to set up nchan as part of unittests 2017-05-06 21:07:41 +00:00
Lauri Võsandi de1d182320 Add API call for rendering scripts, bugfixes 2017-05-04 17:56:53 +00:00
Lauri Võsandi 94944e37f1 tests: Better coverage for tagging tests 2017-05-04 09:14:47 +00:00
Lauri Võsandi 68f6b9f6f6 tests: Attempt to install NetworkManager 2017-05-04 06:55:26 +00:00
Lauri Võsandi 505fa9d557 tests: Fix NetworkManager setup tests 2017-05-04 06:40:47 +00:00
Lauri Võsandi aeb5d81aa6 tests: Generate DH params file in single location 2017-05-03 21:12:51 +00:00
Lauri Võsandi 189c604832 tests: Better code coverage 2017-05-03 21:04:34 +00:00
Lauri Võsandi 47aded48d5 tests: Add e-mailing and more cli commands 2017-05-03 14:42:37 +00:00
Lauri Võsandi 649863a77e tests: Handle forking 2017-05-03 07:04:52 +00:00
Lauri Võsandi 9a7b806ff6 tests: Fix /run/certidude permissions 2017-05-01 23:06:45 +00:00
Lauri Võsandi 58491e7933 tests: Cleanups 2017-05-01 22:32:55 +00:00
Lauri Võsandi 986953f10f tests: Prevent nginx setup on Travis 2017-05-01 18:45:15 +00:00
Lauri Võsandi f7a27c6044 tests: More verbose output while setting up CA 2017-05-01 18:06:47 +00:00
Lauri Võsandi e0eb3ee471 tests: Create certidude user in advance 2017-05-01 17:56:10 +00:00
Lauri Võsandi b0683b268d Attempt to run client as part of unittests 2017-05-01 16:20:50 +00:00
Lauri Võsandi cc4f13086e Improve init/openvpn handler
* Create systemd service for signaling OpenVPN client after suspend
* Use tun instead of tap
* Update DNS server/domain upon (dis)connect
* Include necessary templates
2017-04-29 22:09:31 +03:00
Lauri Võsandi 5ddbf87ed2 Add test for fetching logs 2017-04-26 00:10:12 +03:00
Lauri Võsandi b867eee67e Add more API tests for lease, attribs etc 2017-04-25 23:32:21 +03:00
Lauri Võsandi d5edbe50c5 Token mechanism fixes 2017-04-24 20:33:55 +03:00
Lauri Võsandi 029ee357fb Token mechanism fixes:
* Save token secret to config
* OpenVPN profile fixes for Ubuntu 16.04
* Raise correct exceptions for invalid tokens
* Display token expiration time in local time
2017-04-22 14:10:54 +03:00
Lauri Võsandi 9a793088c6 Use local MTA for sending e-mail 2017-04-21 16:58:01 +00:00
Lauri Võsandi 5e812f5194 Fixes 2017-04-20 05:20:10 +00:00
Lauri Võsandi 772886e4d4 Fix typo 2017-04-14 20:32:59 +03:00
Lauri Võsandi ca0386b649 StrongSwan gateway setup script cleanups 2017-04-14 20:21:31 +03:00
Lauri Võsandi 91f8f09854 StrongSwan client setup fixes 2017-04-14 02:49:11 +03:00
Lauri Võsandi 8bf9ebfebb Merge branch 'master' of github.com:laurivosandi/certidude 2017-04-14 01:50:33 +03:00
Lauri Võsandi a3adba02a5 Fix CRL path for configuration generators 2017-04-14 01:50:04 +03:00
Lauri Võsandi 216af460cf Better system keytab checking for client 2017-04-14 01:49:32 +03:00
Lauri Võsandi 1c5913ee3b Add dynamic package installation via decorators 2017-04-13 22:30:20 +00:00
Lauri Võsandi 02b2f041cc Clean up dependencies and Travis 2017-04-13 20:52:09 +00:00
Lauri Võsandi 52d35012a4 Various fixes 2017-04-13 20:30:56 +00:00