11 Commits

Author	SHA1	Message	Date
Lauri Võsandi	5e9251f365	Several updates ... * Subnets configuration option for Kerberos machine enrollment * Configurable script snippets via [service] configuration section * Preliminary revocation reason support * Improved signature profile support * Add domain components to DN to distinguish certificate CN's namespace * Image builder improvements, add Elliptic Curve support * Added GetCACaps operation and more digest algorithms for SCEP * Generate certificate and CRL serial from timestamp (64+32bits) and random bytes (56bits) * Move client storage pool to /etc/certidude/authority/ * Cleanups & bugfixes	2018-04-27 07:48:15 +00:00
Priit Laes	2f0569abb4	Move certidude.firewall to api.utils.firewall where it belongs	2018-02-03 14:43:43 +02:00
Priit Laes	2eb93e6698	api: scep: Drop unused imports	2018-02-03 14:05:02 +02:00
Priit Laes	c9dd058d75	api: Use common AuthorityResource where possible	2018-02-03 14:05:02 +02:00
Priit Laes	1cfb1b3293	api: scep: drop usage of global authority import	2018-02-03 14:02:23 +02:00
Lauri Võsandi	098aa5657d	tests: More explicit errors for OCSP and SCEP	2018-01-05 12:42:14 +00:00
Lauri Võsandi	59bedc1f16	Major refactor ... * Migrate to Python 3 * Update token generator mechanism * Switch to Bootstrap 4 * Switch from Iconmonstr to Font Awesome icons * Rename default CA common name to "Certidude at ca.example.lan" * Add self-enroll for the TLS server certificates * TLS client auth for lease updating * Compile assets from npm packages to /var/lib/certidude/ca.example.lan/assets	2017-12-30 14:00:19 +00:00
Lauri Võsandi	509f7bfaa8	Migrate from cryptography.io to oscrypto	2017-08-16 20:25:16 +00:00
Lauri Võsandi	e25c774fa3	Bugfixes and test for SCEP	2017-07-05 21:22:02 +00:00
Lauri Võsandi	9b5511212e	Several changes ... * OCSP workaround for StrongSwan * Machine attributes framework * Scripting support * Default to nginx frontend	2017-07-05 18:22:03 +03:00
Lauri Võsandi	5ae872e1ea	api: Add preliminary SCEP support	2017-05-18 22:29:49 +03:00