Commit graph

67 commits

Author SHA1 Message Date
Seth Schoen
bd331d3789 more concise file content search using list comprehension 2012-07-01 22:41:26 -07:00
Seth Schoen
0e8b5c053f information about CA's session database structure 2012-07-01 22:20:35 -07:00
Seth Schoen
ad0adf3a21 instead of challengeid, just use the order presented 2012-07-01 22:13:34 -07:00
Seth Schoen
272d49d2f0 start on Redis queue structure 2012-07-01 18:15:29 -07:00
Seth Schoen
64c48f36e1 challenge ID before challenge type 2012-07-01 12:20:41 -07:00
Seth Schoen
8ef5909963 mention dependency on python-libnss 2012-07-01 11:58:38 -07:00
Seth Schoen
10ba09926b check goodness of all names from request 2012-06-29 17:30:00 -07:00
Seth Schoen
93e21e9ba8 pass through subject_names request from CSR.py to pkcs10.py 2012-06-29 17:28:26 -07:00
Seth Schoen
bf74fe286e a clean subject_names() function 2012-06-29 17:25:56 -07:00
Seth Schoen
b595bb0db2 CSR parser from freeipa, modified by Dan and Seth - GPLv2, depends on libnss and python-nss 2012-06-29 17:23:18 -07:00
Seth Schoen
de04dea2fb add specific challenge types, multiple challenge data fields 2012-06-29 16:40:19 -07:00
James Kasten
e689c033a0 Formatted SNI README 2012-06-28 22:46:59 -04:00
James Kasten
4ccaf0e275 Modified README to reflect Makefile changes 2012-06-28 22:29:17 -04:00
Eric Wustrow
7fd249071f make clean removes all generated cruft now 2012-06-28 22:23:35 -04:00
Eric Wustrow
1f02acf1b3 remove old shell script; replaced by Makefile 2012-06-28 22:22:24 -04:00
Eric Wustrow
b6eea87587 Merge branch 'master' of github.com:research/chocolate 2012-06-28 22:21:00 -04:00
Eric Wustrow
c7e15999ce need to use _ for swig to be happy 2012-06-28 22:20:50 -04:00
James Kasten
68f85d9f1a Added READMEs for SNI Challenge, renamed variables, added options-ssl-conf 2012-06-28 22:15:17 -04:00
Eric Wustrow
b98900d3e8 using gnumake instead of shell script to build sni_support.so 2012-06-28 22:00:37 -04:00
Peter Eckersley
a4ca9335e2 Add README explanation 2012-06-28 15:19:28 -07:00
Peter Eckersley
9da7a473dc Make this change to match 2012-06-28 15:17:57 -07:00
Peter Eckersley
bc4987bc0e The "webserver" dirname was confusing; client-webserver is better 2012-06-28 15:16:21 -07:00
James Kasten
6a83c0cd7d Added testing key, cleaned up some code, added ext conf file 2012-06-28 17:50:05 -04:00
Seth Schoen
0f42253931 this is a CSR containing subject alternate names 2012-06-28 12:36:53 -07:00
Seth Schoen
1e66e2c87b clobber request nonce 2012-06-27 21:17:46 -07:00
Seth Schoen
6d3ca7c94c work towards one request per session 2012-06-27 17:16:07 -07:00
James Kasten
abb4673fd8 Adding sni_challenge verification 2012-06-26 20:01:52 -04:00
Peter Eckersley
deb9ce0a4e These (initially empty) directories are necessary for correct CA operation? 2012-06-19 15:09:04 -07:00
James Kasten
16b1128c4a minor fixes and now using crypto random 2012-06-19 15:28:56 -04:00
James Kasten
626695a85e added basic sni/cert challenge for the webserver 2012-06-19 13:24:55 -04:00
Seth Schoen
689928b1d3 note protobuf dependency 2012-06-06 14:10:44 -07:00
Seth Schoen
c3af316c60 attempt to handle multiple signing requests per message and check for duplicate nonces 2012-06-02 00:28:59 -07:00
Seth Schoen
bcd4168b1f let's check for duplicate request nonces from the client 2012-06-02 00:01:35 -07:00
Seth Schoen
7c3e656a9a note dependency on redis 2012-06-01 23:57:32 -07:00
Seth Schoen
726da5c7f9 use redis instead of shelve; new session class instead of sessionstore 2012-06-01 23:55:59 -07:00
Seth Schoen
1b6ffaecc2 add two notes 2012-06-01 00:05:10 -07:00
Seth Schoen
4e93c24e49 actually randomized client nonce 2012-05-31 20:29:04 -07:00
Seth Schoen
50f78b8afb check goodness of cn field 2012-05-31 20:10:46 -07:00
Seth Schoen
f0e044a555 by default, we can sign names 2012-05-31 20:09:03 -07:00
Seth Schoen
208c5a178d more helpful functions to help you make a valid request 2012-05-31 19:53:00 -07:00
Seth Schoen
be17482a6a field validation; die; validate requests! 2012-05-31 19:52:34 -07:00
Seth Schoen
a03af3e6ba argh different versions of OpenSSL format this message totally differently! 2012-05-31 19:51:42 -07:00
Seth Schoen
7d21c1f9bb sig is bytes (8-bit clean); timestamp is int64 2012-05-31 19:48:56 -07:00
Seth Schoen
5d330bf2c4 implement subject and cn functions; separate "goodkey" for csr and key 2012-05-31 18:11:28 -07:00
Seth Schoen
f62db4d807 implement everything except cn, san, and issue 2012-05-31 16:48:36 -07:00
Seth Schoen
622b92ef89 Merge branch 'master' of ssh://github.com/research/chocolate 2012-05-31 15:45:13 -07:00
Peter Eckersley
4fee71d647 A toy CA we can mess about with 2012-05-31 15:23:19 -07:00
Seth Schoen
ee2e183834 actually timestamp is an integer, not string 2012-05-31 15:06:13 -07:00
Seth Schoen
7aceaba6f0 some reorganization and a start toward processing requests 2012-05-31 13:22:33 -07:00
Seth Schoen
da47a260bc add make_request() to help prepare signing requests 2012-05-31 13:22:15 -07:00