acmed

Commit Graph

Author	SHA1	Message	Date
Rodolphe Breard	d9fdc8cb08	Fix the man pages syntax	4 years ago
Rodolphe Breard	de6561cd24	ACMEd v0.12.0	4 years ago
Rodolphe Breard	0db5e6898f	Stop to require the `orders` field on account creation RFC 8555 states that: - when an account is successfully created, the server "returns this account object" (section 7.3); - the `orders` field in account objects is mandatory (section 7.1.2). Despite that, Boulder does not returns the `orders` field when an account is created. This non-standard behavior prevented ACMEd from creating account and testing them for existence. In order to allow ACMEd to retrieve certificates from CAs using Boulder, the `orders` field is no longer mandatory and the account existence is tested when the order is requested. https://github.com/letsencrypt/boulder/issues/3335	4 years ago
Rodolphe Breard	0c8b0d3e53	Log HTTP responses and POST requests	4 years ago
Rodolphe Breard	8477d927a1	Add support for NIST P-521 curve and ES512 signatures	4 years ago
Rodolphe Breard	53a6eff1eb	Fix the new order request	4 years ago
Rodolphe Breard	1a1c1bed91	Allow to specify subject attributes for certificates	4 years ago
Rodolphe Breard	2dee1cce4c	Remove nonce scoping from the planned features	4 years ago
Rodolphe Breard	0456737458	ACMEd v0.11.0	4 years ago
Rodolphe Breard	2e526f63e2	Update the CHANGELOG	4 years ago
Rodolphe Breard	3c173bcf13	Create a new account if the external account has changed	4 years ago
Rodolphe Breard	bb47e04558	Improve the binary's long version	4 years ago
Rodolphe Breard	1267e09ecb	Dynamically retrieve the OpenSSL version	4 years ago
Rodolphe Breard	51ff3fb9f8	Fix the test_account_new test	4 years ago
Rodolphe Breard	8c116f0b55	Add external account binding	4 years ago
Rodolphe Breard	875a403485	Add the b64_decode function	4 years ago
Rodolphe Breard	45ca322ea6	Add the HS256, HS384 and HS512 signature algorithms	4 years ago
Rodolphe Breard	30517d8b54	Add the HMAC computation in the HashFunction API	4 years ago
Rodolphe Breard	4eb0423da3	Reformat log messages	4 years ago
Rodolphe Breard	35fc59f761	Remove the signature algorithm from the key hash The key hash is responsible for the initiation of a key rollover on endpoints. Therefore, it should differ only when such an action is required, which is only if the key pair has changed. For this, hashing the public key is sufficient. Adding the signature algorithm will generate unnecessary key rollovers.	4 years ago
Rodolphe Breard	f44d95e7b1	Remove the -D option from install In the Makefile, `make install` is used to create missing directories and install files into them. Until now, the -D option was used for this job. However, FreeBSD as an implementation of the install command that differs about this option. In order to remain compatible with FreeBSD, the -D option has been removed and replace by prior directory creation using the -d option, which is common to (most?) implementations. https://www.freebsd.org/cgi/man.cgi?query=install https://man.openbsd.org/install https://linux.die.net/man/1/install	4 years ago
Rodolphe Breard	b340ac778d	Make the account hooks optional	4 years ago
Rodolphe Breard	dc0603b9e7	Update the Travis CI configuration The `dist: xenial` has been added because, at the time, build was done using an old version of Ubuntu including an unsupported version of OpenSSL. Now that Xenial is the default build version, this option should be removed. See commit `261e0e50fd`	4 years ago
Rodolphe Breard	220f580d90	Use libc::time_t instead of i64 The use of i64 causes troubles in architectures that doesn't defines time_t as an i64. Fixes #37	4 years ago
Rodolphe Breard	04841e1773	Fix the account key rollover	4 years ago
Rodolphe Breard	8b2a32d671	Re-create accounts dropped by the endpoint The previous commit added a small regression: if an account has been dropped by the endpoint, it was not re-created. This commit fixes this.	4 years ago
Rodolphe Breard	9b12e88ae1	Allow accounts to be updated The previous strategy for accounts management on endpoints was to send an account creation request every time in order to retrieve the account URL. Although it works on most cases, the contact information or key update wasn't handled correctly. The only drawback of this new way of managing accounts is that, if the endpoints drops the account, ACMEd will fail to renew any certificate for this account on this endpoint. Previously, it would have simply created a new account. This should be fixed soon.	4 years ago
Rodolphe Breard	a9603528f4	Add questions about parallelization in the FAQ	4 years ago
Rodolphe Breard	51cfd49f08	Refactor the account management Until now, the account management was archaic and it was impossible to improve it without this heavy refactoring. Accounts are now disjoint from both certificates and endpoints. They have their own hooks and their own environment variables. They are stored in a binary file instead of the PEM exports of the private and public keys. This refactoring will allow account management to evolve into something more serious, with real key rollover, contact information update and so on.	4 years ago
Rodolphe Breard	32c1e986af	Fix invalid link in the CONTRIBUTING file	4 years ago
Rodolphe Breard	04a95dad26	Update the CONTRIBUTING file	4 years ago
Rodolphe Breard	69739d4703	Create a dedicated FileManager struct The certificate struct was bloated with file management data which therefore required the certificate to be passed in every storage function. In order to clean this, a new FileManager struct has been created.	4 years ago
Rodolphe Breard	3b7f41a7e8	Update the README	4 years ago
Rodolphe Breard	f126ee22d0	ACMEd v0.10.0	4 years ago
Rodolphe Breard	64e7d80f7c	Improve the CHANGELOG	4 years ago
Rodolphe Breard	a1ff1f6181	Raise a descriptive error for invalid identifier specifications An identifier must have one and only one type field (`dns` or `ip`). Rel #24	4 years ago
Rodolphe Breard	53d55af96e	Improve the FAQ	4 years ago
Rodolphe Breard	96cc42375e	Improve the FAQ	4 years ago
Rodolphe Breard	52fe2c60ba	Refactor the certificate key type management The previous system used a duplicated enum (`acmed::certificate::Algorithm`) and an imprecise identifier name (algorithm) for both the certificate configuration and post operation hook variable. The first one has been replaced by the `acme_common::crypto::KeyType` enum and the second renames `key_type`.	4 years ago
Rodolphe Breard	bea33179d7	Allow to specify the CSR's digest algorithm	4 years ago
Rodolphe Breard	e17e6d1174	Add the PID file name in the error message Rel #24	4 years ago
Rodolphe Breard	3ee3419676	Add missing commas	4 years ago
Rodolphe Breard	7292cc68ca	Fix the certificate generation tests	4 years ago
Rodolphe Breard	c5f1e90276	Add the `--crt-digest` option in tacd	4 years ago
Rodolphe Breard	f640688a3b	Refactor the hash function interface	4 years ago
Rodolphe Breard	c7263703d1	Improve the CLI Some default values were missing. Some descriptions has been rephrased.	4 years ago
Rodolphe Breard	b08da88bcf	Fix the conditional compilation	4 years ago
Rodolphe Breard	602d8c6cf6	Add the `--crt-signature-alg` option in tacd	4 years ago
Rodolphe Breard	4614d6c407	Add partial EdDSA support Currently, OpenSSL does not have the required `EVP_PKEY_get1_ED(25519\|448)` functions, hence EdDSA has been partially implemented and disabled. Once OpenSSL 3.0.0 is out and the `openssl` crates implements the bindings to those functions, full EdDSA implementation could be done and activated. Conditional compilation has been implemented using `rustc-cfg` instructions rather than features so it can be activated from the build script depending on whether or not the cryptographic library supports Ed25519 and Ed448. `7c664b1f1b`	4 years ago
Rodolphe Breard	a0f4928a73	Move the account key type and signing algorithm Those options are tied with the account and should therefore be defined in the associated section, not in the endpoint section.	4 years ago

... 2 3 4 5 6 ...

454 Commits (bdc954fbe44b244bacc1bb0636a541b810d08519) All Branches Search

454 Commits (bdc954fbe44b244bacc1bb0636a541b810d08519)

All Branches