Commit Graph

481 Commits

Author SHA1 Message Date
d5ae45a0d0 Let's Encrypt has been using a cross-signed intermediate CA by DST Root CA X3, which is included in any older devices' TrustStore.
https://letsencrypt.org/certificates/

Let's Encrypt is transitioning to use the intermediate CA issued by their own root (ISRG X1) starting from September 29th 2020. This is in preparation of concluding the initial bootstrapping of their CA, by having it cross-signed by an older CA.
https://letsencrypt.org/2019/04/15/transitioning-to-isrg-root.html

This PR allows Lemur to pin to the cross-signed ICA (same public/private key pair as the ICA signed by ISRG X1). This will prolong support for incompatible systems.
2020-07-14 17:35:13 -07:00
aa11088944 Remove f from non-f string 2020-07-02 16:48:41 +02:00
a7a309136f fixing whitespace and imports 2020-06-11 14:15:40 -07:00
f834d10f9a moving ultradns tests to separate file 2020-06-11 14:04:17 -07:00
c3b36d697f clarification 2020-06-08 15:17:45 -07:00
904bc9d8b6 Merge branch 'master' into improve-expiry-email 2020-05-27 15:28:41 -07:00
8861cc70cb rewordin 2020-05-26 17:12:47 -07:00
34e3f7c049 improved messaging 2020-05-26 16:38:12 -07:00
cc4fc66c93 Merge branch 'master' into master 2020-05-22 09:57:46 -07:00
8d0007b9c0 fixing the private DNS zone issue.
Private hosted zones will never be visible to third-parties like LetsEncrypt, and Lemur should not consider them as authoritative zones.
This fix, make sure  they are not added to the  dns_provider table.
2020-04-24 15:48:06 -07:00
cee81bd693 updated requirements, fixed unittests, pytest, and distinguidedName ordering 2020-04-09 18:17:05 -07:00
1360d846fd Improve error logging for a couple of use cases 2020-04-08 11:50:42 -07:00
46e0d1953b Merge branch 'master' of github.com:Netflix/lemur into powerdnsplugin_02 2020-04-05 21:47:24 -07:00
f82ec24dfa updating _get_txt_records return values and docstrings 2020-04-05 21:46:33 -07:00
d825616ea6 No need to retry 25 times on DeleteConflict errors 2020-04-01 10:53:17 -07:00
6f3ba23fa0 updating sinlge line of comments 2020-03-30 13:34:24 -07:00
9d9bf9d7ba Merge branch 'powerdnsplugin_02' of github.com:Netflix/lemur into powerdnsplugin_02 2020-03-30 09:02:56 -07:00
d6cc8a8a9a fixing whitespace 2020-03-30 09:01:28 -07:00
2b7e60399c Merge branch 'master' into powerdnsplugin_02 2020-03-27 10:27:33 -07:00
0e314d0028 adding documentation and final cleanup 2020-03-27 10:18:38 -07:00
0149f8b0d3 add support for wildcard and naked domains to PowerDNS module 2020-03-26 22:15:10 -07:00
88c40aa93c Merge branch 'master' into master 2020-03-23 20:31:16 -07:00
697215f8bc better handling of destination plugin errors, and also checking cert expiration before upload 2020-03-21 20:05:35 -07:00
7bd5173da4 Merge with Netflix/lemur master 2020-03-20 20:52:33 +03:00
07dc31bed7 cleaning up whitespace changes 2020-03-16 11:41:05 -07:00
1a19e250bb updating and cleaning up tests 2020-03-16 11:24:17 -07:00
921d52b360 fixing get_dns_challenge() logic so duplicate domains (such as wildcard and not wildcard) do not match the wrong authorziations 2020-03-13 00:03:31 -07:00
be722fb1b3 Fix lint 2020-03-11 20:51:10 +03:00
92a8942727 Fix lint 2020-03-11 15:37:11 +03:00
a6c3b85fe1 Fix lint 2020-03-11 15:15:56 +03:00
ba8e315eed Fix typo 2020-03-11 14:22:04 +03:00
729ed3843d Fix bug wth get_options and slash in name 2020-03-11 14:16:29 +03:00
d3cb0b517a Add format support 2020-03-11 02:27:31 +03:00
ad86cf1fd9 Merge remote-tracking branch 'upstream/master' 2020-03-11 00:29:07 +03:00
e1e7efc96e Merge branch 'master' into powerdnsplugin_01 2020-03-05 15:25:40 -08:00
771e72187a updates based on feedback 2020-03-05 15:24:56 -08:00
5dfb6acb17 adding support for ACME_POWERDNS_VERIFY option to support CA Bundles and disabling Server validation 2020-03-05 14:59:21 -08:00
4a4b3b932e Merge branch 'master' into master 2020-03-04 10:32:10 -08:00
1e81d47793 Merge branch 'renewal_validity_01' of github.com:Netflix/lemur into renewal_validity_01 2020-03-03 17:28:58 -08:00
fdc1e20c23 updating config_mock defaults 2020-03-03 17:27:15 -08:00
38b7d6e5e3 Merge branch 'master' into renewal_validity_01 2020-03-03 14:44:33 -08:00
6c46481ffd simplifying return statement for validity years 2020-03-03 14:40:50 -08:00
318292704d fixing default/max DigiCert validity values 2020-03-03 14:29:17 -08:00
fe67ff2146 Update plugin.py
Fix lint
2020-03-02 09:18:02 +03:00
a8c0adaa4d Merge remote-tracking branch 'upstream/master' 2020-02-27 17:08:35 +03:00
9612d291ed Add path suffix options 2020-02-18 19:16:27 +03:00
2ee60bcdb6 Merge branch 'master' into le_Log_orderurl 2020-02-17 10:30:58 -08:00
e75df1ddc9 Update plugin.py 2020-02-17 19:04:20 +01:00
d29edabefe Merge branch 'master' into le_Log_orderurl 2020-02-17 09:24:51 -08:00
ed3472d029 Update plugin.py 2020-02-17 15:21:29 +01:00