1
0
mirror of https://github.com/laurivosandi/certidude synced 2025-10-30 08:59:13 +00:00
Commit Graph

127 Commits

Author SHA1 Message Date
b0e7ad9540 Fix mailbox configuration in the web interface 2017-02-08 20:22:26 +00:00
2a8109704a Refactor
* Remove given name and surname attributes because of issues with OpenVPN Connect
* Remove e-mail attribute because of no reliable method of deriving usable address
* Remove organizational unit attribute
* Don't overwrite Kerberos cronjob during certidude setup authority
* Enforce path_length=0 for disabling intermediate CA-s
* Remove SAN attributes
* Add configuration options for outbox sender name and address
* Use common name attribute to derive signature flags
* Use distinct pub/sub URL-s for long poll and event source
2017-02-07 22:07:21 +00:00
703970c1d3 Add Mac device identifier string for bundles 2017-02-02 09:44:58 +00:00
4ae40c5d45 Add long poll support for CRL API call 2017-01-30 06:29:01 +00:00
c979d73bec Fix typos for local time conversion 2017-01-30 06:27:12 +00:00
4c1e72709c Use local time for connected_since 2017-01-26 22:31:06 +00:00
1ec5ad3b7c Add openvpn-status.log support 2017-01-26 21:59:12 +00:00
1925207a6d Add OpenVPN bundle generation 2017-01-25 11:34:08 +00:00
cca9d2ab2d Refactor LDAP authentication
* ldap uri can be specified in /etc/certidude/server.conf now
* /etc/ldap/ldap.conf is ignored
2017-01-25 09:43:19 +00:00
fab52dca76 Add request submission from web interface 2016-09-18 16:25:52 +03:00
1b04a848e3 Improve Unicode handling in bundle generation 2016-09-18 14:32:14 +03:00
b4d006227a Refactor codebase
* Replace PyOpenSSL with cryptography.io
* Rename constants to const
* Drop support for uwsgi
* Use systemd to launch certidude server
* Signer automatically spawned as part of server
* Update requirements.txt
* Clean up certidude client configuration handling
* Add automatic enroll with Kerberos machine cerdentials
2016-09-18 00:00:14 +03:00
7012f5b365 Make user certificate enrollment configurable 2016-04-01 01:55:51 +03:00
456fe586c3 Add revocation list JSON serialization 2016-03-30 22:00:18 +03:00
09a67718ab Expose certificate and CRL lifetime via session API call 2016-03-29 15:43:34 +03:00
6de010a411 Make /api/revoked conform to RFC5280 2016-03-29 13:28:58 +03:00
799b9e19c8 Use unicode literals for logging 2016-03-29 08:54:55 +03:00
925bc0ef9a Refactor users, add OpenVPN and mailing support
* Add abstraction for user objects
* Mail authority admins about pending, revoked and signed certificates
* Add NetworkManager's OpenVPN plugin support
* Improve CRL support
* Refactor CSRF protection
* Update documentation
2016-03-27 23:38:14 +03:00
811e6dbb08 Complete overhaul
* Switch to Python 2.x due to lack of decent LDAP support in Python 3.x
* Add LDAP backend for authentication/authorization
* Add PAM backend for authentication
* Add getent backend for authorization
* Add preliminary CSRF protection
* Update icons
* Update push server documentation, use nchan from now on
* Add P12 bundle generation
* Add thin wrapper around Python's SQL connectors
* Enable mailing subsystem
* Add Kerberos TGT renewal cronjob
* Add HTTPS server setup commands for nginx
2016-03-21 23:42:39 +02:00
4240d55fe4 Add preliminary Python 2.x support 2016-02-28 22:37:56 +02:00
b830ce7671 api: Fix exception includes 2016-01-25 11:19:08 +02:00
d8abde3d53 Refactor request submission
API now properly distinguishes duplicate request from other requests with same common name.
2016-01-14 11:02:57 +02:00
de08ba759d Release version 0.1.20 2016-01-10 19:51:54 +02:00
c59198887c api: Fixed API call for querying leases 2015-12-18 12:49:37 +00:00
da6600e2e9 api: Added signed certificate tagging mechanism 2015-12-16 17:41:49 +00:00
fbbf7a320d Add preliminary support for logging
Current logging mechanism makes use of Python's logging module.
MySQL logging handler inserts log entries to MySQL server and
another logging handler is used to stream events to web interface
via nginx streaming push.
2015-12-13 15:11:22 +00:00
b788d701eb Refactor wrappers
Completely remove wrapper class for CA,
use certidude.authority module instead.
2015-12-12 22:39:17 +00:00