1
0
mirror of https://github.com/laurivosandi/certidude synced 2024-09-28 21:11:42 +00:00
Commit Graph

30 Commits

Author SHA1 Message Date
b19e163a82 tests: Attempt to set up nchan as part of unittests 2017-05-06 21:07:41 +00:00
de1d182320 Add API call for rendering scripts, bugfixes 2017-05-04 17:56:53 +00:00
b0683b268d Attempt to run client as part of unittests 2017-05-01 16:20:50 +00:00
7225726d66 Add request submission API call tests 2017-04-25 16:04:11 +03:00
d5edbe50c5 Token mechanism fixes 2017-04-24 20:33:55 +03:00
029ee357fb Token mechanism fixes:
* Save token secret to config
* OpenVPN profile fixes for Ubuntu 16.04
* Raise correct exceptions for invalid tokens
* Display token expiration time in local time
2017-04-22 14:10:54 +03:00
0344141faf Add token based auth for profiles 2017-04-21 21:22:08 +00:00
9a793088c6 Use local MTA for sending e-mail 2017-04-21 16:58:01 +00:00
5e812f5194 Fixes 2017-04-20 05:20:10 +00:00
02482e8d79 Migrate to python-gssapi 2017-04-13 14:33:40 +00:00
09724e04dc Add preliminary bootstrap API call 2017-04-12 13:21:49 +00:00
32356013fd Correct configuration file tagging section name 2017-03-26 10:12:08 +00:00
1813056fc7 Move leases and tagging backend to filesystem extended attributes 2017-03-26 00:10:09 +00:00
06010ceaf3 Refactor
* Remove PyOpenSSL based wrapper classes
* Remove unused API calls
* Add certificate renewal via X-Renewal-Signature header
* Remove (extended) key usage handling
* Clean up OpenVPN and nginx server setup code
* Use UDP port 51900 for OpenVPN by default
* Add basic auth fallback for iOS in addition to Android
* Reduce complexity
2017-03-13 11:42:58 +00:00
2a8109704a Refactor
* Remove given name and surname attributes because of issues with OpenVPN Connect
* Remove e-mail attribute because of no reliable method of deriving usable address
* Remove organizational unit attribute
* Don't overwrite Kerberos cronjob during certidude setup authority
* Enforce path_length=0 for disabling intermediate CA-s
* Remove SAN attributes
* Add configuration options for outbox sender name and address
* Use common name attribute to derive signature flags
* Use distinct pub/sub URL-s for long poll and event source
2017-02-07 22:07:21 +00:00
1ec5ad3b7c Add openvpn-status.log support 2017-01-26 21:59:12 +00:00
1925207a6d Add OpenVPN bundle generation 2017-01-25 11:34:08 +00:00
cca9d2ab2d Refactor LDAP authentication
* ldap uri can be specified in /etc/certidude/server.conf now
* /etc/ldap/ldap.conf is ignored
2017-01-25 09:43:19 +00:00
b4d006227a Refactor codebase
* Replace PyOpenSSL with cryptography.io
* Rename constants to const
* Drop support for uwsgi
* Use systemd to launch certidude server
* Signer automatically spawned as part of server
* Update requirements.txt
* Clean up certidude client configuration handling
* Add automatic enroll with Kerberos machine cerdentials
2016-09-18 00:00:14 +03:00
7012f5b365 Make user certificate enrollment configurable 2016-04-01 01:55:51 +03:00
ec2dea7a13 cli: Authority setup script fixes 2016-03-30 22:05:32 +03:00
1475828899 Fix CRL distriution points and add authority information access extensions 2016-03-29 12:29:15 +03:00
ff71ca42d7 Move GSSAPI credcache from authorization config section to accounts 2016-03-29 08:45:17 +03:00
925bc0ef9a Refactor users, add OpenVPN and mailing support
* Add abstraction for user objects
* Mail authority admins about pending, revoked and signed certificates
* Add NetworkManager's OpenVPN plugin support
* Improve CRL support
* Refactor CSRF protection
* Update documentation
2016-03-27 23:38:14 +03:00
811e6dbb08 Complete overhaul
* Switch to Python 2.x due to lack of decent LDAP support in Python 3.x
* Add LDAP backend for authentication/authorization
* Add PAM backend for authentication
* Add getent backend for authorization
* Add preliminary CSRF protection
* Update icons
* Update push server documentation, use nchan from now on
* Add P12 bundle generation
* Add thin wrapper around Python's SQL connectors
* Enable mailing subsystem
* Add Kerberos TGT renewal cronjob
* Add HTTPS server setup commands for nginx
2016-03-21 23:42:39 +02:00
449dcea821 Add preliminary PAM authentication backend 2016-02-29 23:06:42 +02:00
4240d55fe4 Add preliminary Python 2.x support 2016-02-28 22:37:56 +02:00
de08ba759d Release version 0.1.20 2016-01-10 19:51:54 +02:00
fbbf7a320d Add preliminary support for logging
Current logging mechanism makes use of Python's logging module.
MySQL logging handler inserts log entries to MySQL server and
another logging handler is used to stream events to web interface
via nginx streaming push.
2015-12-13 15:11:22 +00:00
b788d701eb Refactor wrappers
Completely remove wrapper class for CA,
use certidude.authority module instead.
2015-12-12 22:39:17 +00:00