Commit Graph

140 Commits

Author SHA1 Message Date
Jeff Hodges def66fc85d Merge branch 'master' into index-fix 2015-09-10 12:37:03 -07:00
Jacob Hoffman-Andrews 998ffc79cb Do GoodKey checking in WFE. 2015-09-09 20:30:55 -04:00
Jacob Hoffman-Andrews 09c2a05a01 Fix index method.
The HTML reply pointed to the new-reg URL, when it should point to the
directory.

Also fix https://github.com/letsencrypt/boulder/issues/717 by checking first
whether the request path is exactly "/" and giving 404 otherwise.
2015-09-09 16:50:54 -04:00
Jacob Hoffman-Andrews e44126a034 Fix path for clock import. 2015-09-09 00:24:49 -04:00
Jeff Hodges 6dcba1ae49 allow NULL expires in authz on validation failure
The RA did not have any code to test what occurred when a challenge
failed. This let in the authz schema change in #705.

This change sets the expires column in authz back to NULLable and fixes
the RA tests (including, using clock.Clocks in the RA).

Fixes #744.
2015-09-04 12:14:24 -07:00
Jacob Hoffman-Andrews 2a8804b792 Merge branch 'master' into test-js-content-length
Conflicts:
	wfe/web-front-end_test.go
2015-09-02 23:23:53 -04:00
Roland Shoemaker d70ebf6c09 Merge master 2015-09-01 14:39:26 -07:00
Roland Bracewell Shoemaker fe00decc92 Merge pull request #697 from letsencrypt/revoke-split
Split RA revoke method
2015-09-01 14:08:33 -07:00
Jeff Hodges dedb5f96a7 clean up some pointer type conversions
I grepped around and only found these.
2015-08-31 23:51:43 -07:00
Roland Shoemaker e54d3d322e Merge branch 'master' into blacklist 2015-08-31 15:39:24 -07:00
Roland Shoemaker 1ad7bea579 Move PA construction out of other authority constructors 2015-08-31 15:33:03 -07:00
Roland Shoemaker d11d1ed774 Rename admin-revoker RA call 2015-08-30 22:33:36 -07:00
Jacob Hoffman-Andrews ae3e41dffb Refactor WFE tests to pass with content-length.
This also factors out some of the complexity of the test into a helper function.
2015-08-30 12:59:46 -04:00
Jacob Hoffman-Andrews 9fa1e02d7d Require content length. 2015-08-30 12:59:43 -04:00
Jacob Hoffman-Andrews e370d1276b Split up WFE Authorization function.
This function splits out Authorization into its three separate cases:
GET a challenge
POST a challenge
GET an authorization

This is a refactoring I needed to do on the way to
https://github.com/letsencrypt/boulder/issues/638. I split it out to avoid
having that change grow too big and full of ancillary refactorings.
2015-08-28 19:07:28 -07:00
Roland Shoemaker 82ea4aba31 Rest of RPC layer and splitting 2015-08-28 00:00:03 -07:00
Roland Shoemaker a4aa450ee6 Switch to custom revocation code type 2015-08-27 17:09:41 -07:00
Roland Shoemaker d6b09c2cf9 Clean up 2015-08-27 14:50:00 -07:00
Roland Shoemaker 0e1e38011a Review fixes pt. 2 2015-08-26 12:09:15 -07:00
Roland Shoemaker 4fb747ead1 Merge master 2015-08-15 16:50:57 -07:00
Roland Shoemaker b9913a2b41 Review fixes 2015-08-14 17:14:02 -07:00
Roland Shoemaker 1a2825138d Actually wire everything into the PADB 2015-08-06 16:57:38 -07:00
Jeff Hodges 0f03494d56 use pointer to AcmeURL everywhere
This has the benefit of not requiring us to copy very fat url.URL
objects when we pass them to funcs or call their methods.
2015-08-05 18:23:38 -07:00
Richard Barnes 652702bd7f Merge master 2015-07-30 13:47:10 -04:00
Richard Barnes 5ea17d980a Merge master 2015-07-29 16:37:39 -04:00
Roland Shoemaker 272fbbd480 Merge pull request #541 from r0ro/remove-authz-newcert
Remove the need for a client to send authorizations url when requesting new certificate
2015-07-29 13:10:46 -07:00
Richard Barnes 7b5581a046 Remove recovery token in WFE test 2015-07-29 15:53:03 -04:00
Richard Barnes 9e87cef807 Further test fixes 2015-07-29 12:20:00 -04:00
Richard Barnes 26b140b0cc Removing unused literals and exposing more error info 2015-07-29 11:17:26 -04:00
Richard Barnes 911827cd2d Removing extraneous quoting
I know this should go in a separate PR, but it's so trivial it's not worth it.
2015-07-29 10:27:57 -04:00
Richard Barnes f016d02365 Unit tests for 'resource' 2015-07-29 10:24:44 -04:00
Romain Fliedel 36cba96fb2 update tests after jwk encoding fix. 2015-07-28 16:25:30 +02:00
Romain Fliedel 4bbd0fdccd Remove the need for a client to submit authorization urls when requesting a certificate. 2015-07-27 20:26:56 +02:00
Roland Shoemaker 713f7ea352 Merge pull request #528 from letsencrypt/remove_posts
remove dead POST code in wfe.Certificate
2015-07-25 16:23:25 -07:00
Jeff Hodges b0402d1880 add POST back to wfe Authz test 2015-07-25 14:16:57 -07:00
Roland Shoemaker eb3ef4c98c Merge pull request #509 from r0ro/missing-reg-link
Add missing link headers for registration resource update.
2015-07-24 18:26:24 -07:00
Jeff Hodges 0ea7b36b6a remove dead POST code in wfe.Certificate
The Certificate endpoint (a.k.a. /acme/cert) had code that took POSTs
but always returned errors when they were hit.
2015-07-24 16:46:49 -07:00
Jacob Hoffman-Andrews 9423467142 Switch to our own fork of go-jose.
This is the result of `godep save -r ./...` and
`git rm -r -f Godeps/_workspace/src/github.com/square`

Our fork is currently at the head of go-jose when Richard made the local nonce
changes, with the nonce changes added on top. In other words, the newly created
files are exactly equal to the deleted files.

In a separate commit I will bring our own go-jose fork up to the remote head,
then update our deps.

Also note: Square's go-jose repo contains a `cipher` package. Since we don't
make any changes to that package, we leave it imported as-is.
2015-07-24 14:39:00 -07:00
Jacob Hoffman-Andrews 620a012c62 Rewrite go-jose dependencies to our fork. 2015-07-24 14:16:01 -07:00
Romain Fliedel 7a3c061576 Add new test to ensure Link headers are correctly set in Registration/NewRegistration reply. 2015-07-23 18:13:41 +02:00
Jacob Hoffman-Andrews 941df62ad4 Switch to AuditObject for CSR logging.
This allows us to log the remote address and registration object along with the
CSR.

Also, restore part of a comment on CertificateRequest that was deleted.
2015-07-22 16:32:11 -07:00
Jacob Hoffman-Andrews 6952aebeb3 Record initial application CSR.
Fixes https://github.com/letsencrypt/boulder/issues/493.
Also, modify MockSyslogWriter so that it implements the SyslogWriter interface
(no pointer receivers).
2015-07-22 15:34:59 -07:00
Jacob Hoffman-Andrews ce4ca429a6 Merge pull request #502 from letsencrypt/directory
Basic ACME directory endpoint
2015-07-22 15:32:15 -07:00
Jacob Hoffman-Andrews 7fce01b7ce Merge pull request #491 from letsencrypt/cache-headers
WFE cache headers
2015-07-22 15:09:02 -07:00
Roland Shoemaker b093613191 Add cache helper methods and always send static cache max-age 2015-07-21 18:21:48 -07:00
Roland Shoemaker 0e83538b56 Merge master 2015-07-21 17:48:19 -07:00
Jacob Hoffman-Andrews 99c339f850 Merge pull request #498 from tomclegg/490-mock-logs
Add mock for syslog.
2015-07-21 17:40:06 -07:00
Roland Shoemaker 1a3e41ee57 Review fixes 2015-07-21 17:39:16 -07:00
Roland Shoemaker 2d758a7ab6 Basic ACME directory endpoint 2015-07-21 16:55:57 -07:00
Roland Shoemaker 6e03f78ad0 Extend wfe.Certificate tests 2015-07-20 12:27:26 -07:00