Commit Graph

41 Commits

Author SHA1 Message Date
arnydo
66bff57c04
Add ADCS Plugin Configuration to Docs
Add configuration options based on https://github.com/Netflix/lemur/pull/2255#issue-240136873
2019-07-10 12:10:47 -04:00
arnydo
41c781318c
Add ADCS in Docs
Add info regarding the ADCS plugin created by "https://github.com/sirferl/lemur".
"lemur_adcs" plugin is part of Lemur by default so I added to main plugins section within Docs.
2019-07-10 10:08:14 -04:00
Curtis Castrapel
8eb639e366 Initial LetsEncrypt / Celery docs 2019-07-09 11:13:11 -07:00
alwaysjolley
029efeb03a fixing syntax 2019-05-08 09:45:13 -04:00
alwaysjolley
15eb7689ed Adding documentation for Vault and CFSSL Plugin changes 2019-05-08 09:32:46 -04:00
Ronald Moesbergen
8abf95063c Implement a ALLOW_CERT_DELETION option (boolean, default False). When enabled, the certificate delete API call will work and the UI
will no longer display deleted certificates. When disabled (the default), the delete API call will not work (405 method not allowed)
 and the UI will show all certificates, regardless of the 'deleted' flag.
2019-02-14 11:57:27 +01:00
Ronald Moesbergen
5fc5a058b6 Add documentation for the LDAP_IS_ACTIVE_DIRECTORY setting 2018-11-20 10:51:14 +01:00
Curtis
1b77dfa47a
Revert "Precommit - Fix linty things" 2018-08-22 13:21:35 -07:00
Curtis Castrapel
3e9726d9db Precommit work 2018-08-22 10:38:09 -07:00
Steven Reiling
7f3454128d Adds an optional interval variable to notification service's
create_default_expiration_notifications and introduces a new optional
configuration variable, LEMUR_SECURITY_TEAM_EMAIL_INTERVALS, to allow admins
control over the centralized email notification defaults.
2018-07-13 14:08:31 -07:00
Ron Cohen
ae63808678 Update administration.rst () 2018-04-23 12:15:56 -07:00
Titouan Christophe
4e94e51218 [add] Reference lemur-influxdb as 3rd party plugin 2018-04-16 20:15:25 +02:00
lmitul
6a762d463f Documenting connection pool config settings () 2018-04-10 16:50:58 -07:00
iTitou
a316cbba73 [add] Docs and default config for metric plugins () 2018-03-27 15:51:32 -07:00
James Chuong
763c5e8356 Add DIGICERT_ORDER_TYPE to Digicert plugin ()
* Add DIGICERT_ORDER_TYPE to Digicert plugin

This allows lemur.conf.py to control which kind of certificate to
order.  User defined options are not currently supported in the the UI,
so we cannot create multiple Digicert authorities at runtime for
separate certificate types.

Change-Id: I06c216ec3c476e0001b240530626a86464be999e

* Fix Mock URL for Digicert test

Change-Id: Ida7c0ed1bd120c9024bea091c03b7d1ecfa66498

* Add documentation for DIGICERT_ORDER_TYPE

Change-Id: I0bc347883b628416eb7f13a7c60c937dcb6ae0c2
2018-01-13 18:06:17 -08:00
Johannes Langer
9319dda0ec Added ability to ignore cert for oauth2 provider ()
* Added ability to ignore cert for oauth2 provider

This is useful for development environments where the OAuth provider
doesn't have a valid cert!

* Setting default for OAUTH2_VERIFY_CERT to true
2017-10-20 16:36:14 -07:00
Marti Raudsepp
97d83890e0 Various minor cleanups and fixes ()
* Documentation fixes

* Various docstring and help string fixes

* Minor code cleanups

* Removed redundant .gitignore entry, ignored package-lock.json.
* 'return' statement in certificates.service.render was redundant
* Split up too long line
* Non-matching tags in templates
2017-09-25 15:33:42 -07:00
Marti Raudsepp
ec5dec4a16 Add option to disable owner email address in CSR subject () 2017-09-25 15:32:08 -07:00
Ian Stahnke
a6dab5e1ee a bit more ldap documentaion () 2017-09-21 06:00:26 -07:00
Ian Stahnke
ff4d1edd63 remove duplicated ldap_bind_uri description () 2017-09-04 10:12:40 -07:00
Ian Stahnke
79d12578c7 basic ldap support () 2017-09-03 20:41:43 -07:00
Marti Raudsepp
82b43b5a9d Create signal hooks and handler for dumping CSR and certificate details () 2017-08-28 17:35:56 -07:00
Marti Raudsepp
7762d6ed52 Reworked sensitive domain name and restriction logic ()
* This is a fix for a potential security issue; the old code had edge
  cases with unexpected behavior.
* LEMUR_RESTRICTED_DOMAINS is no more, instead LEMUR_WHITELISTED_DOMAINS
  is a list of *allowed* domain name patterns. Per discussion in PR 
* Domain restrictions are now checked everywhere: in domain name-like
  CN (common name) values and SAN DNSNames, including raw CSR requests.
* Common name values that contain a space are exempt, since they cannot
  be valid domain names.
2017-08-16 19:24:49 -07:00
Asbjørn Kjær
35cc7ef8d7 Adding support for private DigiCert certificates () 2017-06-14 09:20:24 -07:00
kevgliss
2a2d5a5583 Adding an example digicert url. Closes . () 2017-05-01 10:59:49 -07:00
Rick Breidenstein
0bbe2b0331 config LEMUR_MAIL to LEMUR_EMAIL ()
I referenced https://github.com/Netflix/lemur/blob/master/lemur/plugins/lemur_email/plugin.py and it appears this configuration option should be "LEMUR_EMAIL"
2017-04-28 15:01:21 -07:00
Paul Van de Vreede
604cd60dbe Return correct intermediate certificate on digicert creation. ()
This commit also removes the unused DIGICERT_INTERMEDIATE env
var as it is not used.
2017-04-27 09:14:20 -07:00
Nevins
0326e1031f adding generic OAuth2 provider ()
* adding support for Okta Oauth2

* renaming to OAuth2

* adding documentation of options

* fixing flake8 problems
2017-02-03 10:36:49 -08:00
Marti Raudsepp
71ddbb409c Minor documentation fixes/tweaks ()
Mostly typos, grammar errors and inconsistent indentation in code
examples.

Some errors detected using Topy (https://github.com/intgr/topy), all
changes verified by hand.
2016-12-14 09:29:04 -08:00
kevgliss
a40bc65fd4 Default authority. ()
* Enabling the specification of a default authority, if no default is found then the first available authority is selected

* PEP8

* Skipping tests relying on keytool
2016-12-01 15:42:03 -08:00
kevgliss
f141ae78f3 Typo. () 2016-11-10 14:40:59 -08:00
kevgliss
89470a0ce0 Adding default validity and retry logic. () 2016-11-10 11:23:37 -08:00
kevgliss
25a6c722b6 Adding digicert documentation. () 2016-11-08 14:56:05 -08:00
Neil Schelly
f990f92977 Fixing typo in documentation for LEMUR_DEFAULT_ORGANIZATIONAL_UNIT spelling () 2016-10-27 20:26:28 -07:00
Charles Hendrie
cd9c112218 Implement a CFSSL issuer plugin ()
* Implement CFSSL issuer plugin

Implement a Lemur plugin for generating certificates from the open
source certificate authority CFSSL
(https://github.com/cloudflare/cfssl). The plugin interacts with CFSSL
through the CFSSL REST API. The CFSSL configuration is defined in the
lemur.conf.py property file using property names prefixed with "CFSSL_".

* Update documentation to include CFSSL plugin
2016-10-22 00:52:18 -07:00
kevgliss
dcb18a57c4 Adds option to restrict certificate expiration dates to weekdays. ()
* Adding ability to restrict certificate creation to weekdays.

* Ensuring that we test for weekends.
2016-10-15 00:04:35 -07:00
JohnTheodore
35cfb50955 add variables to the documentation forwq oauth2 () 2016-10-11 17:23:25 -07:00
kevgliss
afb66df1a4 Adding plugin information to docs. ()
* Adding documentation about the installed plugins.

* Adding new default option.
2016-06-29 10:08:54 -07:00
kevgliss
dc198fec8c Docs ()
* Adding release info.

* adding some fields

* Adding Source Plugin change.

* Updating docs
2016-06-03 08:28:09 -07:00
kevgliss
b9fe359d23 Fixes Renames sync_sources function to sync to align documentation. 2016-04-25 11:21:25 -07:00
kevgliss
967c7ded8d Improving documentation layout 2015-12-31 11:12:56 -08:00