Seth Schoen
|
bd331d3789
|
more concise file content search using list comprehension
|
2012-07-01 22:41:26 -07:00 |
|
Seth Schoen
|
0e8b5c053f
|
information about CA's session database structure
|
2012-07-01 22:20:35 -07:00 |
|
Seth Schoen
|
ad0adf3a21
|
instead of challengeid, just use the order presented
|
2012-07-01 22:13:34 -07:00 |
|
Seth Schoen
|
272d49d2f0
|
start on Redis queue structure
|
2012-07-01 18:15:29 -07:00 |
|
Seth Schoen
|
64c48f36e1
|
challenge ID before challenge type
|
2012-07-01 12:20:41 -07:00 |
|
Seth Schoen
|
8ef5909963
|
mention dependency on python-libnss
|
2012-07-01 11:58:38 -07:00 |
|
Seth Schoen
|
10ba09926b
|
check goodness of all names from request
|
2012-06-29 17:30:00 -07:00 |
|
Seth Schoen
|
93e21e9ba8
|
pass through subject_names request from CSR.py to pkcs10.py
|
2012-06-29 17:28:26 -07:00 |
|
Seth Schoen
|
bf74fe286e
|
a clean subject_names() function
|
2012-06-29 17:25:56 -07:00 |
|
Seth Schoen
|
b595bb0db2
|
CSR parser from freeipa, modified by Dan and Seth - GPLv2, depends on libnss and python-nss
|
2012-06-29 17:23:18 -07:00 |
|
Seth Schoen
|
de04dea2fb
|
add specific challenge types, multiple challenge data fields
|
2012-06-29 16:40:19 -07:00 |
|
James Kasten
|
e689c033a0
|
Formatted SNI README
|
2012-06-28 22:46:59 -04:00 |
|
James Kasten
|
4ccaf0e275
|
Modified README to reflect Makefile changes
|
2012-06-28 22:29:17 -04:00 |
|
Eric Wustrow
|
7fd249071f
|
make clean removes all generated cruft now
|
2012-06-28 22:23:35 -04:00 |
|
Eric Wustrow
|
1f02acf1b3
|
remove old shell script; replaced by Makefile
|
2012-06-28 22:22:24 -04:00 |
|
Eric Wustrow
|
b6eea87587
|
Merge branch 'master' of github.com:research/chocolate
|
2012-06-28 22:21:00 -04:00 |
|
Eric Wustrow
|
c7e15999ce
|
need to use _ for swig to be happy
|
2012-06-28 22:20:50 -04:00 |
|
James Kasten
|
68f85d9f1a
|
Added READMEs for SNI Challenge, renamed variables, added options-ssl-conf
|
2012-06-28 22:15:17 -04:00 |
|
Eric Wustrow
|
b98900d3e8
|
using gnumake instead of shell script to build sni_support.so
|
2012-06-28 22:00:37 -04:00 |
|
Peter Eckersley
|
a4ca9335e2
|
Add README explanation
|
2012-06-28 15:19:28 -07:00 |
|
Peter Eckersley
|
9da7a473dc
|
Make this change to match
|
2012-06-28 15:17:57 -07:00 |
|
Peter Eckersley
|
bc4987bc0e
|
The "webserver" dirname was confusing; client-webserver is better
|
2012-06-28 15:16:21 -07:00 |
|
James Kasten
|
6a83c0cd7d
|
Added testing key, cleaned up some code, added ext conf file
|
2012-06-28 17:50:05 -04:00 |
|
Seth Schoen
|
0f42253931
|
this is a CSR containing subject alternate names
|
2012-06-28 12:36:53 -07:00 |
|
Seth Schoen
|
1e66e2c87b
|
clobber request nonce
|
2012-06-27 21:17:46 -07:00 |
|
Seth Schoen
|
6d3ca7c94c
|
work towards one request per session
|
2012-06-27 17:16:07 -07:00 |
|
James Kasten
|
abb4673fd8
|
Adding sni_challenge verification
|
2012-06-26 20:01:52 -04:00 |
|
Peter Eckersley
|
deb9ce0a4e
|
These (initially empty) directories are necessary for correct CA operation?
|
2012-06-19 15:09:04 -07:00 |
|
James Kasten
|
16b1128c4a
|
minor fixes and now using crypto random
|
2012-06-19 15:28:56 -04:00 |
|
James Kasten
|
626695a85e
|
added basic sni/cert challenge for the webserver
|
2012-06-19 13:24:55 -04:00 |
|
Seth Schoen
|
689928b1d3
|
note protobuf dependency
|
2012-06-06 14:10:44 -07:00 |
|
Seth Schoen
|
c3af316c60
|
attempt to handle multiple signing requests per message and check for duplicate nonces
|
2012-06-02 00:28:59 -07:00 |
|
Seth Schoen
|
bcd4168b1f
|
let's check for duplicate request nonces from the client
|
2012-06-02 00:01:35 -07:00 |
|
Seth Schoen
|
7c3e656a9a
|
note dependency on redis
|
2012-06-01 23:57:32 -07:00 |
|
Seth Schoen
|
726da5c7f9
|
use redis instead of shelve; new session class instead of sessionstore
|
2012-06-01 23:55:59 -07:00 |
|
Seth Schoen
|
1b6ffaecc2
|
add two notes
|
2012-06-01 00:05:10 -07:00 |
|
Seth Schoen
|
4e93c24e49
|
actually randomized client nonce
|
2012-05-31 20:29:04 -07:00 |
|
Seth Schoen
|
50f78b8afb
|
check goodness of cn field
|
2012-05-31 20:10:46 -07:00 |
|
Seth Schoen
|
f0e044a555
|
by default, we can sign names
|
2012-05-31 20:09:03 -07:00 |
|
Seth Schoen
|
208c5a178d
|
more helpful functions to help you make a valid request
|
2012-05-31 19:53:00 -07:00 |
|
Seth Schoen
|
be17482a6a
|
field validation; die; validate requests!
|
2012-05-31 19:52:34 -07:00 |
|
Seth Schoen
|
a03af3e6ba
|
argh different versions of OpenSSL format this message totally differently!
|
2012-05-31 19:51:42 -07:00 |
|
Seth Schoen
|
7d21c1f9bb
|
sig is bytes (8-bit clean); timestamp is int64
|
2012-05-31 19:48:56 -07:00 |
|
Seth Schoen
|
5d330bf2c4
|
implement subject and cn functions; separate "goodkey" for csr and key
|
2012-05-31 18:11:28 -07:00 |
|
Seth Schoen
|
f62db4d807
|
implement everything except cn, san, and issue
|
2012-05-31 16:48:36 -07:00 |
|
Seth Schoen
|
622b92ef89
|
Merge branch 'master' of ssh://github.com/research/chocolate
|
2012-05-31 15:45:13 -07:00 |
|
Peter Eckersley
|
4fee71d647
|
A toy CA we can mess about with
|
2012-05-31 15:23:19 -07:00 |
|
Seth Schoen
|
ee2e183834
|
actually timestamp is an integer, not string
|
2012-05-31 15:06:13 -07:00 |
|
Seth Schoen
|
7aceaba6f0
|
some reorganization and a start toward processing requests
|
2012-05-31 13:22:33 -07:00 |
|
Seth Schoen
|
da47a260bc
|
add make_request() to help prepare signing requests
|
2012-05-31 13:22:15 -07:00 |
|