This website requires JavaScript.
38069cc4cf
Upgrade to go-jose v4.1.2 (#510 )
main
Matthew McPherrin
2025-08-01 19:58:06 -0700
6cded12eb4
Upgrade to go-jose v4.1.2
Matthew McPherrin
2025-08-01 15:41:46 -0400
e5989c8285
WIP: switch to next release of go-jose
Matthew McPherrin
2025-08-01 15:30:02 -0400
48feb2a267
Merge d7d11ec76c into b656642cf5
Aaron Gable
2025-07-28 15:27:40 -0700
d7d11ec76c
Revert "Add Location header to finalize response (#85 )"
no-finalize-loc
Aaron Gable
2025-07-28 15:23:59 -0700
e42e4d2054
Merge 72e5118ae2 into b656642cf5
Chris Marchesi
2025-07-11 14:26:27 +0000
72e5118ae2
ca: allow the promotion of first domain/IP to CN in profile
Chris Marchesi
2025-03-25 18:49:39 -0700
5e8c806ebe
Merge dc8f050bbc into b656642cf5
Jonathan Vanasco
2025-06-19 22:45:43 +0000
dc8f050bbc
regenerate minica certs * current minica version supports AKID, however root cert had to be regenerated * utilize a fork (pr pending to minica) to remove ClientAuth EKU in preparation for chrome
jonathan vanasco
2025-06-19 18:40:31 -0400
cb4649dda5
Merge f6e0a707aa into b656642cf5
Jonathan Vanasco
2025-06-19 15:59:58 +0100
0d7cba80c4
Merge b36693821e into b656642cf5
Shiloh Heurich
2025-06-19 15:59:58 +0100
b656642cf5
Set Content-Type / Retry-After for custom ARI resp (#506 )
Jacob Hoffman-Andrews
2025-06-09 16:31:08 -0700
dd99838087
Set Content-Type / Retry-After for custom ARI resp
Jacob Hoffman-Andrews
2025-06-06 13:27:20 -0700
2283441675
wfe: return conflict on re-revocation (#505 )
Jacob Hoffman-Andrews
2025-06-09 12:44:48 -0700
708347cf7d
wfe: return conflict on re-revocation
Jacob Hoffman-Andrews
2025-06-09 09:43:19 -0700
7829822afd
wfe: return conflict on re-revocation
Jacob Hoffman-Andrews
2025-06-09 09:43:19 -0700
a3d7153630
Set Content-Type for custom ARI response
Jacob Hoffman-Andrews
2025-06-06 13:27:20 -0700
d52948ce25
add overriding of ARI response (#501 )
v2.8.0
Jacob Hoffman-Andrews
2025-06-05 16:15:11 -0700
a11d70b7f9
revoked certs stay in DB
Jacob Hoffman-Andrews
2025-06-05 10:01:56 -0700
a726eaa00e
add overriding of ARI response
Jacob Hoffman-Andrews
2025-06-04 14:33:24 -0700
39dbb64e14
wfe: fix a race in `orderForDisplay` (#500 )
Tim Geoghegan
2025-05-21 09:19:19 -0700
ad0cd4830e
improve comment
Tim Geoghegan
2025-05-21 08:14:40 -0700
27d9c1756f
explicitly construct copied order
Tim Geoghegan
2025-05-20 15:12:25 -0700
5ea0aea5e5
wfe: fix a race in `orderForDisplay`
Tim Geoghegan
2025-05-20 10:03:04 -0700
3bb114e0eb
Bump golang.org/x/ dependencies (#499 )
Matthew McPherrin
2025-05-07 16:36:04 -0400
7ffbf04c16
Bump golang.org/x/ dependencies
Matthew McPherrin
2025-05-07 12:12:28 -0400
63f4c66abd
build(deps): bump golang.org/x/net from 0.34.0 to 0.38.0
dependabot[bot]
2025-05-07 16:09:16 +0000
5678a62fe0
currectly triggers BadSignatureAlgorithmProblem at JWS parse time (#492 )
orangepizza
2025-05-08 01:08:05 +0900
9f50238c49
Further bump golang.org/x/ dependencies
Matthew McPherrin
2025-05-07 12:05:42 -0400
c548608cc8
use newer validation subdomain for dns-account-01 (fix CI eggsampler/acme error) (#498 )
orangepizza
2025-05-07 23:12:17 +0900
c2a79b2ee7
use newer validation subdomain defined in draft-ietf-acme-dns-account-label
orangepizza
2025-05-07 18:20:42 +0900
eacd9199e0
simplyfy error message code
orangepizza
2025-05-06 20:24:57 +0900
5ae392d6a5
use new err type from go-jose for badSignatureAlgorithm
Seo Suchan
2025-05-02 16:00:09 +0900
5c60c5df24
update dependencies for update go-jose from 4.0.5 to 4.1.0,
Seo Suchan
2025-05-02 15:47:17 +0900
6b7368b044
make wfe.parseJWS return acme problems instead of error
Seo Suchan
2025-05-02 09:48:52 +0900
363b1eecd8
Update golang.org/x/ dependencies
Matthew McPherrin
2025-04-21 23:04:20 -0400
3ff961678c
build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0
dependabot[bot]
2025-04-15 00:12:43 +0000
18ea130c3e
currectly triggers BadSignatureAlgorithmProblem at JWS parse time
Seo Suchan
2025-04-01 17:59:19 +0900
e07c0e10dd
Merge branch 'main' into update-dns-account-01
Shiloh Heurich
2025-03-24 12:04:17 -0400
56ceceaae9
build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0
dependabot[bot]
2025-03-13 01:53:59 +0000
dc9bf9d200
Orders don't have a "deactivated" status. (#301 )
Jacob Hoffman-Andrews
2025-03-07 09:27:00 -0800
802deafc84
fix(dns-account-01): update validation domain to remove scope per draft-ietf-acme-dns-account-label-00
Shiloh Heurich
2025-02-28 19:23:51 -0400
307a947a4f
Update golangci-lint (#488 )
Matthew McPherrin
2025-02-25 11:44:36 -0500
351ab271c6
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#487 )
dependabot[bot]
2025-02-25 08:41:37 -0800
990e5fd695
Remove unused variable
Matthew McPherrin
2025-02-25 10:38:32 -0500
072800d88e
Switch to current version of golangci-lint
Matthew McPherrin
2025-02-25 10:32:11 -0500
2792d7f919
Golang-ci linter updates
Matthew McPherrin
2025-02-25 10:30:23 -0500
827fdafdfe
build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5
dependabot[bot]
2025-02-24 22:54:21 +0000
9a99831fce
Truncate ARI timestamps to millisecond resolution (#485 )
Aaron Gable
2025-02-21 15:01:28 -0800
8c86ddf7de
Merge branch 'main' into ari-truncate
Aaron Gable
2025-02-21 09:47:12 -0800
bc21177aca
return logical and compliant ARI windows for expiring certs (#484 )
Jonathan Vanasco
2025-02-21 12:46:22 -0500
99c8bb6ea7
requested changes
jonathan vanasco
2025-02-19 16:04:29 -0500
b609fb5925
issued concern
jonathan vanasco
2025-02-19 15:41:28 -0500
110bbdd8ed
response to requested changes
jonathan vanasco
2025-02-19 15:32:50 -0500
d4a11da923
Truncate ARI timestamps to milisecond resolution
Aaron Gable
2025-02-18 17:31:48 -0800
c5d928a301
reduce expired past to 1s, simply because it's easier for a visual check
jonathan vanasco
2025-02-15 19:34:49 -0500
36973ba27c
fixed caps that had reverted
jonathan vanasco
2025-02-15 18:22:02 -0500
393df53bff
move comments inline
jonathan vanasco
2025-02-15 16:57:45 -0500
df3e45575d
RFC compliance
jonathan vanasco
2025-02-15 16:54:47 -0500
0eab6469c2
If the cert has expired, return `RenewalInfoImmediate` instead. If the windowEnd is after the cert's expiry, adjust it to the window end.
jonathan vanasco
2025-02-15 16:45:21 -0500
bbe7775c27
Update dependencies (#481 )
v2.7.0
Matthew McPherrin
2025-01-23 17:35:18 -0800
4582066350
Update dependencies
Matthew McPherrin
2025-01-23 11:27:22 -0500
716f857335
docs: rm mention of subproblems being unimpl'd (#479 )
Daniel McCarney
2025-01-22 20:02:31 -0500
a8f478fb3d
docs: rm mention of subproblems being unimpl'd
Daniel McCarney
2025-01-22 18:09:48 -0500
ddbc6bef1a
Fix(NOISSUE): Fix docker compose file example in README.md (#475 )
Falko Flessner
2024-10-21 04:12:43 +0200
54f2840b8e
Fix(NOISSUE): Fix docker compose file example in README.md
Falko Flessner
2024-10-16 14:26:52 +0200
e08dd94e72
Add support for ACME Profiles (#473 )
Aaron Gable
2024-08-22 08:57:20 -0700
09cd67106f
Rename desc->description, prevent loopvar aliasing
Aaron Gable
2024-08-21 10:07:19 -0700
a2ce23217a
Update tests
Aaron Gable
2024-08-20 16:16:16 -0700
2a1286c49a
Respect requested profile
Aaron Gable
2024-08-20 16:13:07 -0700
f0cb7b4784
Add support for configuring profiles
Aaron Gable
2024-08-20 16:12:55 -0700
8caf067c1b
Add profile advertisement to Directory
Aaron Gable
2024-08-20 16:10:54 -0700
c2b3150141
Add profile field to Order objects
Aaron Gable
2024-08-20 16:09:40 -0700
ac77969275
Simplify KU, EKU, and SKID fields of issued certs (#472 )
Aaron Gable
2024-08-21 13:36:41 -0700
27ca110003
Review comment
Aaron Gable
2024-08-21 10:01:27 -0700
4406bef0f4
Simplify KU, EKU, and SKID fields of issued certs
Aaron Gable
2024-08-20 15:30:23 -0700
9d3a77137f
Update golangci-lint to 1.60.2 (#474 )
Matthew McPherrin
2024-08-21 12:18:04 -0400
a6aaf06b86
Update golangci-lint to 1.60.2
Matthew McPherrin
2024-08-21 11:58:59 -0400
17d64a355e
Update /x/net for compatibility with go1.23 (#470 )
Aaron Gable
2024-08-13 12:01:05 -0700
6fd74e108b
Update /x/net for compatibility with go1.23
Aaron Gable
2024-08-13 09:59:37 -0700
0d2b1a5d16
also support signing CSRs with Ed25519 keys
Tim Ramlot
2024-06-14 09:20:49 +0200
7c154bcd47
Reject extra command line args and fix README invocation (#467 )
Matthew McPherrin
2024-05-31 16:57:20 -0400
4658e57ef5
Merge 59e2782854 into ad9e5bba53
Matthew McPherrin
2024-05-31 16:56:17 -0400
8d7874d3d0
Fix incorrect invocation in README
Matthew McPherrin
2024-05-31 16:49:53 -0400
fc8d7771c2
Reject stray positional arguments
Matthew McPherrin
2024-05-31 16:41:39 -0400
ad9e5bba53
Document exposing API and management ports when not using docker-compose.yaml (#465 )
v2.6.0
Phil Porada
2024-05-31 14:00:44 -0400
59e2782854
Use latest golangci-lint
Matthew McPherrin
2024-05-24 16:41:15 -0400
ed41b539a4
More linter fixes
Matthew McPherrin
2024-05-24 16:38:21 -0400
4f2f91a223
Fix linter complaints
Matthew McPherrin
2024-05-24 16:28:40 -0400
3a2c27a8f7
Update dependencies to use in-tree challtestsrv
Matthew McPherrin
2024-05-24 16:09:23 -0400
e73ff76da4
Merge remote-tracking branch 'challtestsrv/main'
Matthew McPherrin
2024-05-24 16:07:25 -0400
e5e8a881c0
Move code to subdirectory
Matthew McPherrin
2024-05-24 16:01:10 -0400
db1f5873a0
Implement latest draft-ietf-acme-ari spec (#461 )
Phil Porada
2024-05-24 12:06:36 -0400
dcdab5864b
Document port mapping instead
Phil Porada
2024-05-24 12:04:59 -0400
94f0b158ba
Expose API and management ports in dockerfile
Phil Porada
2024-05-24 11:41:18 -0400
5940490d26
Remove useless context
Phil Porada
2024-05-23 19:09:09 -0400
5f9371355e
chore: update golangci-lint workflow (#464 )
Ludovic Fernandez
2024-05-23 18:49:20 +0200
f2f894f608
chore: update golangci-lint workflow
Fernandez Ludovic
2024-05-23 18:41:32 +0200
96aa6c083d
Pass the parent serial instead
Phil Porada
2024-05-21 15:36:56 -0400
e1b296613c
Fix lint
Phil Porada
2024-05-21 12:10:19 -0400