Commit Graph
100 Commits
Author SHA1 Message Date
Lukas Schauer dcdb2940fb removed random prefix from hook bricker 2018-02-14 14:58:11 +01:00
Lukas Schauer 0ade30cc74 hook-bricker now also warns users on per-certificate-config-hooks 2018-02-13 21:45:30 +01:00
Lukas Schauer bc34f3aa86 merged random hook with human-readable-message 2018-02-13 21:34:02 +01:00
Lukas Schauer 5940c55e18 prepared future migration to new acmev2 endpoint 2018-02-07 03:14:29 +01:00
Lukas Schauer 2eedd69ee9 request_failure hook: added http response headers as new parameter 2018-02-06 23:33:28 +01:00
Lukas Schauer be252c7db9 updated changelog 2018-02-06 23:22:53 +01:00
Lukas Schauer 9ebab3e026 added call to random hook to make it clear to hook authors that unknown hooks should just be ignored 2018-02-06 23:16:28 +01:00
Lukas Schauer ad291207d0 fetch account information if missing 2018-02-06 23:08:40 +01:00
Lukas Schauer a7b2af2b92 http_request: make http headers available on fd 4 2018-02-06 23:08:16 +01:00
Lukas Schauer 082ed17a0a added acmev2 staging information to docs 2018-02-06 21:58:42 +01:00
Lukas Schauer dec5ad5840 read url to terms of service from ca directory 2018-02-06 21:58:42 +01:00
Lukas Schauer da67297288 only write csr file if renewal will be requested 2018-02-06 21:19:33 +01:00
Lukas Schauer 83bf2664b0 added a few simple example use cases to example hook script 2018-02-06 21:13:37 +01:00
Lukas Schauer 63854b752b New hook: generate_csr (see example hook script for more information, implements #475, replaces #377) 2018-02-06 20:57:33 +01:00
Lukas Schauer 901f9f76e2 pre-bump version 2018-02-06 20:53:09 +01:00
Lukas Schauer b5de2e26eb sign_domain: Use existing CSR with matching timestamp 2018-02-06 20:41:26 +01:00
Lukas Schauer 73a116e879 Create required certificate and chaincache directories outside of sign_domain 2018-02-06 20:40:32 +01:00
Lukas Schauer 9c35fce61e Pre-generate timestamp outside of sign_domain 2018-02-06 20:39:23 +01:00
Lukas Schauer 87194f6596 Remove additional whitespace from extract_altnames 2018-02-06 20:38:02 +01:00
Lukas Schauer b53cb6643b moved manpage to docs directory 2018-02-06 18:53:21 +01:00
Lukas Schauer fb41783885 automatic discovery of remote acme api version 2018-02-05 19:20:28 +01:00
Lukas Schauer 6d02bfdb42 shrink "logo" a bit 2018-02-03 22:14:43 +01:00
Lukas Schauer 727443483d added acmev2 information to readme 2018-02-03 22:12:32 +01:00
Lukas Schauer 7a0e71c6c2 follow location on http get-requests 2018-02-03 22:03:58 +01:00
Lukas Schauer 45f5c17260 fixed altname extraction of csr with wildcard domains, moved altname extraction from sign_csr to command_sign_csr 2018-02-02 23:47:29 +01:00
Lukas Schauer 61083cf522 disable globbing globally (only allow for cleanup routine) 2018-02-02 23:45:34 +01:00
Lukas Schauer afba7c694c moved deploy_challenge to earlier loop so it works with multiple challenge tokens on the same identifier (important for wildcard certificate), fixed array-name, removed hook-chain warning 2018-01-28 19:48:25 +01:00
Lukas Schauer ec5dbcc816 updated changelog 2018-01-28 06:14:44 +01:00
Lukas Schauer 0f69481e2b rewrote challenge validation to iterate over authorizations instead of altnames (fixes some acmev2 validation edgecases), also removed broken test-script (for now) 2018-01-28 06:13:37 +01:00
Lukas Schauer 6f3fed496d rewrote donation section in readme 2018-01-28 06:13:01 +01:00
Lukas Schauer 5fd93ea874 be more verbose for acme v2 challenge handling 2018-01-27 22:51:39 +01:00
Lukas Schauer 656af8cadc don't fail on nested json array in challenge info 2018-01-13 23:10:31 +01:00
Lukas Schauer 3e521e1c01 fixed domains.txt parsing (theoretically compatible with wildcard domains) 2018-01-13 20:54:55 +01:00
Lukas Schauer 35a9f31643 changelog template, year update 2018-01-13 20:10:32 +01:00
Lukas Schauer 4a811759dc version 0.5.0 2018-01-13 20:08:12 +01:00
Lukas Schauer 2adc57791c Add optional user and group configuration (fixes #434) 2017-12-18 00:35:26 +01:00
Lukas Schauer f35aed6ae6 replace backticks with escaped dollarbracethingy (fixes #438) 2017-12-18 00:01:47 +01:00
Lukas Schauer b6b56d0df7 export certificate alias to be used in hook scripts 2017-12-17 23:54:19 +01:00
Lukas Schauer 13c853d43b also reset configvars after domains loop 2017-12-17 23:51:23 +01:00
Lukas Schauer c62f3d91fc implement certificate aliases as suggested by typingArtist (fixes #396) 2017-12-17 23:50:46 +01:00
Lukas Schauer eb4aaefda1 also inform about still-valid ocsp stapling files (fixes #457) 2017-12-14 00:11:40 +01:00
Lukas Schauer 3d97799d6a always revalidate challenges if --force is set (fixes #370) 2017-11-07 14:43:41 +01:00
Lukas Schauer da3428a84a use nullglob, disable warning on empty CONFIG_D directory 2017-09-21 18:10:01 +02:00
Lukas Schauer b5e178ea75 allow for spaces when extracting commonName from csr (fixes #423) 2017-09-20 15:44:05 +02:00
Lukas Schauer bc20ec79f3 also show freebsd version 2017-09-20 15:31:38 +02:00
Lukas Schauer f838d93f40 stop verification loop after invalid challenge (fixes #431) 2017-09-20 15:17:30 +02:00
Lukas Schauer 58647cab65 added OPENSSL variable to example config (#414) 2017-07-18 15:46:25 +02:00
Lukas Schauer c57ad87e7c fixed error handling on non-2xx http status codes (#413) 2017-07-18 03:29:39 +02:00
Lukas Schauer 2687054d25 cut path from url for ocsp host 2017-07-13 00:53:32 +02:00
Lukas Schauer 2b76d038d3 ocsp fetching should now also work with older openssl versions 2017-07-12 16:00:25 +02:00
Lukas Schauer e339b28159 add host header to ocsp request 2017-07-12 15:33:56 +02:00
Lukas Schauer 4f3bd3e956 fixed exit_hook 2017-07-11 10:06:42 +02:00
Lukas Schauer f86290ea52 revocation: don't fail if certificate already has been revoked (fixes #236) 2017-07-11 01:30:30 +02:00
Lukas Schauer f1bc2b14ba cleanup old ocsp response files 2017-07-11 00:50:05 +02:00
Lukas Schauer 367ef574f1 export altnames so it can be used in hook scripts (fixes #360) 2017-07-11 00:47:37 +02:00
Lukas Schauer 4e7fb80bcd support otherName SAN entries for domain verification (fixes #356) 2017-07-11 00:35:59 +02:00
Lukas Schauer ee75c5dca7 Initial support for fetching OCSP status to be used for OCSP stapling (as suggested in #385) 2017-07-11 00:28:36 +02:00
Lukas Schauer 82ca3ffcd3 added giant donation section to readme (please send me all your money) 2017-07-10 22:48:50 +02:00
Lukas Schauer bb99742aa7 load config for version information but disable verification 2017-07-10 21:36:32 +02:00
Lukas Schauer 60583d3ef9 added hook to run before cron command (fixes #371) 2017-07-10 21:36:10 +02:00
Lukas Schauer cbb661ca17 specify openssl config location when converting CSR to DER (fixes #397) 2017-07-10 20:32:05 +02:00
Lukas Schauer 67cf20765c updated changelog 2017-07-10 20:28:38 +02:00
Lukas Schauer 89377a1004 git: ignore chains directory 2017-07-10 20:28:20 +02:00
Lukas Schauer dc600e39b8 cleanup: also move .pem-revoked files (fixes #237) 2017-07-10 20:27:42 +02:00
Lukas Schauer 16e91b415b added auto-cleanup feature to changelog 2017-07-10 20:23:27 +02:00
Lukas Schauer e6d6882c78 added option to automatically run cleanup routine (implements #389) 2017-07-10 20:21:30 +02:00
Lukas Schauer db18820991 made openssl binary configurable (closes #393, closes #379) 2017-07-10 19:13:52 +02:00
Lukas Schauer 2f775d0e2a remove duplicate -a short option from --account (fixes #410) 2017-07-10 18:21:06 +02:00
Lukas Schauer f2b589430c added version command 2017-07-10 17:21:22 +02:00
Lukas Schauer 533aa80129 replaced source url with dehydrated.de 2017-07-10 17:15:29 +02:00
Lukas Schauer d1f215b652 fixed typos as suggested by @jwilk (closes #369) 2017-07-10 16:55:18 +02:00
Lukas Schauer d685463673 implemented issuer-chain cache 2017-07-10 15:06:50 +02:00
Lukas Schauer 98ad01a110 allow using parts of dehydrated without running the main script (intended for testing parts of the script) 2017-07-10 14:51:55 +02:00
Lukas Schauer 8709d21ef2 updated usage instructions in readme (added --account) 2017-07-10 14:08:29 +02:00
Lukas Schauer 6ebaae416c removed build status from readme (test system seems to be broken...) 2017-07-10 14:07:28 +02:00
Lukas Schauer 7fc4040f47 updated changelog with account-update feature 2017-07-10 14:05:45 +02:00
Lukas Schauer 116386486b release 0.4.0 2017-02-05 15:33:17 +01:00
Lukas Schauer aed4272e97 improved register command (closes #350) 2017-02-05 15:32:29 +01:00
Lukas Schauer ad21b41e27 also test under osx 2017-02-04 13:54:22 +01:00
Lukas Schauer 3d8d320c9f trying to fix compatibility with mawk 2017-02-04 13:32:56 +01:00
Lukas Schauer 449490a981 Merge branch 'simondeziel-fix-example-hook' 2017-01-31 02:58:29 +01:00
Lukas Schauer e5452922e9 whitelist handlers for example hook (fixes #348) 2017-01-30 03:53:59 +01:00
Lukas Schauer ee65261ea8 exclude root certificate from certificate chain 2017-01-30 03:45:21 +01:00
Lukas Schauer 03f0dc18b9 use awk instead of grep for reading trailing line after match (fixes #255) 2017-01-30 00:12:01 +01:00
Lukas Schauer 197ca8e82c Revert "curl: use custom user agent"
This reverts commit a5fde931f8.
2017-01-29 22:56:42 +01:00
Lukas Schauer a5fde931f8 curl: use custom user agent 2017-01-29 22:42:02 +01:00
Lukas Schauer 6a32f20e00 ask user to read and accept license, added register-command, fullchain.pem is now actually the full chain 2017-01-29 22:06:53 +01:00
Lukas Schauer b2376ed437 updated changelog 2017-01-29 16:06:24 +01:00
Lukas Schauer 57197306d7 export some config variables for use within hook scripts 2017-01-29 16:03:59 +01:00
Lukas Schauer 298a7e9aaf added exit_hook hook 2017-01-29 15:48:03 +01:00
Lukas Schauer 0f299623be updated changelog 2017-01-29 14:33:41 +01:00
Lukas Schauer cfc00c42a2 check for diff using command 2017-01-29 14:04:43 +01:00
Lukas Schauer 5d92c3b352 use awk instead of tr for changing case 2017-01-29 14:00:45 +01:00
Lukas Schauer e2e2c362d2 check for mktemp using command (busybox compatibility) 2017-01-29 13:58:42 +01:00
Lukas Schauer b36d638a91 missing filename in config path 2017-01-06 00:40:03 +01:00
Lukas Schauer 84274f7436 moved and rewritten config section of readme 2017-01-06 00:38:13 +01:00
Lukas Schauer de36a63fe6 removed note about project renaming 2017-01-06 00:31:03 +01:00
Lukas Schauer 3c1d2673d1 trying to fix #320 again 2016-12-22 22:56:50 +01:00
Lukas Schauer 69eea9527f removed some spaces 2016-12-22 10:00:05 +01:00
Lukas Schauer 7f30826a6d removed temporary wrapper script 2016-12-19 01:21:43 +01:00