acmed

Commit Graph

Author	SHA1	Message	Date
Rodolphe Breard	2f39e798d1	Add Unix style globing for config file inclusion Close #6	4 years ago
Rodolphe Breard	25450aebbf	Implement IP identifiers RFC 8738: https://tools.ietf.org/html/rfc8738	4 years ago
Rodolphe Breard	387adc7c4f	Remove the useless calls to `map_err`	4 years ago
Rodolphe Breard	582593de29	Allow to specify the account key type and signature alg in the config	4 years ago
Rodolphe Breard	1350257300	Put Ed25519 support in a feature	4 years ago
Rodolphe Breard	636fbf9cf6	Refactor the JWS signature algorithm management Being tied with the key type, the signature algorithm should therefore be at the same place than the key type, hence `acme_common::crypto`. This reorganization will allow to specify the account key type as well as the signature algorithm in the configuration.	4 years ago
Rodolphe Breard	d7dbd58823	Move the hashing operation inside the signing function This hashing operation is part of the signing process itself and should therefore not be exposed outside of the signing function.	4 years ago
Rodolphe Breard	eabcddb0af	Add support for RSA 2048 account keys	4 years ago
Rodolphe Breard	1ab5b4012e	Use the correct algorithm and hash function for JWK signatures Since there is currently no possibility to chose a different account key type, the current implementation only supports the ES256 algorithm. With the upcoming support of different key types, it had to be changed. This commit add support for ES384 although there is no configuration option that can activate the actual use of it through account keys using the NIST P-384 curve.	4 years ago
Rodolphe Breard	09d01eefb5	Remove openssl calls from the acmed crate The TLS library is encapsulated by acme_common.	4 years ago
Rodolphe Breard	501b1aa9d8	Replace `reqwest` by `attohttpc` `reqwest` is a very good crate, however ACMEd does not require most of its functionalities. For this job, `attohttpc` is also great and comes with much less dependencies. rel #1	4 years ago
Rodolphe Breard	a4e0ccfa51	Correctly handle certificate expiration on openssl The `openssl` crate now include methods to manipulate Asn1Time objects. Before this improvement, the certificate had to be parsed from the DER format using the `x509-parser` crate (which is therefore no longer required). https://github.com/sfackler/rust-openssl/pull/1173 https://github.com/sfackler/rust-openssl/issues/687	4 years ago
Rodolphe Breard	26ce6fdf40	Refactor the HTTP back-end The previous HTTP back-end was tightly coupled with the threads, which was very inconvenient. It is now completely decoupled so a new threading model may be implemented.	4 years ago
Rodolphe Breard	52973b4b9e	Remove the PID file after exit Fix #25	5 years ago
Rodolphe Breard	70db8e6dd9	Prevent unnecessary creation of a PID file When running in foreground, a PID file should be created only if the `--pid-file` option is specified. Rel #25	5 years ago
Rodolphe Breard	39430009ac	Add internationalized domain names support	5 years ago
Rodolphe Breard	9eda92662d	Allow --pid-file to be used with --foreground The PID file is now always written whether or not ACMEd is running in the foreground. Previously, it was written only when running in the background. Fix #7	5 years ago
Rodolphe Breard	39df1601d8	Format code	5 years ago
Rodolphe Breard	996ea85be4	Format code	5 years ago
Rodolphe Breard	b16b2e6b09	Remove the explicit dependency on the time crate	5 years ago
Jakub Pastuszek	155feb345c	always use NAMED_CURVE format for EC key storage; fixes #9	5 years ago
Rodolphe Breard	f1f95c4d99	Display a more precise error message for unknown EC keys	5 years ago
Rodolphe Breard	55f4d3416b	Refactor the JWK implementation	5 years ago
Rodolphe Breard	4ea49512d6	Remove the standalone feature As discussed in #2, ring is not mature enough to replace OpenSSL. Hence, the standalone mode which has been made to implement such a replacement has to be removed until ring becomes usable.	5 years ago
Rodolphe Breard	84102922fa	Move KeyType to a dedicated module	5 years ago
Rodolphe Breard	70df290306	Rewrite the crypto keys abstraction Until now, the crypto key abstraction used two different type: PublicKey and PrivateKey. Unfortunately, it does not work with ring and should therefore be rewrote with a single type: KeyPair.	5 years ago
Rodolphe Breard	94f46d3776	Remove the bad OpenSSL ASN.1 time parsing	6 years ago
Rodolphe Breard	d186f5c10a	Define the default algo in acme_common Because ring does not currently support RSA keys generation, the default algo must be adapted depending on whether or not the standalone feature is activated.	6 years ago
Rodolphe Breard	147370caa2	Add the standalone hash implementation	6 years ago
Rodolphe Breard	ea1183c18c	Create an abstraction around the hash functions rel #2	6 years ago
Rodolphe Breard	e42d242868	Remove useless closures	6 years ago
Rodolphe Breard	ff1b6d1aa7	Create an abstraction around the certificate As for public and private keys, the certificate should also be abstracted. rel #2	6 years ago
Rodolphe Breard	63e35712fe	Create an abstraction around public and private keys Since it is planned to add a "standalone" feature that will replace OpenSSL by crates not linking to any external library, it is required to abstract all the OpenSSL specific types. This is a huge work and therefore is divided in several steps. This first one is dedicated to public and private keys. rel #2	6 years ago
Rodolphe Breard	1e6aba52dc	Add rate limits for HTTPS requests	6 years ago
Rodolphe Breard	08c9410028	Improve the logging format In order to renew different certificate at the same time, log messages must display which certificate they are referring to.	6 years ago
Rodolphe Breard	eb7bc09134	Move the logs to the acme_common lib	6 years ago
Rodolphe Breard	d549c3db5a	Move the daemonize role to acme_common	6 years ago
Rodolphe Breard	83563ad950	Add the Clone trait to Error	6 years ago
Rodolphe Breard	a0d8944682	Move common items to a dedicated lib In a near future, ACMEd will be composed of several binaries which will use some common functions and structures.	6 years ago

41 Commits (9f6f10c67a3e09ecd520ce5bdb97b2fa81176b6f)