Jacob Hoffman-Andrews
19fd285859
Merge pull request #223 from rolandshoemaker/revoker
...
admin-revoker tool
2015-05-26 14:37:33 -07:00
Roland Shoemaker
e1eeebce52
Only run validations against updated challenges (instead of everything)
2015-05-26 17:08:49 +01:00
Roland Shoemaker
d184862427
gofmt and move deniedCSR table creation back to SA
2015-05-25 01:17:28 +01:00
Roland Shoemaker
0ab71bed62
initial revoker work
2015-05-23 12:46:56 +01:00
Richard Barnes
c3b312118e
Add audit logging
...
- Auditing for general errors in executables
- Auditing for improper messages received by WFE
- Automatic audit wlogging of software errors
- Audit logging for mis-routed messages
- Audit logging for certificate requests
- Auditing for improper messages received by WFE
- Add audit events table
- Expect more details in TestRegistration in web-front-end_test.go
- Remove "extra" debug details from web-front-end.go per Issue #174
- Improve test coverage of web-front-end.go
- WFE audit updates for revocation support rebase
- Add audit messages to RPC for Improper Messages and Error Conditions
- Also note misrouted messages
2015-05-18 18:23:08 -07:00
Roland Shoemaker
e1ba291019
Store registration ID with certificate
2015-05-16 13:47:51 -07:00
Roland Shoemaker
faa1d5ac45
review cleanups
2015-05-16 13:25:36 -07:00
Roland Shoemaker
e233fdaa61
switch authz and pending_authz to store registration ID instead of key (and update all the random stuff they touched)
2015-05-14 14:14:36 -07:00
James 'J.C.' Jones
6be5c4910e
Merge pull request #185 from rolandshoemaker/deny-store
...
Store and check previously denied CSRs
2015-05-14 09:03:06 -07:00
Roland Shoemaker
b9745cf894
check key is assosiated with existing registration in verifyPOST
2015-05-13 19:16:20 -07:00
Jacob Hoffman-Andrews
3eed9e3f7c
Move to Square's go-jose library.
2015-05-13 17:36:38 -07:00
Roland Shoemaker
5d5eea7071
switch to only store dns names
2015-05-13 12:08:50 -07:00
Roland Shoemaker
07182500eb
add missing rpc methods
2015-05-12 00:08:48 -07:00
Roland Shoemaker
d95c552ab4
add denied csr table and AddDeniedCSR + AlreadyDeniedCSR methods for checking, added AddDeniedCSR to ra.NewCertificate
2015-05-11 23:02:39 -07:00
Jacob Hoffman-Andrews
7352757086
Add test
2015-05-01 16:01:50 -07:00
Jacob Hoffman-Andrews
79b548ad37
Add interface for RevokeCertificate.
2015-04-30 12:44:17 -07:00
Jacob Hoffman-Andrews
73603c95cf
Add reason code and fix index.
2015-04-30 11:31:36 -07:00
Jacob Hoffman-Andrews
8e30ff81fb
Partly done implementation of revoke.
2015-04-29 18:36:26 -07:00
Jacob Hoffman-Andrews
1d2c6a5d7c
Split out GetCertificate / GetCertificateByShortSerial.
...
Also stub out some initial revocation code.
2015-04-29 11:48:08 -07:00
J.C. Jones
e389f98ba2
Fixes for golint
2015-04-13 16:24:35 -07:00
J.C. Jones
e972647b5e
Serial number get-and-increment method
...
Add stubs for integration with Issue #83 .
2015-04-12 08:10:28 -07:00
J.C. Jones
97b356fcd4
Add a Certificate Authority Database stub
...
* A few tests, but they don't all pass
* needs actual DB code
2015-04-12 08:10:28 -07:00
Richard Barnes
752e91d8eb
Initial policy authority
2015-03-16 12:55:05 -04:00
Richard Barnes
568bad588a
Identifier checking (syntax,blacklist,PSL)
2015-03-16 12:17:31 -04:00
Richard Barnes
96bd7e215a
Further plumbing of registrations
2015-03-15 15:33:05 -04:00
Richard Barnes
d938deb3fd
Separate resources for challenges [initial]
2015-03-14 19:07:16 -04:00
Richard Barnes
8f4ea0efd8
Adapting to point to mainlined JOSE
2015-03-13 13:11:04 -07:00
Richard Barnes
c6673ade2e
Pulling out core module
2015-03-10 13:54:13 -07:00