Commit Graph

66 Commits

Author SHA1 Message Date
Hossein Shafagh
29f3dd43f2
Update administration.rst
language
2020-10-15 15:18:04 -07:00
sayali
9dc476f393 Use cab_compliant option instead of authority name list 2020-10-15 10:44:46 -07:00
Hossein Shafagh
770339f94c cleaning up outdated phrases 2020-10-09 18:04:16 -07:00
Mathias Petermann
4f1e09e3af Add reference from configuration options, to more detailed explanation 2020-09-23 22:21:49 +02:00
Mathias Petermann
ae1ead6d75 Document ACME plugin specific configurations 2020-09-23 22:21:49 +02:00
Mathias Petermann
cad04885a0 Add celery configuration options, to config documentation 2020-09-23 13:17:28 +02:00
Hossein Shafagh
305de2217e
Merge branch 'master' into master 2020-09-15 09:14:15 -07:00
sirferl
3487ecbaa7
Added entrust plugin doc and amended ADCS 2020-09-11 12:04:02 +02:00
sayali
9c4fb85dc3 Calculate dates from defaultDays in js 2020-08-31 18:19:32 -07:00
sayali
3242fc1e13 Validity with radio buttons 2020-08-26 19:30:12 -07:00
sayali
d41227327e doc update DEFAULT_MAX_VALIDITY_DAYS 2020-08-18 19:47:38 -07:00
sayali
cab1216cb7 Updating LEMUR_DEFAULT_ORGANIZATIONAL_UNIT to empty string 2020-08-18 15:14:34 -07:00
sayali
bc5579e9bf max date on UI as per max validity configs 2020-08-18 14:50:42 -07:00
sayali
acb0463844 Add new configs to the doc 2020-08-11 18:51:41 -07:00
sayali
682991c022 Updating Lemur docs to capture Digicert validity config changes 2020-08-10 18:07:46 -07:00
csine-nflx
027580cade Merge branch 'powerdnsplugin_01' of github.com:Netflix/lemur into powerdnsplugin_01 2020-03-05 16:52:38 -08:00
csine-nflx
6227e4aa89 fixing formatting of ACME_POWERDNS_VERIFY options 2020-03-05 16:51:21 -08:00
csine-nflx
e1e7efc96e
Merge branch 'master' into powerdnsplugin_01 2020-03-05 15:25:40 -08:00
csine-nflx
771e72187a updates based on feedback 2020-03-05 15:24:56 -08:00
csine-nflx
b85fe2f2b5 updated documentation language 2020-03-05 15:03:43 -08:00
csine-nflx
5dfb6acb17 adding support for ACME_POWERDNS_VERIFY option to support CA Bundles and disabling Server validation 2020-03-05 14:59:21 -08:00
csine-nflx
9ef538305d updating default language for digicert max validity option 2020-03-04 11:46:23 -08:00
csine-nflx
a873d69859 adding documentation for DIGICERT_MAX_VALIDITY 2020-03-03 18:24:48 -08:00
csine-nflx
5324290234 updating documentation based on feedback 2020-02-04 16:23:53 -08:00
csine-nflx
7dac0e1dd8
Update administration.rst 2020-01-31 16:54:25 -08:00
arnydo
66bff57c04
Add ADCS Plugin Configuration to Docs
Add configuration options based on https://github.com/Netflix/lemur/pull/2255#issue-240136873
2019-07-10 12:10:47 -04:00
arnydo
41c781318c
Add ADCS in Docs
Add info regarding the ADCS plugin created by "https://github.com/sirferl/lemur".
"lemur_adcs" plugin is part of Lemur by default so I added to main plugins section within Docs.
2019-07-10 10:08:14 -04:00
Curtis Castrapel
8eb639e366 Initial LetsEncrypt / Celery docs 2019-07-09 11:13:11 -07:00
alwaysjolley
029efeb03a fixing syntax 2019-05-08 09:45:13 -04:00
alwaysjolley
15eb7689ed Adding documentation for Vault and CFSSL Plugin changes 2019-05-08 09:32:46 -04:00
Ronald Moesbergen
8abf95063c Implement a ALLOW_CERT_DELETION option (boolean, default False). When enabled, the certificate delete API call will work and the UI
will no longer display deleted certificates. When disabled (the default), the delete API call will not work (405 method not allowed)
 and the UI will show all certificates, regardless of the 'deleted' flag.
2019-02-14 11:57:27 +01:00
Ronald Moesbergen
5fc5a058b6 Add documentation for the LDAP_IS_ACTIVE_DIRECTORY setting 2018-11-20 10:51:14 +01:00
Curtis
1b77dfa47a
Revert "Precommit - Fix linty things" 2018-08-22 13:21:35 -07:00
Curtis Castrapel
3e9726d9db Precommit work 2018-08-22 10:38:09 -07:00
Steven Reiling
7f3454128d Adds an optional interval variable to notification service's
create_default_expiration_notifications and introduces a new optional
configuration variable, LEMUR_SECURITY_TEAM_EMAIL_INTERVALS, to allow admins
control over the centralized email notification defaults.
2018-07-13 14:08:31 -07:00
Ron Cohen
ae63808678 Update administration.rst (#1221) 2018-04-23 12:15:56 -07:00
Titouan Christophe
4e94e51218 [add] Reference lemur-influxdb as 3rd party plugin 2018-04-16 20:15:25 +02:00
lmitul
6a762d463f Documenting connection pool config settings (#1197) 2018-04-10 16:50:58 -07:00
iTitou
a316cbba73 [add] Docs and default config for metric plugins (#1148) 2018-03-27 15:51:32 -07:00
James Chuong
763c5e8356 Add DIGICERT_ORDER_TYPE to Digicert plugin (#1025)
* Add DIGICERT_ORDER_TYPE to Digicert plugin

This allows lemur.conf.py to control which kind of certificate to
order.  User defined options are not currently supported in the the UI,
so we cannot create multiple Digicert authorities at runtime for
separate certificate types.

Change-Id: I06c216ec3c476e0001b240530626a86464be999e

* Fix Mock URL for Digicert test

Change-Id: Ida7c0ed1bd120c9024bea091c03b7d1ecfa66498

* Add documentation for DIGICERT_ORDER_TYPE

Change-Id: I0bc347883b628416eb7f13a7c60c937dcb6ae0c2
2018-01-13 18:06:17 -08:00
Johannes Langer
9319dda0ec Added ability to ignore cert for oauth2 provider (#971)
* Added ability to ignore cert for oauth2 provider

This is useful for development environments where the OAuth provider
doesn't have a valid cert!

* Setting default for OAUTH2_VERIFY_CERT to true
2017-10-20 16:36:14 -07:00
Marti Raudsepp
97d83890e0 Various minor cleanups and fixes (#938)
* Documentation fixes

* Various docstring and help string fixes

* Minor code cleanups

* Removed redundant .gitignore entry, ignored package-lock.json.
* 'return' statement in certificates.service.render was redundant
* Split up too long line
* Non-matching tags in templates
2017-09-25 15:33:42 -07:00
Marti Raudsepp
ec5dec4a16 Add option to disable owner email address in CSR subject (#939) 2017-09-25 15:32:08 -07:00
Ian Stahnke
a6dab5e1ee a bit more ldap documentaion (#930) 2017-09-21 06:00:26 -07:00
Ian Stahnke
ff4d1edd63 remove duplicated ldap_bind_uri description (#898) 2017-09-04 10:12:40 -07:00
Ian Stahnke
79d12578c7 basic ldap support (#842) 2017-09-03 20:41:43 -07:00
Marti Raudsepp
82b43b5a9d Create signal hooks and handler for dumping CSR and certificate details (#882) 2017-08-28 17:35:56 -07:00
Marti Raudsepp
7762d6ed52 Reworked sensitive domain name and restriction logic (#878)
* This is a fix for a potential security issue; the old code had edge
  cases with unexpected behavior.
* LEMUR_RESTRICTED_DOMAINS is no more, instead LEMUR_WHITELISTED_DOMAINS
  is a list of *allowed* domain name patterns. Per discussion in PR #600
* Domain restrictions are now checked everywhere: in domain name-like
  CN (common name) values and SAN DNSNames, including raw CSR requests.
* Common name values that contain a space are exempt, since they cannot
  be valid domain names.
2017-08-16 19:24:49 -07:00
Asbjørn Kjær
35cc7ef8d7 Adding support for private DigiCert certificates (#835) 2017-06-14 09:20:24 -07:00
kevgliss
2a2d5a5583 Adding an example digicert url. Closes #700. (#775) 2017-05-01 10:59:49 -07:00