Curtis Castrapel
3e9726d9db
Precommit work
2018-08-22 10:38:09 -07:00
Curtis Castrapel
6abf274680
Allow case insensitive role matching for cert permissions
2018-08-20 08:55:04 -07:00
Curtis Castrapel
9f64f0523b
Increase timeouts
2018-08-17 15:36:56 -07:00
Curtis Castrapel
43ae6c39e3
wait right here
2018-08-17 12:14:02 -07:00
Curtis Castrapel
7f9a035802
Fix private key bytecode issue
2018-08-17 10:59:01 -07:00
Curtis Castrapel
a6b1f33208
Ensure owner names are lowercase for new / updated certificates
2018-08-17 10:41:55 -07:00
Curtis Castrapel
1ad61b1550
allow null validity periods
2018-08-17 07:57:55 -07:00
Curtis Castrapel
be9d683e46
fix merge
2018-08-16 10:15:48 -07:00
Curtis Castrapel
da99bcda68
Better zone handling
2018-08-16 10:12:19 -07:00
Curtis Castrapel
2c22c9c2f1
Allow proper detection of zones, fix certificate detection
2018-08-14 14:37:45 -07:00
Curtis Castrapel
1a5abe6550
fix lint
2018-08-13 15:11:57 -07:00
Curtis Castrapel
cc836433fb
formatting
2018-08-13 15:06:16 -07:00
Curtis Castrapel
5829794d82
typo fix
2018-08-13 14:25:54 -07:00
Curtis Castrapel
bb026b8b59
Allow LetsEncrypt renewals and requesting certificates without specifying DNS provider
2018-08-13 14:22:59 -07:00
Curtis
ab37189022
Merge branch 'master' into unittests-use-valid-certs
2018-08-07 09:42:39 -07:00
Curtis
cf71f88680
Merge branch 'master' into fill-missing-rotation-policy
2018-08-07 08:23:29 -07:00
Curtis
f9a7b97839
Merge branch 'master' into unittests-use-valid-certs
2018-08-07 07:45:45 -07:00
Cyril Dangerville
2869042f38
Fixed invalid JSON payloads (making API requests fail in particular) ( #1522 )
2018-08-03 15:26:48 -07:00
Marti Raudsepp
82158aece6
Fill in missing cert rotation_policy; don't ignore validation errors when re-issuing certs
...
CertificateInputSchema requires the rotation_policy field, but
certificates created before the field existed have set to NULL. Thus
saving such certificates failed and probably caused other errors.
Made cert re-issuing (get_certificate_primitives) more strict so such
errors are harder to miss in the future.
2018-08-03 20:06:21 +03:00
Marti Raudsepp
1f0f432327
Fix unit tests certificates to have correct chains and private keys
...
In preparation for certificate integrity-checking: invalid certificate
chains and mismatching private keys will no longer be allowed anywhere
in Lemur code.
The test vector certs were generated using the Lemur "cryptography"
authority plugin.
* Certificates are now more similar to real-world usage: long serial
numbers, etc.
* Private key is included for all certs, so it's easy to re-generate
anything if needed.
2018-08-03 19:45:13 +03:00
Marti Raudsepp
acd2701fa2
Delete dead code in unit tests ( #1510 )
2018-08-03 08:21:55 -07:00
Curtis
025d177565
Merge branch 'master' into letsencrypt_account_support
2018-07-30 15:28:29 -07:00
Curtis Castrapel
44192d4494
remove debug print
2018-07-30 15:27:23 -07:00
Curtis Castrapel
0889076d3b
Support LetsEncrypt accounts
2018-07-30 15:25:02 -07:00
Mike Grima
d6b482755b
Proper flask_restful boolean parsing.
...
This is documented here: https://github.com/flask-restful/flask-restful/issues/488
2018-07-30 13:49:41 -07:00
Curtis Castrapel
caf99d36d6
fix deletion
2018-07-27 15:52:22 -07:00
Curtis Castrapel
e16c1de001
Error logging
2018-07-27 14:17:50 -07:00
Curtis Castrapel
2a6dda07eb
Show and send error for pending certs
2018-07-27 14:15:14 -07:00
Curtis Castrapel
9b29f9f819
Adding pessimistic sqlalchemy disconnection handling
2018-07-23 10:57:22 -07:00
Curtis Castrapel
2f51fea743
no bare except
2018-07-20 13:43:47 -07:00
Curtis Castrapel
c78077d8d6
Explicit capture exception during create failure
2018-07-20 13:43:47 -07:00
Steven Reiling
bd9203fcbc
Adds an optional interval variable to notification service's
...
create_default_expiration_notifications and introduces a new optional
configuration variable, LEMUR_SECURITY_TEAM_EMAIL_INTERVALS, to allow admins
control over the centralized email notification defaults.
2018-07-20 13:43:47 -07:00
Marti Raudsepp
d071d85486
Clean up module imports
...
Example:
* import lemur.common.utils -> from lemur.common import utils
* import sqlalchemy.types as types -> from sqlalchemy import types
2018-07-20 13:43:47 -07:00
Marti Raudsepp
04ee1656ee
Cache parsed certificate instead of re-parsing for each field
...
Use @cached_property decorator to cache the results of parse_certificate().
This significantly cuts down on the number of times certs need to be
parsed for a list view.
2018-07-20 13:43:47 -07:00
root
56372c55b4
initial commit
2018-07-20 13:43:47 -07:00
Marti Raudsepp
149caa5602
Clean up module imports
...
Example:
* import lemur.common.utils -> from lemur.common import utils
* import sqlalchemy.types as types -> from sqlalchemy import types
2018-07-12 11:21:18 -07:00
Marti Raudsepp
b472e5e648
Cache parsed certificate instead of re-parsing for each field
...
Use @cached_property decorator to cache the results of parse_certificate().
This significantly cuts down on the number of times certs need to be
parsed for a list view.
2018-07-12 11:21:18 -07:00
Marti Raudsepp
64132ba92b
Expose certificate dateCreated via API
2018-07-12 11:21:18 -07:00
Curtis Castrapel
9ef356f59d
reformat code (noop)
2018-07-12 11:21:17 -07:00
Curtis Castrapel
3397fb6560
R53: Extend only TXT records
2018-06-20 10:33:35 -07:00
Curtis Castrapel
3efc709e03
tests
2018-06-19 21:16:35 -07:00
Curtis Castrapel
dda7f54a16
lint
2018-06-19 20:58:00 -07:00
Curtis Castrapel
2d33d3e2b8
lint
2018-06-19 20:35:00 -07:00
Curtis
d50c9c7748
Merge branch 'master' into acme_validation_dns_provider_option
2018-06-19 16:45:25 -07:00
Curtis Castrapel
a141b8c5ea
Support concurrent issuance in Route53 for LetsEncrypt
2018-06-19 16:27:58 -07:00
Curtis
b2bc431823
Merge branch 'master' into dyn2
2018-06-14 08:06:31 -07:00
Curtis Castrapel
4e72cb96c9
Graceful cancellation of pending cert and order details in log for acme failure
2018-06-14 08:02:34 -07:00
Dmitry Zykov
b99aad743b
remove linuxdst plugin
2018-06-13 15:15:09 -07:00
Curtis Castrapel
135f2b710c
Limit dns queries to 10 attempts
2018-06-13 15:14:48 -07:00
Curtis Castrapel
065e0edc5f
lint
2018-06-13 14:22:45 -07:00
