84496b0f55
fixed a few problems
2020-09-14 15:18:46 +02:00
b8e3162c5f
added revoke functionality
2020-09-14 14:20:11 +02:00
b337b27146
added response handler
2020-09-14 12:23:58 +02:00
01678a714f
added required vars check
2020-09-14 09:50:55 +02:00
8adca442e1
Merge branch 'master' into entrust-plugin
2020-09-11 17:11:57 -07:00
09a2a8fc76
Log message change
...
PR comments
2020-09-11 15:53:34 -07:00
806aeddd87
Merge branch 'master' into validity
2020-09-11 10:09:01 -07:00
6e588f9c7b
Merge branch 'master' into validity
2020-09-11 09:06:11 -07:00
1c9c377751
Lint errors
2020-09-11 12:31:15 +02:00
fd52438d61
yet lint errors
2020-09-11 12:30:53 +02:00
de9ad82011
Fixed Lint complaints
2020-09-11 12:24:33 +02:00
a99a84b0b2
entrust plugin inital edit
2020-09-10 16:04:31 +02:00
f47f108f43
ientrust plgin - first version
2020-09-10 16:03:29 +02:00
a7be8b6dce
adding support for different types of CSR encodings
2020-09-09 19:54:53 -07:00
4923157dc2
expanding key_type to with EC support
2020-09-09 19:54:20 -07:00
aff7ad7ea2
testing
2020-09-09 19:53:59 -07:00
60fd2134ca
removing duplicate curves, and marking them in existing mapping
2020-09-09 19:53:35 -07:00
5ab9626cbd
overwriting cn and key_type values from CSR, as they take precedence
2020-09-09 19:52:59 -07:00
6fa15c4cb3
methods to extract cn and key_type from csr
2020-09-09 19:48:21 -07:00
de0c38e9ba
mapping of curve name to key_type
2020-09-09 19:47:51 -07:00
8ad4448c85
Match date format for comparison + expected new lines
2020-09-01 12:44:49 -07:00
db4f68f0ed
Logs during cert validity truncate for digicert
2020-08-31 18:20:32 -07:00
9c4fb85dc3
Calculate dates from defaultDays in js
2020-08-31 18:19:32 -07:00
d478def98c
removing the custom key Type and doing the conversion in the backend
2020-08-31 16:35:47 -07:00
9a7a632489
using a standard curve for testing
2020-08-28 09:48:35 -07:00
9671b34485
adding support for all type of ECC curves which existing CA plugins might support
2020-08-27 14:15:14 -07:00
1fc2e29ab8
Remove 397 days validation as it causes error in API calls
...
More to come in future
2020-08-27 14:15:14 -07:00
ab4cda2298
Extended ADCS_TEMPLATE_ Variable
...
If there is a config variable ADCS_TEMPLATE_<upper(authority.name)> take the value as Cert template else default to ADCS_TEMPLATE to be compatible with former versions
2020-08-27 14:15:14 -07:00
7a9500eee0
Lint error fix
2020-08-27 14:15:14 -07:00
5ed109e998
Max end date as per start date + default validity 3 years
2020-08-27 14:15:14 -07:00
7011a4df8b
max date on UI as per max validity configs
2020-08-27 14:15:14 -07:00
4d7c6844e5
Make Organizational Unit optional
2020-08-27 14:15:14 -07:00
2645c4a82d
mention 397 for digicert plugin
2020-08-27 14:15:14 -07:00
3cb386cc0f
maximum 1 year validity for digicert
2020-08-27 14:15:14 -07:00
e06dea106f
Modify unit test test_determine_end_date to match new config
2020-08-27 14:15:14 -07:00
d7d483fa9b
Renaming PUBLIC_CA to PUBLIC_CA_AUTHORITY_NAMES
2020-08-27 14:15:14 -07:00
25125f3257
Cert validity should not exceed 397 days for publicly trusted issuers
2020-08-27 14:15:14 -07:00
404d213e8f
Modified cert description to have cert id being cloned
2020-08-27 14:15:14 -07:00
e75e472a1a
Do not inherit replacement info during cert clone
2020-08-27 14:15:14 -07:00
69b64c63ea
Honor selected algorithm during certificate cloning
2020-08-27 14:15:14 -07:00
f4bcd1cf30
lack of an empty config file was resulting into this error
...
```
Traceback (most recent call last):
File "/home/travis/build/Netflix/lemur/lemur/plugins/lemur_acme/tests/test_acme.py", line 159, in test_request_certificate
self.acme.request_certificate(mock_acme, [], mock_order)
File "/home/travis/build/Netflix/lemur/lemur/plugins/lemur_acme/plugin.py", line 211, in request_certificate
current_app.config.get("IDENTRUST_CROSS_SIGNED_LE_ICA_EXPIRATION_DATE", "17/03/21"), '%d/%m/%y'):
TypeError: strptime() argument 1 must be str, not MagicMock
```
2020-08-27 14:15:14 -07:00
5a6e4e5b43
Let's Encrypt has been using a cross-signed intermediate CA by DST Root CA X3, which is included in any older devices' TrustStore.
...
https://letsencrypt.org/certificates/
Let's Encrypt is transitioning to use the intermediate CA issued by their own root (ISRG X1) starting from September 29th 2020. This is in preparation of concluding the initial bootstrapping of their CA, by having it cross-signed by an older CA.
https://letsencrypt.org/2019/04/15/transitioning-to-isrg-root.html
This PR allows Lemur to pin to the cross-signed ICA (same public/private key pair as the ICA signed by ISRG X1). This will prolong support for incompatible systems.
2020-08-27 14:15:14 -07:00
c169ad291e
adding the correct signing algorithm, and a missing key Type
2020-08-27 13:29:56 -07:00
3242fc1e13
Validity with radio buttons
2020-08-26 19:30:12 -07:00
6aedd3b0d8
Datepicker enhancements
2020-08-25 18:40:36 -07:00
3efe14c43f
Remove 397 days validation as it causes error in API calls
...
More to come in future
2020-08-25 16:26:20 -07:00
4f148f3bc3
Merge branch 'master' into master
2020-08-20 11:33:18 +02:00
1b73b1d080
Merge branch 'master' into master
2020-08-19 12:29:02 +02:00
c2116df652
Extended ADCS_TEMPLATE_ Variable
...
If there is a config variable ADCS_TEMPLATE_<upper(authority.name)> take the value as Cert template else default to ADCS_TEMPLATE to be compatible with former versions
2020-08-19 12:25:52 +02:00
5b96b3a032
Lint error fix
2020-08-18 20:03:15 -07:00
