lauri/certidude
1
0
Fork 0
mirror of https://github.com/laurivosandi/certidude synced 2026-09-19 05:48:18 +00:00
Code Issues Activity
175 Commits 2 Branches 0 Tags
bef97eddab05e996cb3c35bbdbd69bd2a428f435
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
lauri bef97eddab Update requirements.txt 2017-02-08 23:22:41 +02:00
lauri b0e7ad9540 Fix mailbox configuration in the web interface 2017-02-08 20:22:26 +00:00
lauri 2a8109704a Refactor 
* Remove given name and surname attributes because of issues with OpenVPN Connect
* Remove e-mail attribute because of no reliable method of deriving usable address
* Remove organizational unit attribute
* Don't overwrite Kerberos cronjob during certidude setup authority
* Enforce path_length=0 for disabling intermediate CA-s
* Remove SAN attributes
* Add configuration options for outbox sender name and address
* Use common name attribute to derive signature flags
* Use distinct pub/sub URL-s for long poll and event source
 2017-02-07 22:07:21 +00:00
lauri 703970c1d3 Add Mac device identifier string for bundles 2017-02-02 09:44:58 +00:00
lauri 9d29ff74be Add timeago plugin for fuzzy timestamps 2017-01-30 22:59:43 +00:00
lauri 6c1d0bfae9 More fixes to make client work on Mac OS X 2017-01-30 18:12:27 +00:00
lauri 34e8fb9c8c Make Kerberos keytab handling more universal 2017-01-30 17:48:30 +00:00
lauri 9c80c7c2c3 Add OpenVPN client template 2017-01-30 16:36:22 +00:00
lauri 0bca61e61f Add preliminary LDAP fallback support for Kerberos protected API calls 2017-01-30 07:04:05 +00:00
lauri 4ae40c5d45 Add long poll support for CRL API call 2017-01-30 06:29:01 +00:00
lauri c979d73bec Fix typos for local time conversion 2017-01-30 06:27:12 +00:00
lauri 4c1e72709c Use local time for connected_since 2017-01-26 22:31:06 +00:00
lauri 108c2bc017 Clean up server.conf template 2017-01-26 22:14:56 +00:00
lauri 089d6b36b9 Hide tagging UI elements if tagging is disabled 2017-01-26 22:14:30 +00:00
lauri 5d5a24096c Merge branch 'master' of github.com:laurivosandi/certidude 2017-01-26 21:59:37 +00:00
lauri 1ec5ad3b7c Add openvpn-status.log support 2017-01-26 21:59:12 +00:00
lauri 6221fe9c00 Prompt for password when invalid password is entered 2017-01-26 15:22:02 +02:00
lauri ef72cb70cd Fixes for testing server as regular user 2017-01-26 15:11:04 +02:00
lauri dc9e01b4ad Merge branch 'master' of github.com:laurivosandi/certidude 2017-01-26 13:00:21 +02:00
lauri 93abceb9bd Update README 2017-01-26 12:57:41 +02:00
lauri 372e71c175 Use TUN for network-manager/openvpn service 2017-01-26 12:55:26 +02:00
lauri 1925207a6d Add OpenVPN bundle generation 2017-01-25 11:34:08 +00:00
lauri cca9d2ab2d Refactor LDAP authentication 
* ldap uri can be specified in /etc/certidude/server.conf now
* /etc/ldap/ldap.conf is ignored
 2017-01-25 09:43:19 +00:00
lauri 175f7f5d53 Fixes for LDAP access using machine credentials 2017-01-20 10:56:46 +00:00
lauri 4c69efbf87 Rely on nunjucks files provided by npm 2017-01-20 10:51:45 +00:00
lauri e2f7c8d1d6 Trigger nmcli con reload after config file creation 2017-01-10 15:09:52 +02:00
lauri b3a45cf2ab Expose insecure flag for turning off HTTPS 2017-01-10 15:01:16 +02:00
lauri 86244d294b Reorder and reformat usecases 2016-09-18 19:06:10 +03:00
lauri ece565c451 Attempt to fix Codecov 2016-09-18 18:52:51 +03:00
lauri d68a9acac2 Work around Travis' long hostnames in const.py instead 2016-09-18 18:46:11 +03:00
lauri 00c0bdfb52 Fix indent/nesting in .travis.yml 2016-09-18 18:39:22 +03:00
lauri 934b67c94f Set shorter hostname for Travis 2016-09-18 18:36:08 +03:00
lauri e86f9d4e3b Remove disallowed packages 2016-09-18 18:32:34 +03:00
lauri f19cf4652e Clean up tests 2016-09-18 18:30:31 +03:00
lauri 65b401538e Move to container based Travis 2016-09-18 17:47:11 +03:00
lauri 6f99c32c38 Describe usecases 2016-09-18 17:27:34 +03:00
lauri fab52dca76 Add request submission from web interface 2016-09-18 16:25:52 +03:00
lauri 2590340355 Remove generated templates.js, add graceful fallback when not generated 2016-09-18 16:21:07 +03:00
lauri e56b1b3f2b Upgrade to nunjucks v2.5.2 2016-09-18 15:11:23 +03:00
lauri b8cb12ecd8 Improve installation instructions 2016-09-18 14:33:13 +03:00
lauri 23d8942ffe Add fallbacks for e-mail handling if outbox is not defined 2016-09-18 14:32:39 +03:00
lauri 1b04a848e3 Improve Unicode handling in bundle generation 2016-09-18 14:32:14 +03:00
lauri 9cf5e298e8 Fix systemd service template 2016-09-18 00:21:24 +03:00
lauri f448aefc08 Sort requirements.txt and remove duplicates 2016-09-18 00:05:50 +03:00
lauri b4d006227a Refactor codebase 
* Replace PyOpenSSL with cryptography.io
* Rename constants to const
* Drop support for uwsgi
* Use systemd to launch certidude server
* Signer automatically spawned as part of server
* Update requirements.txt
* Clean up certidude client configuration handling
* Add automatic enroll with Kerberos machine cerdentials
 2016-09-18 00:00:14 +03:00
lauri 15858083b3 Use UTC for log entries 2016-04-05 15:30:50 +03:00
lauri c33da46f19 Push server fixes 2016-04-05 15:02:05 +03:00
lauri 7012f5b365 Make user certificate enrollment configurable 2016-04-01 01:55:51 +03:00
lauri fa27253b50 Add 'certidude users' command for listing user accounts 2016-04-01 00:01:58 +03:00
lauri 816cf32353 Include robots.txt in MANIFEST.in 2016-04-01 00:00:24 +03:00
lauri ff2e983711 ui: Update CRL fetching command example 2016-03-30 22:06:15 +03:00
lauri ec2dea7a13 cli: Authority setup script fixes 2016-03-30 22:05:32 +03:00
lauri 456fe586c3 Add revocation list JSON serialization 2016-03-30 22:00:18 +03:00
lauri 5bdf986b47 cli: Send Accept: application/x-pem-file while downloading CRL 2016-03-29 23:39:19 +03:00
lauri 833fb82354 Upload 0.1.21 to PyPI 2016-03-29 22:19:55 +03:00
lauri d2a259b887 Merge authority setup and production setup 2016-03-29 22:03:27 +03:00
lauri a094db794b cli: Fix extended key usage flags for authority setup script 2016-03-29 19:43:50 +03:00
lauri c644b065ef Migrate authority setup from PyOpenSSL to cryptography.io 2016-03-29 19:29:06 +03:00
lauri af60fd8047 cli: Fix authority setup script 2016-03-29 18:37:28 +03:00
lauri 476a312b4e ui: Fix autosign subnets listing 2016-03-29 15:47:00 +03:00
lauri 09a67718ab Expose certificate and CRL lifetime via session API call 2016-03-29 15:43:34 +03:00
lauri d8f1e36ecf Reduce default CRL lifetime to 20min 2016-03-29 15:17:44 +03:00
lauri 6de010a411 Make /api/revoked conform to RFC5280 2016-03-29 13:28:58 +03:00
lauri 1475828899 Fix CRL distriution points and add authority information access extensions 2016-03-29 12:29:15 +03:00
lauri e721648328 Use common name instead of IP address as listening address for IPSec gateway 2016-03-29 12:28:10 +03:00
lauri 799b9e19c8 Use unicode literals for logging 2016-03-29 08:54:55 +03:00
lauri acc0e29109 Add AKID and SKID 2016-03-29 08:47:43 +03:00
lauri ff71ca42d7 Move GSSAPI credcache from authorization config section to accounts 2016-03-29 08:45:17 +03:00
lauri 22846327a0 Fix is_admin of PosixUserManager 2016-03-29 08:44:07 +03:00
lauri de42d97b59 Add $ssl_client_s_dn_cn for nginx config template 2016-03-29 08:28:48 +03:00
lauri f88a970e2a Attempt to fix CA test 2016-03-28 00:18:41 +03:00
lauri 8ca809b546 Remove dependency on particular version of configparser 2016-03-28 00:07:39 +03:00
lauri 9afafea833 Add sudo for Travis' apt-get 2016-03-28 00:04:03 +03:00
lauri 3d32de8cad Documentation fixes and attempt to fix Travis 2016-03-28 00:00:41 +03:00
lauri 925bc0ef9a Refactor users, add OpenVPN and mailing support 
* Add abstraction for user objects
* Mail authority admins about pending, revoked and signed certificates
* Add NetworkManager's OpenVPN plugin support
* Improve CRL support
* Refactor CSRF protection
* Update documentation
 2016-03-27 23:38:14 +03:00
lauri 811e6dbb08 Complete overhaul 
* Switch to Python 2.x due to lack of decent LDAP support in Python 3.x
* Add LDAP backend for authentication/authorization
* Add PAM backend for authentication
* Add getent backend for authorization
* Add preliminary CSRF protection
* Update icons
* Update push server documentation, use nchan from now on
* Add P12 bundle generation
* Add thin wrapper around Python's SQL connectors
* Enable mailing subsystem
* Add Kerberos TGT renewal cronjob
* Add HTTPS server setup commands for nginx
 2016-03-21 23:42:39 +02:00
lauri ffdab4d36d Update strongSwan leftupdown script 2016-03-01 13:52:10 +02:00
lauri d38a9a8103 Add preliminary PKCS#12 bundle generation 2016-03-01 11:01:53 +02:00
lauri 449dcea821 Add preliminary PAM authentication backend 2016-02-29 23:06:42 +02:00
lauri 4240d55fe4 Add preliminary Python 2.x support 2016-02-28 22:37:56 +02:00
lauri 5eed7cb6d9 ui: Add blue color for recently seen clients 2016-02-17 21:44:33 +02:00
lauri 489de4ec79 ui: Bundle template JavaScript 2016-02-17 16:16:00 +02:00
lauri 114e67ed6a api: Use nchan headers for pushing events 2016-02-17 16:15:06 +02:00
lauri b830ce7671 api: Fix exception includes 2016-01-25 11:19:08 +02:00
lauri 661e7608ef ui: Precompile nunjucks templates 2016-01-25 11:18:19 +02:00
lauri 7cb9f04972 Add routes for NetworkManager only if they have been specified 2016-01-15 18:09:03 +02:00
lauri 6bfa1ccf9c cli: Fix typo 2016-01-15 13:50:45 +02:00
lauri 589a31eb3d Sanitize configuration file section names 2016-01-15 13:48:24 +02:00
lauri 704523626b Rename spawn commands 2016-01-15 11:18:27 +02:00
lauri f2df17bb88 Refactor signature request submission 
Certidude client now reads configuration from
/etc/certidude/client.conf, submits CSR-s and
once signed configures services based on
/etc/certidude/services.conf
 2016-01-15 00:47:30 +02:00
lauri d8abde3d53 Refactor request submission 
API now properly distinguishes duplicate request from other requests with same common name.
 2016-01-14 11:02:57 +02:00
lauri aacf94bb28 Fix encoding error in duplicate request check 2016-01-14 10:44:26 +02:00
lauri 21c436ec88 Merge branch 'master' of https://github.com/laurivosandi/certidude 
Conflicts:
	certidude/cli.py
 2016-01-10 19:53:02 +02:00
lauri de08ba759d Release version 0.1.20 2016-01-10 19:51:54 +02:00
lauri 6a45592cd0 api: Fix CRL generation 2016-01-02 01:08:04 +02:00
lauri 0fb605ce27 api: Fix packaging 2016-01-02 01:06:30 +02:00
lauri 67c6a49dff api: Use uwsgi provided socket for nginx 2016-01-02 01:05:48 +02:00
lauri 1b50b8a371 cli: Fix group ownership for authority setup 2015-12-24 13:58:24 +00:00
lauri 8864af6072 Merge branch 'master' of github.com:laurivosandi/certidude 2015-12-23 14:49:00 +00:00
lauri 7f48476173 doc: Cleaned up nginx configration bits 2015-12-23 14:48:31 +00:00