lauri
/
certidude
mirror of https://github.com/laurivosandi/certidude
1
0
Fork 0
Code Issues Activity
435 Commits 2 Branches 0 Tags 18 MiB
Commit Graph

66 Commits

Author SHA1 Message Date
Lauri Võsandi bfdd8c4887 Several updates #3 
* Move SessionResource and CertificateAuthorityResource to api/session.py
* Log browser user agent for logins
* Remove static sink from backend, nginx always serves static now
* Don't emit 'attribute-update' event if no attributes were changed
* Better CN extraction from DN during lease update
* Log user who deleted request
* Remove long polling CRL fetch API call and relevant test
* Merge auth decorators ldap_authenticate, kerberos_authenticate, pam_authenticate
* Add 'kerberos subnets' to distinguish authentication method
* Add 'admin subnets' to filter traffic to administrative API calls
* Highlight recent log events
* Links to switch between 2, 3 and 4 column layouts in the dashboard
* Restored certidude client snippets in request dialog
* Various bugfixes, improved log messages
 2018-05-04 08:55:49 +00:00
Lauri Võsandi 4e4b551cc2 Several updates #2 
* Reverse RDN components for all certs
* Less side effects in unittests
* Split help dialog shell snippets into separate files
* Restore 'admin subnets' config option
* Embedded subnets, IKE and ESP proposals now configurable in builder.conf
* Use expr instead of bc for math operations in shell
* Better frontend support for Let's Encrypt certificates
 2018-05-02 08:11:01 +00:00
Lauri Võsandi 5e9251f365 Several updates 
* Subnets configuration option for Kerberos machine enrollment
* Configurable script snippets via [service] configuration section
* Preliminary revocation reason support
* Improved signature profile support
* Add domain components to DN to distinguish certificate CN's namespace
* Image builder improvements, add Elliptic Curve support
* Added GetCACaps operation and more digest algorithms for SCEP
* Generate certificate and CRL serial from timestamp (64+32bits) and random bytes (56bits)
* Move client storage pool to /etc/certidude/authority/
* Cleanups & bugfixes
 2018-04-27 07:48:15 +00:00
Lauri Võsandi 94e5f72566 Migrate signature profiles to separate config file 2018-04-16 12:13:54 +00:00
Lauri Võsandi 501493ff12 ui: Improved snippets, toggle visibility for OCSP and CRL snippets 2018-04-13 09:53:51 +00:00
Lauri Võsandi 577962e09b Several improvements 
* Add EC support
* Make token form toggleable
* Make client certificates compatible with iOS native IKEv2
* Fix OU for self-enroll
* Improved sample scripts in web UI
 2018-04-09 16:25:03 +03:00
Lauri Võsandi 1c49626f50 Sevral bugfixes 2018-03-03 13:54:31 +00:00
Priit Laes f6c0e1ae85 api: __init__: Drop unused imports and fix broken import 2018-02-03 14:05:02 +02:00
Priit Laes 4580663608 api: Create common AuthorityHandler class with authority attribute 2018-02-03 14:02:23 +02:00
Priit Laes f7d138e303 api: token: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 7d514a3bc6 api: tag: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 4e50ddfc54 api: signed: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 29f3e1fce9 api: script: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 1cfb1b3293 api: scep: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 239538371f api: revoked: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 916afba685 api: request: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 7f2729e6f4 api: ocsp: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes be454d7a65 api: lease: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 937c81bd5f api: bootstrap: drop usage of global authority import 2018-02-03 14:02:23 +02:00
Priit Laes 863deafa59 api: attrib: drop usage of global authority import 2018-02-03 12:37:06 +02:00
Lauri Võsandi 5cb7f89c1b Bugfixes, OU support and image builder fixes 2018-01-26 14:03:13 +02:00
Lauri Võsandi fba8f5d776 Integrate LEDE image builder 2018-01-03 22:17:35 +00:00
Lauri Võsandi 59bedc1f16 Major refactor 
* Migrate to Python 3
* Update token generator mechanism
* Switch to Bootstrap 4
* Switch from Iconmonstr to Font Awesome icons
* Rename default CA common name to "Certidude at ca.example.lan"
* Add self-enroll for the TLS server certificates
* TLS client auth for lease updating
* Compile assets from npm packages to /var/lib/certidude/ca.example.lan/assets
 2017-12-30 14:00:19 +00:00
Lauri Võsandi 509f7bfaa8 Migrate from cryptography.io to oscrypto 2017-08-16 20:25:16 +00:00
Lauri Võsandi 789d80d712 api: Save enrollment IP address 2017-08-10 00:45:43 +03:00
Lauri Võsandi 9008744c48 api: Make logger use unicode literals 2017-07-08 08:56:01 +00:00
Lauri Võsandi a48331a9cb tests: Add test for machine attribute updates 2017-07-07 21:07:25 +00:00
Lauri Võsandi e25c774fa3 Bugfixes and test for SCEP 2017-07-05 21:22:02 +00:00
Lauri Võsandi 9b5511212e Several changes 
* OCSP workaround for StrongSwan
* Machine attributes framework
* Scripting support
* Default to nginx frontend
 2017-07-05 18:22:03 +03:00
Lauri Võsandi 5d48abe973 api: Preliminary OCSP support 2017-05-25 22:20:45 +03:00
Lauri Võsandi 5ae872e1ea api: Add preliminary SCEP support 2017-05-18 22:29:49 +03:00
Lauri Võsandi b77a427949 api: Submit inner and outer IP address when updating lease 2017-05-08 20:33:20 +00:00
Lauri Võsandi b1dd6f0093 tests: Checks for /etc/cron.hourly/certidude 2017-05-07 19:51:40 +00:00
Lauri Võsandi 71e77154d7 tests: Preliminary tests for Kerberos/LDAP auth 2017-05-07 19:11:24 +00:00
Lauri Võsandi b19e163a82 tests: Attempt to set up nchan as part of unittests 2017-05-06 21:07:41 +00:00
Lauri Võsandi de1d182320 Add API call for rendering scripts, bugfixes 2017-05-04 17:56:53 +00:00
Lauri Võsandi ba678e4b29 api: Remove unused event_source decorator 2017-05-04 00:24:25 +03:00
Lauri Võsandi 189c604832 tests: Better code coverage 2017-05-03 21:04:34 +00:00
Lauri Võsandi 649863a77e tests: Handle forking 2017-05-03 07:04:52 +00:00
Lauri Võsandi a9c29d2fbb tests: Improvements 2017-05-01 22:41:41 +00:00
Lauri Võsandi 5ddbf87ed2 Add test for fetching logs 2017-04-26 00:10:12 +03:00
Lauri Võsandi b867eee67e Add more API tests for lease, attribs etc 2017-04-25 23:32:21 +03:00
Lauri Võsandi 7651c220c8 Remove unused import 2017-04-22 06:04:55 +00:00
Lauri Võsandi 0344141faf Add token based auth for profiles 2017-04-21 21:22:08 +00:00
Lauri Võsandi 9a793088c6 Use local MTA for sending e-mail 2017-04-21 16:58:01 +00:00
Lauri Võsandi 52d35012a4 Various fixes 2017-04-13 20:30:56 +00:00
Lauri Võsandi 09724e04dc Add preliminary bootstrap API call 2017-04-12 13:21:49 +00:00
Lauri Võsandi 90b663ce26 Add file based rotating log handler 2017-04-04 05:02:08 +00:00
Lauri Võsandi f806545bee Use filesystem extended attribute user.xdg.tags for tags, move leases to user.lease namespace 2017-03-26 10:09:18 +00:00
Lauri Võsandi 1813056fc7 Move leases and tagging backend to filesystem extended attributes 2017-03-26 00:10:09 +00:00