Infra
/
lemur
5
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
2,150 Commits 4 Branches 45 Tags 7.5 MiB
Commit Graph

2150 Commits

Author SHA1 Message Date
Hossein Shafagh 93ce259fb2
Merge branch 'master' into verify-cert-chain 2019-03-07 12:46:19 -08:00
Hossein Shafagh bd27932783
Merge pull request #2529 from rmoesbergen/allow-cert-deletion 
Implement ALLOW_CERT_DELETION setting
 2019-03-07 12:45:53 -08:00
alwaysjolley 7b0a3cf781 Merge branch 'lemur_vault_plugin' of github.com:/alwaysjolley/lemur into lemur_vault_plugin 2019-03-07 15:42:40 -05:00
alwaysjolley 752c9a086b fixing error handling and better data formating 2019-03-07 15:41:29 -05:00
Hossein Shafagh 92b60b279a
Merge branch 'master' into verify-cert-chain 2019-03-06 11:15:32 -08:00
Hossein Shafagh b8d3a4f9aa
Update requirements.in 2019-03-06 11:13:34 -08:00
Hossein Shafagh 43b1d6217a
Merge branch 'master' into allow-cert-deletion 2019-03-06 10:59:33 -08:00
Hossein Shafagh 98ece58342
Merge branch 'master' into lemur_vault_plugin 2019-03-06 10:59:03 -08:00
Hossein Shafagh b5d255d7c9
Merge pull request #2646 from Netflix/2636-config-ignore 
Ensuring that configs passed via the command line are respected.
 2019-03-06 10:58:42 -08:00
Hossein Shafagh f974e29cc9
Merge branch 'master' into verify-cert-chain 2019-03-06 09:36:10 -08:00
Hossein Shafagh 45cb0f0513
Merge branch 'master' into allow-cert-deletion 2019-03-06 09:35:10 -08:00
alwaysjolley 4904e6e223
Merge branch 'master' into lemur_vault_plugin 2019-03-06 12:06:10 -05:00
Kevin Glisson cc6d53fdeb Ensuring that configs passed via the command line are respected. 2019-03-05 15:39:37 -08:00
Curtis 721fb8ec70
Merge pull request #2639 from castrapel/really_downgrade_kombu 
Downgrade Kombu for real this time
 2019-03-05 09:46:36 -08:00
Curtis Castrapel 077ae1eedd Downgrade Kombu for real this time 2019-03-05 09:45:59 -08:00
Curtis b878c7e2db
Merge pull request #2638 from castrapel/downgrade_kombu2 
downgrade kombu
 2019-03-05 07:50:23 -08:00
Curtis Castrapel 20ac4bd3dd downgrade kombu 2019-03-05 07:34:30 -08:00
alwaysjolley a1cb8ee266 fixing lint 2019-03-05 07:37:04 -05:00
alwaysjolley 880eaad6cb Merge branch 'lemur_vault_plugin' of github.com:/alwaysjolley/lemur into lemur_vault_plugin 2019-03-05 07:22:18 -05:00
alwaysjolley 4a027797e0 fixing linting issues 2019-03-05 07:19:22 -05:00
Hossein Shafagh 54ad3ba777
Merge branch 'master' into verify-cert-chain 2019-03-04 17:55:36 -08:00
Hossein Shafagh c9bcd29082
Merge branch 'master' into lemur_vault_plugin 2019-03-04 17:55:00 -08:00
Curtis 130688252a
Merge pull request #2630 from castrapel/relax_search 
Relax search; update requirements
 2019-03-04 11:14:16 -08:00
Curtis Castrapel dd2900bdbc Relax search;update requirements 2019-03-04 10:04:06 -08:00
Marti Raudsepp 10cec063c2 Check that stored certificate chain matches certificate 
Similar to how the private key is checked.
 2019-03-04 17:10:59 +02:00
alwaysjolley 20518bc377
Merge branch 'master' into lemur_vault_plugin 2019-03-01 09:58:43 -05:00
alwaysjolley 5d2f603c84 renamed vault destination plugin to avoid conflict with vault pki plugin 2019-03-01 09:49:52 -05:00
Ronald Moesbergen 63de8047ce Return 'already deleted' instead of 'not found' when cert has already been deleted 2019-02-27 09:38:25 +01:00
Ronald Moesbergen a9735e129c Merge branch 'master' into allow-cert-deletion 2019-02-27 09:28:48 +01:00
Hossein Shafagh 930af17802
Merge pull request #2588 from hosseinsh/fixing-signature-verify-ecc 
Fixing signature verify ecc
 2019-02-26 17:12:21 -08:00
Hossein Shafagh 658c58e4b6 clarifying comments 2019-02-26 17:04:43 -08:00
Hossein Shafagh 9dbae39604 updating cryptography API call, to create right signing algorithm object. 2019-02-26 16:42:26 -08:00
Hossein Shafagh 16a18cc4b7 adding more edge test cases for EC-certs 2019-02-26 16:42:26 -08:00
Hossein Shafagh aec7c7b0bc
Merge branch 'master' into fixing-signature-verify-ecc 2019-02-26 09:28:48 -08:00
Curtis 38827cc66b
Merge pull request #2563 from rmoesbergen/fix-blah-as-alias 
Fix setting alias to "blah" when exporting without explicit alias
 2019-02-26 09:21:59 -08:00
alwaysjolley 53301728fa Moved url to config file instead of plugin option. One one url can be supported 
unless both the token and url are moved to the plugin options.
 2019-02-26 09:15:12 -05:00
Hossein Shafagh bc35ae90d0
Merge branch 'master' into allow-cert-deletion 2019-02-25 20:03:47 -08:00
Hossein Shafagh d37943a17f
Merge branch 'master' into fix-blah-as-alias 2019-02-25 20:03:27 -08:00
Hossein Shafagh 141500f4aa
Merge branch 'master' into fixing-signature-verify-ecc 2019-02-25 20:03:18 -08:00
Hossein Shafagh 6e4f400d93
Merge pull request #2589 from hosseinsh/update-reqs-022519 
updating requirements
 2019-02-25 20:03:02 -08:00
Hossein Shafagh 65cbe7c77e
Merge branch 'master' into allow-cert-deletion 2019-02-25 19:25:31 -08:00
Hossein Shafagh 0eefb9e355
Merge branch 'master' into fix-blah-as-alias 2019-02-25 19:25:09 -08:00
Hossein Shafagh de129037e1
Merge branch 'master' into fixing-signature-verify-ecc 2019-02-25 19:24:54 -08:00
Hossein Shafagh 9159520716
Merge branch 'master' into update-reqs-022519 2019-02-25 19:24:38 -08:00
Hossein Shafagh e64de7d312 updating requirements 2019-02-25 19:12:20 -08:00
Hossein Shafagh 60cd28f516
Merge pull request #2567 from hosseinsh/req-update-022119 
updating requirements
 2019-02-25 19:10:00 -08:00
Hossein Shafagh 40fac02d8b the check_cert_signature() method was attempting to compare RSA and ECC signatures. 
If a ec public-key certificate is signed with an RSA key, then it can't be a self-signed certificate, in which case we just raise InvalidSignature.
 2019-02-25 19:05:54 -08:00
alwaysjolley cd65a36437 - support multiple bundle configuration, nginx, apache, cert only 
- update vault destination to support multi cert under one object
- added san list as key value
- read and update object with new keys, keeping other keys, allowing
us to keep an iterable list of keys in an object for deploying multiple
certs to a single node
 2019-02-25 09:42:07 -05:00
Hossein Shafagh 14d8596b8a updating requirements 2019-02-21 20:19:14 -08:00
Ronald Moesbergen ef0c08dfd9 Fix: when no alias is entered when exporting a certificate, the alias is set to 'blah'. 
This fix sets it to the common name instead.
 2019-02-21 16:33:43 +01:00