e4028b23c7
letsencrypt: Email prompt includes link to SA
2015-10-31 13:15:47 -06:00
3843cea959
letsencrypt: Allow (but warn about) empty emails
2015-10-30 23:44:00 -06:00
e99b3af0a5
letsencrypt: Numerous bug fixes
2015-10-30 15:55:59 -06:00
88c646c86c
core: Start() blocks until servers finish starting
...
Also improved/clarified some docs
2015-10-30 00:19:43 -06:00
64cded8246
letsencrypt: Don't maintain assets of sites we don't maintain
2015-10-29 17:24:11 -06:00
e3be524447
core: Fix for graceful reload after first reload signal
...
The file path of the originally-loaded Caddyfile must be piped to the forked process; previously it was using stdin after the first fork, which wouldn't load the newest Caddyfile from disk, which is the point of SIGUSR1.
2015-10-29 17:23:20 -06:00
89ad7593bd
Merge branch 'caddyfile' into letsencrypt
2015-10-29 15:41:34 -06:00
efeeece735
caddyfile: http and https hosts should render in URL format
2015-10-29 10:13:30 -06:00
976f5182e1
caddyfile: Better string and number handling
2015-10-29 00:22:56 -06:00
30c949085c
letsencrypt: Stubbed out OCSP staple updates
...
OCSP status is checked at a regular interval, and if the OCSP status changes for any of the certificates, the change callback is executed (restarts the server, updating the OCSP staple).
2015-10-28 23:43:26 -06:00
6762df415c
Clean up leaking goroutines and safer Start()/Stop()
2015-10-28 22:54:27 -06:00
1818b1ea62
letsencrypt: Better error handling, prompt user for SA
2015-10-28 18:12:07 -06:00
b67543f81c
Track the latest lego OCSP changes
2015-10-28 16:35:19 +01:00
7d91cfb512
Merge pull request #290 from mholt/le-graceful
...
Graceful restarts/reloads, refactoring
2015-10-27 14:17:40 -06:00
8548641dc1
letsencrypt: Check for errors
2015-10-27 13:02:47 -06:00
c46898592f
Merge branch 'letsencrypt' into le-graceful
...
Conflicts:
caddy/letsencrypt/letsencrypt.go
caddy/letsencrypt/renew.go
2015-10-27 12:59:55 -06:00
362ead2760
Minor test improvements
2015-10-27 12:53:31 -06:00
a6ea1e6b55
letsencrypt: -ca flag to customize CA server
2015-10-27 12:52:58 -06:00
0f19df8a81
Keep tests deterministic
2015-10-27 00:43:24 -06:00
ee5c842c7d
Code to convert between JSON and Caddyfile
...
This will be used by the API so clients have an easier time manipulating the configuration
2015-10-27 00:07:22 -06:00
c487b702a2
Little cleanup
2015-10-27 00:05:22 -06:00
bb6613d0ae
core: Fix SIGUSR1 so it actually reloads config
2015-10-26 17:57:32 -06:00
821c0fab09
core: Refactoring POSIX-only code for build tags
2015-10-26 16:49:05 -06:00
5b1962303d
core: More refactoring, code cleanup, docs
2015-10-26 14:55:03 -06:00
41c4484222
core: SIGUSR1 to reload config; some code cleanup
2015-10-26 14:28:50 -06:00
4ebff9a130
core: Major refactor for graceful restarts; numerous fixes
...
Merged config and app packages into one called caddy. Abstracted away caddy startup functionality making it easier to embed Caddy in any Go application and use it as a library. Graceful restart (should) now ensure child starts properly. Now piping a gob bundle to child process so that the child can match up inherited listeners to server address. Much cleanup still to do.
2015-10-26 13:34:31 -06:00
6936658019
letsencrypt: Work with latest lego changes
2015-10-25 19:30:29 -06:00
b5b31e398c
letsencrypt: Graceful restarts
...
Lots of refinement still needed and runs only on POSIX systems. Windows will not get true graceful restarts (for now), but we will opt for very, very quick forceful restarts. Also, server configs are no longer put into a map; it is critical that they stay ordered so that they can be matched with their sockets in the child process after forking.
This implementation of graceful restarts is probably not perfect, but it is a good start. Lots of details to attend to now.
2015-10-25 18:45:55 -06:00
f9f1aafe0c
Update to lego update. DevMode no longer exists.
2015-10-26 00:53:36 +01:00
91465d8e6f
Support for OCSP Stapling. Fixes #280
2015-10-24 04:36:54 +02:00
f8ad050dda
Update for latest lego changes (cert bundling)
2015-10-24 04:35:55 +02:00
2e5eb63850
Function name changed in lego
2015-10-23 16:29:05 +02:00
f24ecee603
letsencrypt: Basic renewal failover and better error handling
2015-10-21 21:28:33 -06:00
c5635f21a3
Merge pull request #283 from mholt/le-simplerenew
...
letsencrypt: Simplify timing mechanism for checking renewals
2015-10-21 17:08:57 -06:00
605f1942ef
Merge branch 'letsencrypt' into le-simplerenew
...
Conflicts:
config/letsencrypt/letsencrypt.go
2015-10-21 16:35:32 -06:00
a16beb98de
letsencrypt: Revoke certificate
2015-10-21 00:09:45 -06:00
38885e4301
Simplify timing mechanism for checking renewals
2015-10-20 20:16:01 -06:00
c626774da2
First, raw renewal implementation. Pretty basic :D
2015-10-20 02:44:00 +02:00
cd0b47d068
letsencrypt: Don't auto-configure loopback hosts or 'tls off'
...
User can specify 'tls off" in Caddyfile to force-disable automatic HTTPS configuration
2015-10-18 22:50:42 -06:00
4c93ab8c68
Merge branch 'configfix' into letsencrypt
2015-10-18 19:48:57 -06:00
c0ebe31560
Fix ServerBlockStorage so it actually stores stuff
2015-10-18 19:27:51 -06:00
cc1ff93250
letsencrypt: Fix Windows tests
2015-10-18 12:12:33 -06:00
42ac2d2dde
letsencrypt: More tests, tests for user.go & slight refactoring
2015-10-18 12:09:06 -06:00
d764111886
letsencrypt: Storage tests
2015-10-18 10:39:28 -06:00
8cd6b8aa99
letsencrypt: Tests for load/save RSA keys and redirPlaintextHost
2015-10-17 23:35:59 -06:00
da8a4fafcc
letsencrypt: Use existing certs & keys if already in storage
2015-10-17 22:55:50 -06:00
9f9de389d5
lego provides PEM-encoded certificate bytes for us
2015-10-17 21:18:46 -06:00
7568b0e215
Compatibility with latest lego commits (dev mode enabled)
2015-10-17 21:00:48 -06:00
a75663501d
Little more refactoring in letsencrypt
2015-10-17 20:51:46 -06:00
96ae288c4b
More refactoring; cleaning up code, preparing for tests
2015-10-17 20:44:33 -06:00
