lauri/certidude
1
0
Fork 0
mirror of https://github.com/laurivosandi/certidude synced 2026-09-19 05:48:18 +00:00
Code Issues Activity
359 Commits 2 Branches 0 Tags
d32ec224d7fb029855994075833e3a48e0c2d30b
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
lauri d32ec224d7 Install cryptography.io just for unittests 2017-08-16 21:08:20 +00:00
lauri c45a5df773 Remove unused setproctitle import 2017-08-16 23:30:42 +03:00
lauri 9745367ebd Add csrbuilder as dependency 2017-08-16 23:26:42 +03:00
lauri 509f7bfaa8 Migrate from cryptography.io to oscrypto 2017-08-16 20:25:16 +00:00
lauri 789d80d712 api: Save enrollment IP address 2017-08-10 00:45:43 +03:00
lauri 783bba3474 Add OpenWrt/LEDE integration guide 2017-08-09 16:18:32 +03:00
lauri f7d8e95aa8 tests: Fix /api/revoked check 2017-07-29 21:27:15 +00:00
lauri bce906db36 Migrate authority setup to certbuilder 2017-07-29 20:55:46 +00:00
lauri f069688a9a Add basic DoS prevention measures 2017-07-29 23:19:37 +03:00
lauri dc67e46010 Add OpenWrt/LEDE integration script 2017-07-13 17:36:52 +03:00
lauri 03b9778170 Better starttup/shutdown notification 2017-07-11 18:57:19 +00:00
lauri d44b6035c2 Embed OCSP responder URL in certificate 2017-07-08 12:08:39 +00:00
lauri 47d2d37684 Add missing import for setxattr 2017-07-08 12:08:23 +00:00
lauri 9008744c48 api: Make logger use unicode literals 2017-07-08 08:56:01 +00:00
lauri 1f1ca2c211 cli: Drop package management provided cryptography.io and falcon 2017-07-08 08:55:43 +00:00
lauri 486a5d3459 tests: Lazier import for xattr 2017-07-08 08:51:00 +00:00
lauri a48331a9cb tests: Add test for machine attribute updates 2017-07-07 21:07:25 +00:00
lauri 39363a57c7 tests: More coverage 2017-07-06 09:29:02 +00:00
lauri 34c72aaa9e tests: Fixes and better code coverage 2017-07-06 08:15:44 +00:00
lauri e25c774fa3 Bugfixes and test for SCEP 2017-07-05 21:22:02 +00:00
lauri 9b5511212e Several changes 
* OCSP workaround for StrongSwan
* Machine attributes framework
* Scripting support
* Default to nginx frontend
 2017-07-05 18:22:03 +03:00
lauri d08a3f9f92 cli: Fix certidude request dependency handling 2017-06-04 14:48:28 +00:00
lauri ecb1d9b3f3 Better fallback for FQDN detection 2017-06-04 14:33:47 +00:00
lauri 0a98b3f82e Add tests for OCSP, several bugfixes 2017-06-04 14:19:29 +00:00
lauri 61aa54695e cli: Migrate client side to oscrypto 2017-05-27 21:17:21 +03:00
lauri 5d48abe973 api: Preliminary OCSP support 2017-05-25 22:20:45 +03:00
lauri 5ae872e1ea api: Add preliminary SCEP support 2017-05-18 22:29:49 +03:00
lauri a5ad9238a1 cli: Lazier import for pwd 2017-05-12 20:52:25 +00:00
lauri f4901593e1 cli: Use variable name authority instead of server 2017-05-12 20:52:06 +00:00
lauri eecfbee384 tests: Fix signer shutdown and add tests for event source 2017-05-09 09:48:24 +00:00
lauri b77a427949 api: Submit inner and outer IP address when updating lease 2017-05-08 20:33:20 +00:00
lauri dfb90689db tests: Disable LDAP auth check for now 2017-05-08 16:49:45 +00:00
lauri 09f5b11505 tests: Add tests for machine keytab auth 2017-05-08 16:25:59 +00:00
lauri e27b3ff9d1 tests: Never verify TLS certfs for LDAP 2017-05-08 10:27:27 +00:00
lauri 17c4e157e7 tests: Attempt to build for trusty and xenial both 2017-05-08 10:27:02 +00:00
lauri 4e41655532 api: Better error message when confronted with NTLM 2017-05-08 10:26:11 +00:00
lauri 545febf3d0 tests: Cover LDAP auth and more 2017-05-07 22:14:58 +00:00
lauri a4a31ca2c6 Mailer always enabled 2017-05-07 20:49:58 +00:00
lauri f4d660d5eb tests: Make coverage xml ignore errors 2017-05-07 20:41:31 +00:00
lauri b1dd6f0093 tests: Checks for /etc/cron.hourly/certidude 2017-05-07 19:51:40 +00:00
lauri 8440cd840d tests: Fix race condition bugs 2017-05-07 19:29:07 +00:00
lauri 71e77154d7 tests: Preliminary tests for Kerberos/LDAP auth 2017-05-07 19:11:24 +00:00
lauri 60a0f2ba7c tests: Set up nchan as part of certidude setup authority 2017-05-06 21:35:02 +00:00
lauri b19e163a82 tests: Attempt to set up nchan as part of unittests 2017-05-06 21:07:41 +00:00
lauri de1d182320 Add API call for rendering scripts, bugfixes 2017-05-04 17:56:53 +00:00
lauri a75fb58cb5 tests: Lease and attribute API call fixes 2017-05-04 10:02:14 +00:00
lauri 8c8a3a9930 tests: Better tagging tests 2017-05-04 09:35:39 +00:00
lauri 94944e37f1 tests: Better coverage for tagging tests 2017-05-04 09:14:47 +00:00
lauri 2ffcc64d86 tests: Test CRL checks on client side 2017-05-04 07:38:49 +00:00
lauri 68f6b9f6f6 tests: Attempt to install NetworkManager 2017-05-04 06:55:26 +00:00
lauri 47d518e250 tests: Create /etc/NetworkManager/system-connections/ in advance 2017-05-04 06:47:53 +00:00
lauri 505fa9d557 tests: Fix NetworkManager setup tests 2017-05-04 06:40:47 +00:00
lauri 9922516d24 tests: Test request deletion and signing API calls 2017-05-03 21:54:08 +00:00
lauri ba678e4b29 api: Remove unused event_source decorator 2017-05-04 00:24:25 +03:00
lauri aeb5d81aa6 tests: Generate DH params file in single location 2017-05-03 21:12:51 +00:00
lauri 189c604832 tests: Better code coverage 2017-05-03 21:04:34 +00:00
lauri a5565439ab tests: Assume NetworkManager is installed 2017-05-03 14:50:10 +00:00
lauri 47aded48d5 tests: Add e-mailing and more cli commands 2017-05-03 14:42:37 +00:00
lauri 3586aee1d9 tests: Allow coverage to write output from forked processes 2017-05-03 07:13:24 +00:00
lauri 649863a77e tests: Handle forking 2017-05-03 07:04:52 +00:00
lauri 8f9da9c2f1 tests: Add test for certificate renewal 2017-05-02 06:11:28 +00:00
lauri 06b65444d5 tests: Another attempt to fix code coverage 2017-05-01 23:32:01 +00:00
lauri a168b19cf2 tests: Attempt to fix codecov 2017-05-01 23:11:46 +00:00
lauri 9a7b806ff6 tests: Fix /run/certidude permissions 2017-05-01 23:06:45 +00:00
lauri 60ff382d74 tests: More verbosity 2017-05-01 22:53:24 +00:00
lauri 86df98a117 tests: Attempt to install certidude system-wide 2017-05-01 22:47:21 +00:00
lauri a9c29d2fbb tests: Improvements 2017-05-01 22:41:41 +00:00
lauri 58491e7933 tests: Cleanups 2017-05-01 22:32:55 +00:00
lauri 3c8aef4fd2 tests: Better CA cert checks 2017-05-01 21:52:27 +00:00
lauri 1484ad7826 tests: Fix typo 2017-05-01 21:41:34 +00:00
lauri c60fd6ac9e tests: Add requests.get for static serving tests 2017-05-01 21:37:56 +00:00
lauri 227902b563 tests: More debugging info for CRL API calls 2017-05-01 21:19:28 +00:00
lauri be561cc52f tests: Add test for export_crl() function 2017-05-01 21:06:28 +00:00
lauri 128369f6f6 tests: More detailed error captures for API calls 2017-05-01 20:49:25 +00:00
lauri ffdcbcc41a tests: Attempt to catch CRL export errors 2017-05-01 20:40:22 +00:00
lauri e228963bd2 api: More detailed logging for CRL API call 2017-05-01 20:25:08 +00:00
lauri a754c1275d tests: More API call tests 2017-05-01 20:15:45 +00:00
lauri 451e2b2ad8 tests: Attempt to extract more information 2017-05-01 19:57:53 +00:00
lauri 9668fa549b tests: More checks for CRL validation 2017-05-01 19:18:50 +00:00
lauri 26876ed972 tests: Fixes 2017-05-01 18:53:28 +00:00
lauri 986953f10f tests: Prevent nginx setup on Travis 2017-05-01 18:45:15 +00:00
lauri 3b5ef8f45f tests: Dump command output on exception 2017-05-01 18:37:34 +00:00
lauri e9c54e1dd1 tests: Disable output capture for pytest 2017-05-01 18:16:50 +00:00
lauri f7a27c6044 tests: More verbose output while setting up CA 2017-05-01 18:06:47 +00:00
lauri e0eb3ee471 tests: Create certidude user in advance 2017-05-01 17:56:10 +00:00
lauri f9eaa94230 tests: Install dependencies system-wide 2017-05-01 17:23:59 +00:00
lauri 6a8af36c99 tests: Run tests as root 2017-05-01 17:19:49 +00:00
lauri 960e7be1f1 tests: Fix typo 2017-05-01 17:13:35 +00:00
lauri c428be48ff tests: Modifying /etc/hosts need sudo 2017-05-01 17:10:11 +00:00
lauri 77d7d9fbab tests: Lazier imports 2017-05-01 17:06:39 +00:00
lauri bba1edb070 tests: Lazier const import to prevent early FQDN lookup 2017-05-01 16:57:43 +00:00
lauri bebfb137d6 tests: Attempt to reset hostnames via pytest 2017-05-01 16:49:11 +00:00
lauri f7248cb8d8 tests: Check for existence of /etc/openvpn 2017-05-01 16:39:12 +00:00
lauri 2629709709 Attempt to specify ca as alias for ca.example.lan 2017-05-01 16:32:06 +00:00
lauri 3f286aa1f8 Click not available in Ubuntu 14.04 repos 2017-05-01 16:26:26 +00:00
lauri b0683b268d Attempt to run client as part of unittests 2017-05-01 16:20:50 +00:00
lauri cc4f13086e Improve init/openvpn handler 
* Create systemd service for signaling OpenVPN client after suspend
* Use tun instead of tap
* Update DNS server/domain upon (dis)connect
* Include necessary templates
 2017-04-29 22:09:31 +03:00
lauri e87d1c574b Mode coverage for token tests 2017-04-26 09:26:14 +03:00
lauri 9aab212647 Add tests for token mechanism 2017-04-26 09:13:41 +03:00
lauri c3477ef635 Make sure signer is spawned before testing anything 2017-04-26 00:14:02 +03:00