Commit Graph

  • 38069cc4cf
    Upgrade to go-jose v4.1.2 (#510) main Matthew McPherrin 2025-08-01 19:58:06 -0700
  • 6cded12eb4 Upgrade to go-jose v4.1.2 Matthew McPherrin 2025-08-01 15:41:46 -0400
  • e5989c8285 WIP: switch to next release of go-jose Matthew McPherrin 2025-08-01 15:30:02 -0400
  • 48feb2a267
    Merge d7d11ec76c into b656642cf5 Aaron Gable 2025-07-28 15:27:40 -0700
  • d7d11ec76c Revert "Add Location header to finalize response (#85)" no-finalize-loc Aaron Gable 2025-07-28 15:23:59 -0700
  • e42e4d2054
    Merge 72e5118ae2 into b656642cf5 Chris Marchesi 2025-07-11 14:26:27 +0000
  • 72e5118ae2
    ca: allow the promotion of first domain/IP to CN in profile Chris Marchesi 2025-03-25 18:49:39 -0700
  • 5e8c806ebe
    Merge dc8f050bbc into b656642cf5 Jonathan Vanasco 2025-06-19 22:45:43 +0000
  • dc8f050bbc regenerate minica certs * current minica version supports AKID, however root cert had to be regenerated * utilize a fork (pr pending to minica) to remove ClientAuth EKU in preparation for chrome jonathan vanasco 2025-06-19 18:40:31 -0400
  • cb4649dda5
    Merge f6e0a707aa into b656642cf5 Jonathan Vanasco 2025-06-19 15:59:58 +0100
  • 0d7cba80c4
    Merge b36693821e into b656642cf5 Shiloh Heurich 2025-06-19 15:59:58 +0100
  • b656642cf5
    Set Content-Type / Retry-After for custom ARI resp (#506) Jacob Hoffman-Andrews 2025-06-09 16:31:08 -0700
  • dd99838087 Set Content-Type / Retry-After for custom ARI resp Jacob Hoffman-Andrews 2025-06-06 13:27:20 -0700
  • 2283441675
    wfe: return conflict on re-revocation (#505) Jacob Hoffman-Andrews 2025-06-09 12:44:48 -0700
  • 708347cf7d wfe: return conflict on re-revocation Jacob Hoffman-Andrews 2025-06-09 09:43:19 -0700
  • 7829822afd wfe: return conflict on re-revocation Jacob Hoffman-Andrews 2025-06-09 09:43:19 -0700
  • a3d7153630 Set Content-Type for custom ARI response Jacob Hoffman-Andrews 2025-06-06 13:27:20 -0700
  • d52948ce25
    add overriding of ARI response (#501) v2.8.0 Jacob Hoffman-Andrews 2025-06-05 16:15:11 -0700
  • a11d70b7f9 revoked certs stay in DB Jacob Hoffman-Andrews 2025-06-05 10:01:56 -0700
  • a726eaa00e add overriding of ARI response Jacob Hoffman-Andrews 2025-06-04 14:33:24 -0700
  • 39dbb64e14
    wfe: fix a race in `orderForDisplay` (#500) Tim Geoghegan 2025-05-21 09:19:19 -0700
  • ad0cd4830e improve comment Tim Geoghegan 2025-05-21 08:14:40 -0700
  • 27d9c1756f explicitly construct copied order Tim Geoghegan 2025-05-20 15:12:25 -0700
  • 5ea0aea5e5 wfe: fix a race in `orderForDisplay` Tim Geoghegan 2025-05-20 10:03:04 -0700
  • 3bb114e0eb
    Bump golang.org/x/ dependencies (#499) Matthew McPherrin 2025-05-07 16:36:04 -0400
  • 7ffbf04c16 Bump golang.org/x/ dependencies Matthew McPherrin 2025-05-07 12:12:28 -0400
  • 63f4c66abd
    build(deps): bump golang.org/x/net from 0.34.0 to 0.38.0 dependabot[bot] 2025-05-07 16:09:16 +0000
  • 5678a62fe0
    currectly triggers BadSignatureAlgorithmProblem at JWS parse time (#492) orangepizza 2025-05-08 01:08:05 +0900
  • 9f50238c49 Further bump golang.org/x/ dependencies Matthew McPherrin 2025-05-07 12:05:42 -0400
  • c548608cc8
    use newer validation subdomain for dns-account-01 (fix CI eggsampler/acme error) (#498) orangepizza 2025-05-07 23:12:17 +0900
  • c2a79b2ee7
    use newer validation subdomain defined in draft-ietf-acme-dns-account-label orangepizza 2025-05-07 18:20:42 +0900
  • eacd9199e0
    simplyfy error message code orangepizza 2025-05-06 20:24:57 +0900
  • 5ae392d6a5 use new err type from go-jose for badSignatureAlgorithm Seo Suchan 2025-05-02 16:00:09 +0900
  • 5c60c5df24 update dependencies for update go-jose from 4.0.5 to 4.1.0, Seo Suchan 2025-05-02 15:47:17 +0900
  • 6b7368b044 make wfe.parseJWS return acme problems instead of error Seo Suchan 2025-05-02 09:48:52 +0900
  • 363b1eecd8 Update golang.org/x/ dependencies Matthew McPherrin 2025-04-21 23:04:20 -0400
  • 3ff961678c
    build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0 dependabot[bot] 2025-04-15 00:12:43 +0000
  • 18ea130c3e currectly triggers BadSignatureAlgorithmProblem at JWS parse time Seo Suchan 2025-04-01 17:59:19 +0900
  • e07c0e10dd
    Merge branch 'main' into update-dns-account-01 Shiloh Heurich 2025-03-24 12:04:17 -0400
  • 56ceceaae9
    build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 dependabot[bot] 2025-03-13 01:53:59 +0000
  • dc9bf9d200
    Orders don't have a "deactivated" status. (#301) Jacob Hoffman-Andrews 2025-03-07 09:27:00 -0800
  • 802deafc84
    fix(dns-account-01): update validation domain to remove scope per draft-ietf-acme-dns-account-label-00 Shiloh Heurich 2025-02-28 19:23:51 -0400
  • 307a947a4f
    Update golangci-lint (#488) Matthew McPherrin 2025-02-25 11:44:36 -0500
  • 351ab271c6
    build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#487) dependabot[bot] 2025-02-25 08:41:37 -0800
  • 990e5fd695 Remove unused variable Matthew McPherrin 2025-02-25 10:38:32 -0500
  • 072800d88e Switch to current version of golangci-lint Matthew McPherrin 2025-02-25 10:32:11 -0500
  • 2792d7f919 Golang-ci linter updates Matthew McPherrin 2025-02-25 10:30:23 -0500
  • 827fdafdfe
    build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 dependabot[bot] 2025-02-24 22:54:21 +0000
  • 9a99831fce
    Truncate ARI timestamps to millisecond resolution (#485) Aaron Gable 2025-02-21 15:01:28 -0800
  • 8c86ddf7de
    Merge branch 'main' into ari-truncate Aaron Gable 2025-02-21 09:47:12 -0800
  • bc21177aca
    return logical and compliant ARI windows for expiring certs (#484) Jonathan Vanasco 2025-02-21 12:46:22 -0500
  • 99c8bb6ea7 requested changes jonathan vanasco 2025-02-19 16:04:29 -0500
  • b609fb5925 issued concern jonathan vanasco 2025-02-19 15:41:28 -0500
  • 110bbdd8ed response to requested changes jonathan vanasco 2025-02-19 15:32:50 -0500
  • d4a11da923 Truncate ARI timestamps to milisecond resolution Aaron Gable 2025-02-18 17:31:48 -0800
  • c5d928a301 reduce expired past to 1s, simply because it's easier for a visual check jonathan vanasco 2025-02-15 19:34:49 -0500
  • 36973ba27c fixed caps that had reverted jonathan vanasco 2025-02-15 18:22:02 -0500
  • 393df53bff move comments inline jonathan vanasco 2025-02-15 16:57:45 -0500
  • df3e45575d RFC compliance jonathan vanasco 2025-02-15 16:54:47 -0500
  • 0eab6469c2 If the cert has expired, return `RenewalInfoImmediate` instead. If the windowEnd is after the cert's expiry, adjust it to the window end. jonathan vanasco 2025-02-15 16:45:21 -0500
  • bbe7775c27
    Update dependencies (#481) v2.7.0 Matthew McPherrin 2025-01-23 17:35:18 -0800
  • 4582066350 Update dependencies Matthew McPherrin 2025-01-23 11:27:22 -0500
  • 716f857335
    docs: rm mention of subproblems being unimpl'd (#479) Daniel McCarney 2025-01-22 20:02:31 -0500
  • a8f478fb3d
    docs: rm mention of subproblems being unimpl'd Daniel McCarney 2025-01-22 18:09:48 -0500
  • ddbc6bef1a
    Fix(NOISSUE): Fix docker compose file example in README.md (#475) Falko Flessner 2024-10-21 04:12:43 +0200
  • 54f2840b8e Fix(NOISSUE): Fix docker compose file example in README.md Falko Flessner 2024-10-16 14:26:52 +0200
  • e08dd94e72
    Add support for ACME Profiles (#473) Aaron Gable 2024-08-22 08:57:20 -0700
  • 09cd67106f Rename desc->description, prevent loopvar aliasing Aaron Gable 2024-08-21 10:07:19 -0700
  • a2ce23217a Update tests Aaron Gable 2024-08-20 16:16:16 -0700
  • 2a1286c49a Respect requested profile Aaron Gable 2024-08-20 16:13:07 -0700
  • f0cb7b4784 Add support for configuring profiles Aaron Gable 2024-08-20 16:12:55 -0700
  • 8caf067c1b Add profile advertisement to Directory Aaron Gable 2024-08-20 16:10:54 -0700
  • c2b3150141 Add profile field to Order objects Aaron Gable 2024-08-20 16:09:40 -0700
  • ac77969275
    Simplify KU, EKU, and SKID fields of issued certs (#472) Aaron Gable 2024-08-21 13:36:41 -0700
  • 27ca110003 Review comment Aaron Gable 2024-08-21 10:01:27 -0700
  • 4406bef0f4 Simplify KU, EKU, and SKID fields of issued certs Aaron Gable 2024-08-20 15:30:23 -0700
  • 9d3a77137f
    Update golangci-lint to 1.60.2 (#474) Matthew McPherrin 2024-08-21 12:18:04 -0400
  • a6aaf06b86 Update golangci-lint to 1.60.2 Matthew McPherrin 2024-08-21 11:58:59 -0400
  • 17d64a355e
    Update /x/net for compatibility with go1.23 (#470) Aaron Gable 2024-08-13 12:01:05 -0700
  • 6fd74e108b Update /x/net for compatibility with go1.23 Aaron Gable 2024-08-13 09:59:37 -0700
  • 0d2b1a5d16
    also support signing CSRs with Ed25519 keys Tim Ramlot 2024-06-14 09:20:49 +0200
  • 7c154bcd47
    Reject extra command line args and fix README invocation (#467) Matthew McPherrin 2024-05-31 16:57:20 -0400
  • 4658e57ef5
    Merge 59e2782854 into ad9e5bba53 Matthew McPherrin 2024-05-31 16:56:17 -0400
  • 8d7874d3d0 Fix incorrect invocation in README Matthew McPherrin 2024-05-31 16:49:53 -0400
  • fc8d7771c2 Reject stray positional arguments Matthew McPherrin 2024-05-31 16:41:39 -0400
  • ad9e5bba53
    Document exposing API and management ports when not using docker-compose.yaml (#465) v2.6.0 Phil Porada 2024-05-31 14:00:44 -0400
  • 59e2782854 Use latest golangci-lint Matthew McPherrin 2024-05-24 16:41:15 -0400
  • ed41b539a4 More linter fixes Matthew McPherrin 2024-05-24 16:38:21 -0400
  • 4f2f91a223 Fix linter complaints Matthew McPherrin 2024-05-24 16:28:40 -0400
  • 3a2c27a8f7 Update dependencies to use in-tree challtestsrv Matthew McPherrin 2024-05-24 16:09:23 -0400
  • e73ff76da4 Merge remote-tracking branch 'challtestsrv/main' Matthew McPherrin 2024-05-24 16:07:25 -0400
  • e5e8a881c0 Move code to subdirectory Matthew McPherrin 2024-05-24 16:01:10 -0400
  • db1f5873a0
    Implement latest draft-ietf-acme-ari spec (#461) Phil Porada 2024-05-24 12:06:36 -0400
  • dcdab5864b
    Document port mapping instead Phil Porada 2024-05-24 12:04:59 -0400
  • 94f0b158ba
    Expose API and management ports in dockerfile Phil Porada 2024-05-24 11:41:18 -0400
  • 5940490d26
    Remove useless context Phil Porada 2024-05-23 19:09:09 -0400
  • 5f9371355e
    chore: update golangci-lint workflow (#464) Ludovic Fernandez 2024-05-23 18:49:20 +0200
  • f2f894f608 chore: update golangci-lint workflow Fernandez Ludovic 2024-05-23 18:41:32 +0200
  • 96aa6c083d
    Pass the parent serial instead Phil Porada 2024-05-21 15:36:56 -0400
  • e1b296613c
    Fix lint Phil Porada 2024-05-21 12:10:19 -0400