Hossein Shafagh
|
e58ff476c9
|
Merge branch 'master' into jwks_validation_error_control
|
2019-05-07 09:05:41 -07:00 |
|
Curtis
|
22caaa0c95
|
Merge branch 'master' into fix_userinfo_authorization
|
2019-05-07 07:48:47 -07:00 |
|
Curtis
|
e65154b48e
|
Merge branch 'master' into develop
|
2019-05-07 07:36:51 -07:00 |
|
alwaysjolley
|
ef7a8587fe
|
Merge branch 'lemur_vault_source' of github.com:/alwaysjolley/lemur into lemur_vault_source
|
2019-05-07 10:06:09 -04:00 |
|
alwaysjolley
|
b0c8901b0a
|
lint cleanup
|
2019-05-07 10:05:01 -04:00 |
|
alwaysjolley
|
36ce1cc7ef
|
Merge branch 'master' into lemur_vault_source
|
2019-05-07 09:41:50 -04:00 |
|
alwaysjolley
|
fb3f0bd72a
|
adding Vault Source plugin
|
2019-05-07 09:37:30 -04:00 |
|
Daniel Iancu
|
a7af3cf8d2
|
Fix Cloudflare DNS
|
2019-05-07 03:05:24 +03:00 |
|
Jose Plana
|
deed1b9685
|
Don't fail if googleGroups is not found in user profile
|
2019-05-06 12:30:25 +02:00 |
|
Jose Plana
|
6c99e76c9a
|
Better error management in jwks token validation
|
2019-05-06 12:27:43 +02:00 |
|
Jose Plana
|
2063baefc9
|
Fixes userinfo using Bearer token
|
2019-05-06 12:23:24 +02:00 |
|
Curtis Castrapel
|
3a1da72419
|
nt
|
2019-04-29 13:57:04 -07:00 |
|
Curtis Castrapel
|
6e3f394cff
|
Updated requirements ; Revert change and require DNS validation by provider
|
2019-04-29 13:55:26 -07:00 |
|
Curtis Castrapel
|
1a90e71884
|
Move ACME host validation logic prior to R53 host modification
|
2019-04-26 17:27:44 -07:00 |
|
Curtis Castrapel
|
333ba8030a
|
Ensure hostname is lowercase when comparing DNS challenges. ACME will automatically lowercase the hostname
|
2019-04-26 15:45:04 -07:00 |
|
Curtis Castrapel
|
1a3ba46873
|
More retry changes
|
2019-04-26 10:18:54 -07:00 |
|
Curtis Castrapel
|
1e64851d79
|
Strip out self-polling logic and rely on ACME; Enhance ELB logging and retries
|
2019-04-26 10:16:18 -07:00 |
|
Curtis
|
8eef95b58e
|
Merge branch 'master' into expose_verisign_exception
|
2019-04-25 19:15:55 -07:00 |
|
Curtis Castrapel
|
dcdfb32883
|
Expose verisign exceptions
|
2019-04-25 19:14:15 -07:00 |
|
Curtis Castrapel
|
39584f214b
|
Process DNS Challenges appropriately (1 challenge -> 1 domain)
|
2019-04-25 15:12:52 -07:00 |
|
Curtis Castrapel
|
2bc604e5a9
|
Better metrics and error reporting
|
2019-04-25 13:50:41 -07:00 |
|
Curtis Castrapel
|
272285f64a
|
Better exception handling, logging, and metrics for ACME flow
|
2019-04-24 15:26:23 -07:00 |
|
Curtis
|
0f9b0f39f7
|
Merge branch 'master' into add-pending-certificate-upload
|
2019-04-24 09:34:35 -07:00 |
|
alwaysjolley
|
a801112cf6
|
Merge branch 'master' into lemur_vault_plugin
|
2019-04-23 07:07:39 -04:00 |
|
alwaysjolley
|
85efb6a99e
|
cleanup tmp files
|
2019-04-23 07:06:52 -04:00 |
|
Hossein Shafagh
|
9b38761153
|
Merge branch 'master' into add-pending-certificate-upload
|
2019-04-22 11:47:02 -07:00 |
|
alwaysjolley
|
f9dadb2670
|
fixing validation
|
2019-04-22 09:38:44 -04:00 |
|
alwaysjolley
|
8dccaaf544
|
simpler validation
|
2019-04-22 07:58:01 -04:00 |
|
alwaysjolley
|
1667c05742
|
removed unused functions
|
2019-04-18 13:57:10 -04:00 |
|
alwaysjolley
|
b39e2e3f66
|
Merge branch 'master' into lemur_vault_plugin
|
2019-04-18 13:55:45 -04:00 |
|
alwaysjolley
|
fb3b0e8cd7
|
adding regex filtering
|
2019-04-18 13:52:40 -04:00 |
|
Jose Plana
|
7dd9268ca7
|
Allow uploading a signed cert for a pending certificate.
|
2019-04-18 00:46:39 +02:00 |
|
Curtis
|
8177e12f3f
|
Merge branch 'master' into rewrite-java-keystore-use-pyjks
|
2019-04-17 10:43:44 -07:00 |
|
Hossein Shafagh
|
52f939658f
|
Merge branch 'master' into rewrite-java-keystore-use-pyjks
|
2019-04-17 10:31:58 -07:00 |
|
Curtis
|
f6afcc6d21
|
Merge branch 'master' into master
|
2019-04-17 10:28:46 -07:00 |
|
Javier Ramos
|
58dd424de8
|
Prevent potential NoneType not subscriptable
Fix when data['extensions']['subAltNames']['names'] is none
|
2019-04-17 18:33:52 +02:00 |
|
Jose Plana
|
771f2ebc47
|
Use SAN_CERT_CSR
|
2019-04-13 11:01:36 +02:00 |
|
Jose Plana
|
770729a72e
|
Allow csr to be empty during upload
|
2019-04-13 01:17:12 +02:00 |
|
Hossein Shafagh
|
2ff811ae71
|
updating cryptography API call, to create right signing algorithm object.
|
2019-04-13 00:57:48 +02:00 |
|
Hossein Shafagh
|
09796cf7c9
|
the check_cert_signature() method was attempting to compare RSA and ECC signatures.
If a ec public-key certificate is signed with an RSA key, then it can't be a self-signed certificate, in which case we just raise InvalidSignature.
|
2019-04-13 00:57:48 +02:00 |
|
Jose Plana
|
406753fcde
|
Fix PEP8
|
2019-04-13 00:49:35 +02:00 |
|
Jose Plana
|
a5570d07bc
|
Added some documentation for API users.
|
2019-04-13 00:48:19 +02:00 |
|
Jose Plana
|
c1b02cc8a5
|
Allow uploading csr along with certificates
|
2019-04-13 00:48:19 +02:00 |
|
Hossein Shafagh
|
df8d4e0892
|
Merge branch 'master' into rewrite-java-keystore-use-pyjks
|
2019-04-12 09:38:50 -07:00 |
|
Hossein Shafagh
|
ceb335f3ab
|
Merge branch 'master' into master
|
2019-04-12 09:38:41 -07:00 |
|
alwaysjolley
|
9ecc19c481
|
adding san filter
|
2019-04-12 09:53:06 -04:00 |
|
Hossein Shafagh
|
6d67ec7e34
|
removing unused import
|
2019-04-11 17:34:02 -07:00 |
|
Hossein Shafagh
|
512e1a0bdd
|
fixing typos
|
2019-04-11 17:17:28 -07:00 |
|
Hossein Shafagh
|
6ec84a398c
|
checking for None
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
69c00c4db5
|
upon creating a new destination, we also add it as source, if the plugin defines this as an option
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
d7abf2ec18
|
adding a new util method for setting options
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
557fac39b5
|
refactoring the sync job into a service method that we can also call when adding a new destination
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
d1ead4b79c
|
removing the announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
5900828051
|
simple hardcoded announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
818da6653d
|
removing the announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
e1a67e9b4e
|
simple hardcoded announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
84dfdd0600
|
removing the announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
ba691a26d4
|
simple hardcoded announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
b66fac0494
|
removing the announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
1bda246df2
|
simple hardcoded announcement
|
2019-04-11 17:13:47 -07:00 |
|
Hossein Shafagh
|
9a210c055a
|
Merge branch 'master' into hshafagh-src-dst-register
|
2019-04-11 15:36:48 -07:00 |
|
Hossein Shafagh
|
2459234147
|
removing lines
|
2019-04-11 14:34:26 -07:00 |
|
Hossein Shafagh
|
60edab9f6d
|
cleaning up
|
2019-04-11 14:12:31 -07:00 |
|
Hossein Shafagh
|
ec3d2d7316
|
fixing typo
|
2019-04-11 13:51:43 -07:00 |
|
Hossein Shafagh
|
83d408b238
|
Merge branch 'master' into hosseinsh-celeryjob-sync-src-dst
|
2019-04-11 13:30:12 -07:00 |
|
Hossein Shafagh
|
266c83367d
|
avoiding hard-coded plugin names
|
2019-04-11 13:29:37 -07:00 |
|
Hossein Shafagh
|
f185df4f1e
|
bringing class AWSDestinationPlugin(DestinationPlugin) after AWSSourcePlugin.slug, such that we can do: sync_as_source_name = AWSSourcePlugin.slug
|
2019-04-11 13:28:58 -07:00 |
|
Curtis Castrapel
|
2ff57e932c
|
Update requirements - upgrade to py37
|
2019-04-10 15:40:48 -07:00 |
|
Hossein Shafagh
|
d628e97035
|
Merge branch 'master' into hosseinsh-celeryjob-sync-src-dst
|
2019-04-10 09:47:06 -07:00 |
|
Hossein Shafagh
|
bc8c7e114a
|
Merge branch 'master' into hshafagh-src-dst-register
|
2019-04-09 20:52:33 -07:00 |
|
Hossein Shafagh
|
f3d0536800
|
removing hardcoded rules, to give more flexibility into defining new source-destinations
|
2019-04-09 20:49:07 -07:00 |
|
Javier Ramos
|
bfc4f940da
|
Merge branch 'master' into master
|
2019-04-09 18:06:09 +02:00 |
|
Hossein Shafagh
|
64c6bb2475
|
Merge branch 'master' into rewrite-java-keystore-use-pyjks
|
2019-04-09 08:28:05 -07:00 |
|
Marti Raudsepp
|
dbf34a4d48
|
Rewrite Java Keystore/Truststore support based on pyjks library
|
2019-04-06 20:24:46 +03:00 |
|
Javier Ramos
|
d80a6bb405
|
Added tests for CSR parsing into CertificateInputSchema
|
2019-04-01 08:44:40 +02:00 |
|
Ryan DeShone
|
e10007ef7b
|
Add support for Vault KV API v2
This adds the ability to target KV API v1 or v2.
|
2019-03-29 10:32:49 -04:00 |
|
Javier Ramos
|
b86e381e20
|
Parse SubjectAlternativeNames from CSR into Lemur Certificate
|
2019-03-27 13:46:33 +01:00 |
|
Hossein Shafagh
|
d2e969b836
|
better synching of source and destinations
|
2019-03-26 18:20:14 -07:00 |
|
Curtis
|
4018c68d49
|
Merge branch 'master' into authority_validation_LE_errors
|
2019-03-25 08:34:10 -07:00 |
|
Curtis Castrapel
|
c2158ff8fb
|
Add order URI during LE cert creation failure; Fail properly when invalid CA passed; Update reqs
|
2019-03-25 08:28:23 -07:00 |
|
Curtis
|
8a42cfa345
|
Merge branch 'master' into ghjaramos/master
|
2019-03-21 08:07:44 -07:00 |
|
alwaysjolley
|
fa4a5122bc
|
fixing file read to trim line endings and cleanup
|
2019-03-20 14:59:04 -04:00 |
|
alwaysjolley
|
f99b11d50e
|
refactor url and token to support muiltiple instances of vault
|
2019-03-20 13:51:06 -04:00 |
|
Javier Ramos
|
9e5496b484
|
Update schemas.py
|
2019-03-15 10:19:25 +01:00 |
|
Javier Ramos
|
f7452e8379
|
Parse DNSNames from CSR into Lemur Certificate
|
2019-03-15 09:29:23 +01:00 |
|
alwaysjolley
|
157db684c3
|
Merge branch 'master' into lemur_vault_plugin
|
2019-03-14 11:09:01 -04:00 |
|
Curtis
|
c445297357
|
Update celery.py
|
2019-03-12 15:41:24 -07:00 |
|
Curtis
|
f38e5b0879
|
Update celery.py
|
2019-03-12 15:29:04 -07:00 |
|
Curtis
|
1a5a91ccc7
|
Update celery.py
|
2019-03-12 15:11:13 -07:00 |
|
Curtis
|
3b3faa66f4
|
Merge branch 'master' into skip_duplicate_tasks
|
2019-03-12 14:53:42 -07:00 |
|
Curtis Castrapel
|
d220e9326c
|
Skip a task if similar task already active
|
2019-03-12 14:45:43 -07:00 |
|
alwaysjolley
|
57d3f3d5a5
|
Merge branch 'master' into lemur_vault_plugin
|
2019-03-08 07:08:56 -05:00 |
|
alwaysjolley
|
f1c09a6f8f
|
fixed comments
|
2019-03-07 15:58:34 -05:00 |
|
Hossein Shafagh
|
93ce259fb2
|
Merge branch 'master' into verify-cert-chain
|
2019-03-07 12:46:19 -08:00 |
|
alwaysjolley
|
7b0a3cf781
|
Merge branch 'lemur_vault_plugin' of github.com:/alwaysjolley/lemur into lemur_vault_plugin
|
2019-03-07 15:42:40 -05:00 |
|
alwaysjolley
|
752c9a086b
|
fixing error handling and better data formating
|
2019-03-07 15:41:29 -05:00 |
|
Hossein Shafagh
|
92b60b279a
|
Merge branch 'master' into verify-cert-chain
|
2019-03-06 11:15:32 -08:00 |
|
Hossein Shafagh
|
43b1d6217a
|
Merge branch 'master' into allow-cert-deletion
|
2019-03-06 10:59:33 -08:00 |
|
Hossein Shafagh
|
98ece58342
|
Merge branch 'master' into lemur_vault_plugin
|
2019-03-06 10:59:03 -08:00 |
|
Hossein Shafagh
|
45cb0f0513
|
Merge branch 'master' into allow-cert-deletion
|
2019-03-06 09:35:10 -08:00 |
|