Commit Graph

2597 Commits

Author SHA1 Message Date
Ilya Makarov a8c0adaa4d Merge remote-tracking branch 'upstream/master' 2020-02-27 17:08:35 +03:00
Ilya Makarov 5fb3da8bec Add certificate reissue to cron 2020-02-27 11:24:35 +03:00
Ilya Makarov a584aeb7eb User lemur instead manage.py 2020-02-26 20:12:53 +03:00
Ilya Makarov ce69d47b8b Fix 2020-02-26 19:43:16 +03:00
Hossein Shafagh 4df64a87e5
Merge pull request #2920 from Netflix/dependabot/pip/bleach-3.1.1
Bump bleach from 3.1.0 to 3.1.1
2020-02-24 13:15:11 -08:00
dependabot[bot] 64a7faffd9
Bump bleach from 3.1.0 to 3.1.1
Bumps [bleach](https://github.com/mozilla/bleach) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/mozilla/bleach/releases)
- [Changelog](https://github.com/mozilla/bleach/blob/master/CHANGES)
- [Commits](https://github.com/mozilla/bleach/compare/v3.1.0...v3.1.1)

Signed-off-by: dependabot[bot] <support@github.com>
2020-02-24 18:30:10 +00:00
Hossein Shafagh 2bcb842d93
Merge branch 'master' into fix-cves 2020-02-20 13:42:00 -08:00
Ilya Makarov 1430ac5395 fix 2020-02-18 19:54:41 +03:00
Ilya Makarov ccb811516c Add dockerfile to build from repo 2020-02-18 19:43:48 +03:00
Ilya Makarov 9612d291ed Add path suffix options 2020-02-18 19:16:27 +03:00
csine-nflx 9c56d603ce
Merge pull request #2916 from Netflix/le_Log_orderurl
Log certificate issuance success and metrics.
2020-02-17 12:57:00 -08:00
Hossein Shafagh 2ee60bcdb6
Merge branch 'master' into le_Log_orderurl 2020-02-17 10:30:58 -08:00
Hossein Shafagh 0c95ec3bdf
Merge pull request #2918 from sirferl/master
Added VERISIGN_INTERMEDIATE_<authority> parameter
2020-02-17 10:30:43 -08:00
sirferl e75df1ddc9
Update plugin.py 2020-02-17 19:04:20 +01:00
Hossein Shafagh d29edabefe
Merge branch 'master' into le_Log_orderurl 2020-02-17 09:24:51 -08:00
sirferl ed3472d029
Update plugin.py 2020-02-17 15:21:29 +01:00
sirferl aa5200b85f
Merge branch 'master' into master 2020-02-17 15:04:04 +01:00
sirferl 3fd0d3e141
Added VERISIGN_INTERMEDIATE_<authority> parameter
When using the VERISIGN_PRODUCT_<authority> Parameter one also has to add this parameter:
VERISIGN_INTERMEDIATE_<authority> = """ <PEM-String of Issuing CA for this certificate Type>""" 
While doing this, I also added code, so the external_id field is filled with data from CA-Answer
2020-02-17 12:40:36 +01:00
Hossein Shafagh 0d76690091
Merge pull request #2917 from sirferl/master
New variable VERISIGN_PRODUCT_(authority.name)
2020-02-16 15:38:42 -08:00
sirferl 1815c89970
Made the change more elegant
As suggested by @hosseinsh. This is of course more elegant.
2020-02-16 09:28:52 +01:00
sirferl a70a49e4e9
Update plugin.py 2020-02-15 16:11:58 +01:00
sirferl 3693bc2d8b
removed whitespaces inserted by online editor 2020-02-15 16:09:25 +01:00
sirferl bfa953270d
Fixed whitespace error 2020-02-15 16:04:44 +01:00
sirferl ac95f1cc33
Merge branch 'master' into master 2020-02-15 15:55:28 +01:00
sirferl fabcad1e46
New variable VERISIGN_PRODUCT_(authority.name)
If there is a config variable with VERISIGN_PRODUCT_<upper(authority.name)> take the value as Cert product-type
else default to "Server", to be compatoible with former versions.
This enables the use of different Verisign authorities for differnt cert-products eg. EV or Standard Certs
2020-02-15 15:52:24 +01:00
csine-nflx a8e8924e2a
Merge branch 'master' into le_Log_orderurl 2020-02-14 17:10:38 -08:00
Hossein Shafagh bde3d1ac66
Merge pull request #2914 from sirferl/master
Fixing kubernetes and verisign plugin
2020-02-14 09:34:34 -08:00
sirferl 8e3cc93d6a
Whitespaces in empty line 113 removed 2020-02-14 07:50:18 +01:00
csine-nflx b521aaf579
Merge branch 'master' into le_Log_orderurl 2020-02-13 16:41:14 -08:00
csine-nflx af21225918 adding logging on sucess and metric submission of URL for certificate issuance 2020-02-13 16:38:33 -08:00
Hossein Shafagh 2b849a6520
Update plugin.py
making lint happy
2020-02-13 15:58:07 -08:00
Hossein Shafagh 9db1ea3307
Merge branch 'master' into master 2020-02-13 12:47:06 -08:00
Hossein Shafagh 5c4b36fd5f
Merge pull request #2915 from Netflix/powerdnsplugin_01
fixed get_domains() to remove duplicate entries, updated usage and tests
2020-02-13 12:45:53 -08:00
sirferl 571c8bf42d
Error when validity_end date is empty #2905
this lines of code (114ff) in threw an error, when the validity_end date was empty:

if options.get("validity_end") > arrow.utcnow().shift(years=2):
raise Exception(
"Verisign issued certificates cannot exceed two years in validity"
)

Actually, they are not needed, because immidiately following is a check for an empty validity_end and for the length of the entered period.
When I commented it out for testing, the error was gone and everything worked as expected.
2020-02-13 07:38:04 +01:00
sirferl 6c7bb5f9b7
Fixed TLS secret format ( #2913 )
The Plugin handled the TLS secret format wrong: it sent chain certificate instead of requested public certificate #2913
2020-02-13 07:35:35 +01:00
sirferl 14edd1bd4f
Merge pull request #3 from Netflix/master
Fixing kubernetes and verisign plugin
2020-02-13 07:31:08 +01:00
csine-nflx ca8e73286f fixed get_domains() to remove duplicate entries, updated usage and tests 2020-02-12 15:10:24 -08:00
Hossein Shafagh d69c83e5c8
Merge pull request #2912 from Netflix/powerdns_doc_update_01
Add Documentation for PowerDNS Plugin
2020-02-10 11:31:18 -08:00
Hossein Shafagh 1e4d4b9413
Merge branch 'master' into fix-cves 2020-02-10 11:23:58 -08:00
Hossein Shafagh c575ed5c79
Merge branch 'master' into powerdns_doc_update_01 2020-02-10 11:22:55 -08:00
Hossein Shafagh 7dd2a3c269
Merge pull request #2883 from rohanmehto2/vault-k8s-auth
implemented #2882 k8s auth for vault
2020-02-10 11:22:36 -08:00
Hossein Shafagh 98cffb6c79
Merge branch 'master' into fix-cves 2020-02-10 11:15:26 -08:00
Hossein Shafagh b23ae60847
Merge branch 'master' into vault-k8s-auth 2020-02-10 11:12:52 -08:00
Ilya Makarov 77cec4fde9 Fix ssl env. Add issuer and authority 2020-02-05 19:11:36 +03:00
csine-nflx e379e34212
Merge branch 'master' into powerdns_doc_update_01 2020-02-04 18:36:37 -08:00
csine-nflx b9736dfd3f
Merge pull request #2911 from Netflix/powerdnsplugin_01
Add PowerDNS ACME Plugin
2020-02-04 18:36:11 -08:00
csine-nflx bcdb3173bd ensuring that "3" is set as an integer instead of a string 2020-02-04 18:23:17 -08:00
csine-nflx 5324290234 updating documentation based on feedback 2020-02-04 16:23:53 -08:00
csine-nflx 8ea54d7db2 removing exception if domain zone not found. Logging the issue instead 2020-02-04 14:50:56 -08:00
csine-nflx 48bccd6f68 moving _check_config() lower in file, near other private methods 2020-02-03 19:08:28 -08:00