acmed

Commit Graph

Author	SHA1	Message	Date
Rodolphe Bréard	e900138503	Inline the format args	2 years ago
Rodolphe Bréard	1afc6dc27e	Indent with tabs instead of spaces https://adamtuttle.codes/blog/2021/tabs-vs-spaces-its-an-accessibility-issue/	2 years ago
Rodolphe Bréard	2895ce4495	Regroup the chained calls to `.replace()` into a single one	2 years ago
Rodolphe Bréard	eceb61f9b6	Use a char instead of a string in `.replace()`	3 years ago
Rodolphe Breard	9e18254b73	Update the certificate's subject attributes	4 years ago
Rodolphe Breard	8c0d208fe5	Add the `openssl_vendored` feature rel #4	5 years ago
Rodolphe Breard	b75b8ba9f7	Prepare the code for an OpenSSL replacement The part of code that are specific to OpenSSL are now included only if the openssl feature is activated. The generic parts of code included in OpenSSL specific files has been moved out.	5 years ago
Rodolphe Breard	1a1c1bed91	Allow to specify subject attributes for certificates	5 years ago
Rodolphe Breard	1267e09ecb	Dynamically retrieve the OpenSSL version	5 years ago
Rodolphe Breard	220f580d90	Use libc::time_t instead of i64 The use of i64 causes troubles in architectures that doesn't defines time_t as an i64. Fixes #37	5 years ago
Rodolphe Breard	52fe2c60ba	Refactor the certificate key type management The previous system used a duplicated enum (`acmed::certificate::Algorithm`) and an imprecise identifier name (algorithm) for both the certificate configuration and post operation hook variable. The first one has been replaced by the `acme_common::crypto::KeyType` enum and the second renames `key_type`.	5 years ago
Rodolphe Breard	c5f1e90276	Add the `--crt-digest` option in tacd	5 years ago
Rodolphe Breard	f640688a3b	Refactor the hash function interface	5 years ago
Rodolphe Breard	636fbf9cf6	Refactor the JWS signature algorithm management Being tied with the key type, the signature algorithm should therefore be at the same place than the key type, hence `acme_common::crypto`. This reorganization will allow to specify the account key type as well as the signature algorithm in the configuration.	5 years ago
Rodolphe Breard	1ab5b4012e	Use the correct algorithm and hash function for JWK signatures Since there is currently no possibility to chose a different account key type, the current implementation only supports the ES256 algorithm. With the upcoming support of different key types, it had to be changed. This commit add support for ES384 although there is no configuration option that can activate the actual use of it through account keys using the NIST P-384 curve.	5 years ago
Rodolphe Breard	09d01eefb5	Remove openssl calls from the acmed crate The TLS library is encapsulated by acme_common.	5 years ago
Rodolphe Breard	4ea49512d6	Remove the standalone feature As discussed in #2, ring is not mature enough to replace OpenSSL. Hence, the standalone mode which has been made to implement such a replacement has to be removed until ring becomes usable.	6 years ago
Rodolphe Breard	84102922fa	Move KeyType to a dedicated module	6 years ago
Rodolphe Breard	70df290306	Rewrite the crypto keys abstraction Until now, the crypto key abstraction used two different type: PublicKey and PrivateKey. Unfortunately, it does not work with ring and should therefore be rewrote with a single type: KeyPair.	6 years ago
Rodolphe Breard	d186f5c10a	Define the default algo in acme_common Because ring does not currently support RSA keys generation, the default algo must be adapted depending on whether or not the standalone feature is activated.	6 years ago
Rodolphe Breard	147370caa2	Add the standalone hash implementation	6 years ago
Rodolphe Breard	ea1183c18c	Create an abstraction around the hash functions rel #2	6 years ago
Rodolphe Breard	ff1b6d1aa7	Create an abstraction around the certificate As for public and private keys, the certificate should also be abstracted. rel #2	6 years ago
Rodolphe Breard	63e35712fe	Create an abstraction around public and private keys Since it is planned to add a "standalone" feature that will replace OpenSSL by crates not linking to any external library, it is required to abstract all the OpenSSL specific types. This is a huge work and therefore is divided in several steps. This first one is dedicated to public and private keys. rel #2	6 years ago

24 Commits (2d9fdb0ce375abdded5177511f1d580c6e06705d)