-
Notifications
You must be signed in to change notification settings - Fork 9
Fix null pointer dereference #57
base: master
Are you sure you want to change the base?
Commits on May 15, 2016
-
Consistency in naming "Let's Encrypt".
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for 86f45d6 - Browse repository at this point
Copy the full SHA 86f45d6View commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for bab2fe5 - Browse repository at this point
Copy the full SHA bab2fe5View commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for 8109309 - Browse repository at this point
Copy the full SHA 8109309View commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for d48cff6 - Browse repository at this point
Copy the full SHA d48cff6View commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for 2d9941c - Browse repository at this point
Copy the full SHA 2d9941cView commit details -
Properly catch when the challenge has been verified.
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for 4b35ee6 - Browse repository at this point
Copy the full SHA 4b35ee6View commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for b9e9b61 - Browse repository at this point
Copy the full SHA b9e9b61View commit details -
Function attributes for messages.
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for f21cf92 - Browse repository at this point
Copy the full SHA f21cf92View commit details -
Add forgotten waitpid for COMP_FILE and add some readops to make sure…
… that netproc failing doesn't cause short reads and exits.
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for bbfe9e8 - Browse repository at this point
Copy the full SHA bbfe9e8View commit details -
Reduce the number of pledges in chngproc.
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for d37b038 - Browse repository at this point
Copy the full SHA d37b038View commit details -
Continue minimising the pledges.
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for 8086e85 - Browse repository at this point
Copy the full SHA 8086e85View commit details -
Drop privs in the correct order and make sure sys_signame is not used…
… on Linux.
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for f134332 - Browse repository at this point
Copy the full SHA f134332View commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for 9be9762 - Browse repository at this point
Copy the full SHA 9be9762View commit details -
Fully demonstrate that chroot doesn't work on Linux for netproc.
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for defd48c - Browse repository at this point
Copy the full SHA defd48cView commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for f7769cd - Browse repository at this point
Copy the full SHA f7769cdView commit details -
kristaps committed
May 15, 2016 Configuration menu - View commit details
-
Copy full SHA for 6150493 - Browse repository at this point
Copy the full SHA 6150493View commit details -
Fix for kristapsdz#1 posted by
https://github.com/pozdnychev -- thanks!
kristaps committedMay 15, 2016 Configuration menu - View commit details
-
Copy full SHA for c607a4c - Browse repository at this point
Copy the full SHA c607a4cView commit details
Commits on May 16, 2016
-
Fix typo found by Anthony Bentley--thanks!
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for aa54c64 - Browse repository at this point
Copy the full SHA aa54c64View commit details -
Initial check-in of a separate process for DNS management.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 1a0c1c6 - Browse repository at this point
Copy the full SHA 1a0c1c6View commit details -
Add the dnsproc manager. This was noted by deraadt@. This does nothin…
…g but looks up addresses as used by netproc.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for c7fe54d - Browse repository at this point
Copy the full SHA c7fe54dView commit details -
Push the DNS resolution into one function for clarity.
Prune a lot of unused variables.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for fbb61dc - Browse repository at this point
Copy the full SHA fbb61dcView commit details -
Fix an off-by-one and also fix closing the DNS file descriptor.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 7d3bef6 - Browse repository at this point
Copy the full SHA 7d3bef6View commit details -
Account key doesn't need read permissions.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 8c5907e - Browse repository at this point
Copy the full SHA 8c5907eView commit details -
Remove comment that no longer belongs.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for d242836 - Browse repository at this point
Copy the full SHA d242836View commit details -
We don't close any fds before the out, so don't check them against -1.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 8a15b7b - Browse repository at this point
Copy the full SHA 8a15b7bView commit details -
Don't let the testing code make it out.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 4e2e765 - Browse repository at this point
Copy the full SHA 4e2e765View commit details -
kristaps committed
May 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 902ad76 - Browse repository at this point
Copy the full SHA 902ad76View commit details -
kristaps committed
May 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 2e35a5a - Browse repository at this point
Copy the full SHA 2e35a5aView commit details -
More documentation notes on why Linux and Mac OS X are a bad idea.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for d029e6b - Browse repository at this point
Copy the full SHA d029e6bView commit details -
kristaps committed
May 16, 2016 Configuration menu - View commit details
-
Copy full SHA for a257030 - Browse repository at this point
Copy the full SHA a257030View commit details -
kristaps committed
May 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 461f63e - Browse repository at this point
Copy the full SHA 461f63eView commit details -
Have dnsproc properly return (and not exit) like the other processes.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for e4c815d - Browse repository at this point
Copy the full SHA e4c815dView commit details -
Add a secret and undocumented feature that allows me to create files …
…in the challenge directory on another system. Don't use this.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for ebd9a02 - Browse repository at this point
Copy the full SHA ebd9a02View commit details -
Be more terse in the implementation notes.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 0104e58 - Browse repository at this point
Copy the full SHA 0104e58View commit details -
kristaps committed
May 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 8004fe8 - Browse repository at this point
Copy the full SHA 8004fe8View commit details -
Add some media for the GH site and fix a mistake in the manpage.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 951b70d - Browse repository at this point
Copy the full SHA 951b70dView commit details -
Have the keyproc and acctproc notify the netproc when they've started…
…, and have the netproc wait til they have: there's no point in talking to Let's Encrypt if these services haven't started.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 2d0b65a - Browse repository at this point
Copy the full SHA 2d0b65aView commit details -
Calm down people afraid of root.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 9d17692 - Browse repository at this point
Copy the full SHA 9d17692View commit details -
Failing start-up for account or key proc doesn't error us.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 906f3a4 - Browse repository at this point
Copy the full SHA 906f3a4View commit details -
When closing out, close sockets first to cause depending processes to…
… bail earlier.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for ad7d32d - Browse repository at this point
Copy the full SHA ad7d32dView commit details -
Continue to polish the documentation.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for b273fe6 - Browse repository at this point
Copy the full SHA b273fe6View commit details -
Initial steps of revocation. This is pretty straightforward.
kristaps committedMay 16, 2016 Configuration menu - View commit details
-
Copy full SHA for a5a2048 - Browse repository at this point
Copy the full SHA a5a2048View commit details
Commits on May 17, 2016
-
Continue making operations more semantically meaningful.
Continue building in revocation facility.
kristaps committedMay 17, 2016 Configuration menu - View commit details
-
Copy full SHA for a4df2d7 - Browse repository at this point
Copy the full SHA a4df2d7View commit details -
Continue cleaning up operations (in netproc).
kristaps committedMay 17, 2016 Configuration menu - View commit details
-
Copy full SHA for c8eb558 - Browse repository at this point
Copy the full SHA c8eb558View commit details -
Add in the initial framework for checking certificate revocation times.
kristaps committedMay 17, 2016 Configuration menu - View commit details
-
Copy full SHA for bf0430d - Browse repository at this point
Copy the full SHA bf0430dView commit details -
Have chngproc's magic testing phase (which isn't an official option) not
have files made in the challengedir at all.
kristaps committedMay 17, 2016 Configuration menu - View commit details
-
Copy full SHA for 29e09ef - Browse repository at this point
Copy the full SHA 29e09efView commit details -
Check for expiration date of certificate, if found. This makes it pos…
…sible to simply run letskencrypt as a cronjob without worrying about overloading the ACME server.
kristaps committedMay 17, 2016 Configuration menu - View commit details
-
Copy full SHA for 0ec9c07 - Browse repository at this point
Copy the full SHA 0ec9c07View commit details -
Re-add accidentally-removed check for certificate non-expiration.
kristaps committedMay 17, 2016 Configuration menu - View commit details
-
Copy full SHA for 53dd33d - Browse repository at this point
Copy the full SHA 53dd33dView commit details -
kristaps committed
May 17, 2016 Configuration menu - View commit details
-
Copy full SHA for 3c39488 - Browse repository at this point
Copy the full SHA 3c39488View commit details -
Add note on revokeproc to manpage.
kristaps committedMay 17, 2016 Configuration menu - View commit details
-
Copy full SHA for faad887 - Browse repository at this point
Copy the full SHA faad887View commit details
Commits on May 18, 2016
-
Finish the revocation function. Also, start to lay the groundwork for
a -portable and OpenBSD version of the software with a guarded config.h inclusion.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 25589ab - Browse repository at this point
Copy the full SHA 25589abView commit details -
Split all sandbox operations into their own file. This is part of the
ongoing re-structure into the main and -portable branch.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 00ac0ee - Browse repository at this point
Copy the full SHA 00ac0eeView commit details -
Start stripping out compatibility, which is now in letskencrypt-porta…
…ble.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 19f8977 - Browse repository at this point
Copy the full SHA 19f8977View commit details -
Clean up the Makefile now that we have less cruft.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 81f3fe1 - Browse repository at this point
Copy the full SHA 81f3fe1View commit details -
Add forgotten break statement.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 15c992d - Browse repository at this point
Copy the full SHA 15c992dView commit details -
Catch buffers larger than BUFSIZ bytes.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 09867e6 - Browse repository at this point
Copy the full SHA 09867e6View commit details -
kristaps committed
May 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 71c2c96 - Browse repository at this point
Copy the full SHA 71c2c96View commit details -
Update the manpage with revocation instructions.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 5e38a61 - Browse repository at this point
Copy the full SHA 5e38a61View commit details -
Note that we now do revocation.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 94cc8dd - Browse repository at this point
Copy the full SHA 94cc8ddView commit details -
FreeBSD nit. This will be smoothed out in subsequent improvement of -…
…portable.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 41c5b0d - Browse repository at this point
Copy the full SHA 41c5b0dView commit details -
kristaps committed
May 18, 2016 Configuration menu - View commit details
-
Copy full SHA for b4a5683 - Browse repository at this point
Copy the full SHA b4a5683View commit details -
kristaps committed
May 18, 2016 Configuration menu - View commit details
-
Copy full SHA for e1d1716 - Browse repository at this point
Copy the full SHA e1d1716View commit details -
Move setresuid goop into -portable.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 91269ea - Browse repository at this point
Copy the full SHA 91269eaView commit details -
Start using setproctitle(). First step in kicking out dbg.c.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 3407558 - Browse repository at this point
Copy the full SHA 3407558View commit details -
Replace dowarnx() with warnx().
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for d973c78 - Browse repository at this point
Copy the full SHA d973c78View commit details -
Kick out dowarn in favour of warn.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 835718c - Browse repository at this point
Copy the full SHA 835718cView commit details -
Remove all logging in favour of warnx et al.
Remove wrong-headed attempt at setproctitle.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 903c7ca - Browse repository at this point
Copy the full SHA 903c7caView commit details -
Use strsignal() instead of a hack.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 9f78572 - Browse repository at this point
Copy the full SHA 9f78572View commit details -
Allow overriding the priv-drop user.
kristaps committedMay 18, 2016 Configuration menu - View commit details
-
Copy full SHA for 5551e89 - Browse repository at this point
Copy the full SHA 5551e89View commit details
Commits on May 19, 2016
-
No functional change: just order getopt() parameters for easier search.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for b269c07 - Browse repository at this point
Copy the full SHA b269c07View commit details -
Push communication-related parameters into struct conn. Makes the code a
bit more readable.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 5e050ed - Browse repository at this point
Copy the full SHA 5e050edView commit details -
kristaps committed
May 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 33a980f - Browse repository at this point
Copy the full SHA 33a980fView commit details -
Significantly clean up the handling of HTTP document bodies: first, only
invoke the JSON functions locally, within a doXXXX function; second, don't read into the JSON parser, but into an intermediary buffer (allowing us to dump it on error); third, move some fetch bodies from the main netproc() function into their own functions; and lastly, store the CA nonce agency as a variable (we'll use this later when using other servers).
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 926105e - Browse repository at this point
Copy the full SHA 926105eView commit details -
Remove the coverity note (that's going into the -portable version).
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 95275e5 - Browse repository at this point
Copy the full SHA 95275e5View commit details -
Forgot to close revokeproc channel.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 2af2ca2 - Browse repository at this point
Copy the full SHA 2af2ca2View commit details -
Make filenames in debug messages more meaningful.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 53a95d8 - Browse repository at this point
Copy the full SHA 53a95d8View commit details -
Fix how SAN is registered with the key. In prior versions, we were ha…
…ving one SAN entry per domain. However, apparently this is not allowed; instead we now have a single SAN extension entry with the full list.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 19088d1 - Browse repository at this point
Copy the full SHA 19088d1View commit details -
Flip on real versus staging servers. bsd.lv is now eating its dogfood.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for d69417e - Browse repository at this point
Copy the full SHA d69417eView commit details -
kristaps committed
May 19, 2016 Configuration menu - View commit details
-
Copy full SHA for a321bc7 - Browse repository at this point
Copy the full SHA a321bc7View commit details -
We're no longer just using the staging server. Here we go!
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for a5c4bc5 - Browse repository at this point
Copy the full SHA a5c4bc5View commit details -
Have writeop, writestr, and writebuf all return -1 on failure, 0 on end
of file (epipe), and 1 on success. This addresses all the callers.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for cec0636 - Browse repository at this point
Copy the full SHA cec0636View commit details -
Have the writer functions notify us whether the reader has exited.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 0ee1789 - Browse repository at this point
Copy the full SHA 0ee1789View commit details -
Have revokeproc properly handle the case where the reader fails.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for d276472 - Browse repository at this point
Copy the full SHA d276472View commit details -
Last nit: make writestr also be ok if the reader has exited.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 4b0b857 - Browse repository at this point
Copy the full SHA 4b0b857View commit details -
Have acctproc properly handle reader termination.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for c421f35 - Browse repository at this point
Copy the full SHA c421f35View commit details -
Rename label to "out" (consistency) and allow for reader failure.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for b6654d3 - Browse repository at this point
Copy the full SHA b6654d3View commit details -
Convert certproc to ignore reader failure.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for 453d15b - Browse repository at this point
Copy the full SHA 453d15bView commit details -
Convert chngproc to ignore reader failure.
kristaps committedMay 19, 2016 Configuration menu - View commit details
-
Copy full SHA for d36ad81 - Browse repository at this point
Copy the full SHA d36ad81View commit details
Commits on May 20, 2016
-
Strip out dot-file and www rule: this all goes into the letskencrypt-…
…www repo. Strip down the README.md file to only what's necessary.
kristaps committedMay 20, 2016 Configuration menu - View commit details
-
Copy full SHA for 8e48099 - Browse repository at this point
Copy the full SHA 8e48099View commit details -
Pre-check that the files exist: no need to fork if we don't need to.
Also, the console can get spammed by multiple procs writing into stderr.
kristaps committedMay 20, 2016 Configuration menu - View commit details
-
Copy full SHA for c5267a4 - Browse repository at this point
Copy the full SHA c5267a4View commit details -
No need to have the dropfs, dropprivs, or sandbox functions double-re…
…port their error.
kristaps committedMay 20, 2016 Configuration menu - View commit details
-
Copy full SHA for 54adcdb - Browse repository at this point
Copy the full SHA 54adcdbView commit details -
kristaps committed
May 20, 2016 Configuration menu - View commit details
-
Copy full SHA for 4340bc7 - Browse repository at this point
Copy the full SHA 4340bc7View commit details -
Fix erroneous check of realloc return value.
kristaps committedMay 20, 2016 Configuration menu - View commit details
-
Copy full SHA for a2d68ab - Browse repository at this point
Copy the full SHA a2d68abView commit details -
kristaps committed
May 20, 2016 Configuration menu - View commit details
-
Copy full SHA for f32b54f - Browse repository at this point
Copy the full SHA f32b54fView commit details -
When we start up, check that the domains listed on the command-line are
those on the certificate, if found. NOTE: what if there's no SAN entry at all?
kristaps committedMay 20, 2016 Configuration menu - View commit details
-
Copy full SHA for 42bce5d - Browse repository at this point
Copy the full SHA 42bce5dView commit details
Commits on May 22, 2016
-
It's not clear whether the lengths returned by the BIO are
nil-terminated (and valgrind suggests they aren't), so make sure that they are always nil-terminated.
kristaps committedMay 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 5a44560 - Browse repository at this point
Copy the full SHA 5a44560View commit details -
Add JSMN: https://github.com/zserge/jsmn.
kristaps committedMay 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 09e43fc - Browse repository at this point
Copy the full SHA 09e43fcView commit details -
Put license directly into jsmn.c and jsmn.h, just to be clear about it.
kristaps committedMay 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 509559a - Browse repository at this point
Copy the full SHA 509559aView commit details -
Kick out json-c in favour of jsmn (with an array->tree wrapper).
kristaps committedMay 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 1498599 - Browse repository at this point
Copy the full SHA 1498599View commit details -
Note use of MIT license in JSMN's files.
kristaps committedMay 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 91690ff - Browse repository at this point
Copy the full SHA 91690ffView commit details
Commits on May 24, 2016
-
Start to kick out libcurl with a small HTTP client originally inspire…
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for b34b4c6 - Browse repository at this point
Copy the full SHA b34b4c6View commit details -
Missing header for compilation.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for 2b4e54c - Browse repository at this point
Copy the full SHA 2b4e54cView commit details -
Continue fleshing out http.h implementation.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for b083193 - Browse repository at this point
Copy the full SHA b083193View commit details -
Have dnsproc transfer both the IP/IPv6 to netproc and also the family…
… itself. Move the maximum number of queried servers into extern.h.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for 84c2c3d - Browse repository at this point
Copy the full SHA 84c2c3dView commit details -
Max the maximum DNS entries be globally known and also add the new dn…
…sproc comm identifiers.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for 86e728b - Browse repository at this point
Copy the full SHA 86e728bView commit details -
Stop using curl, and instead use the home-grown http.c and -tls.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for d056be5 - Browse repository at this point
Copy the full SHA d056be5View commit details -
Weaken TLS validation. Is this necessary?
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for ff24d77 - Browse repository at this point
Copy the full SHA ff24d77View commit details -
Initial [working] removal of curl from netproc. This replaces the nreq()
and sreq() functions with those using http.h. There is still a fair amount of superfluous debugging going on, and the system isn't "optimum" regarding memory at all.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for c131cdc - Browse repository at this point
Copy the full SHA c131cdcView commit details -
Don't use strdup() for bodies--they can be binary.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for a72c2d5 - Browse repository at this point
Copy the full SHA a72c2d5View commit details -
kristaps committed
May 24, 2016 Configuration menu - View commit details
-
Copy full SHA for f41a1c4 - Browse repository at this point
Copy the full SHA f41a1c4View commit details -
For the time being, allow tls_read/write to be ifdef'd for two different
versions of the API.
kristaps committedMay 24, 2016 Configuration menu - View commit details
-
Copy full SHA for 7c57120 - Browse repository at this point
Copy the full SHA 7c57120View commit details -
kristaps committed
May 24, 2016 Configuration menu - View commit details
-
Copy full SHA for 66e24fc - Browse repository at this point
Copy the full SHA 66e24fcView commit details -
kristaps committed
May 24, 2016 Configuration menu - View commit details
-
Copy full SHA for 3d99e52 - Browse repository at this point
Copy the full SHA 3d99e52View commit details -
kristaps committed
May 24, 2016 Configuration menu - View commit details
-
Copy full SHA for aaf86c7 - Browse repository at this point
Copy the full SHA aaf86c7View commit details
Commits on May 25, 2016
-
Cache the last DNS response and return that, if the subsequent reques…
…t is the same.
kristaps committedMay 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 7173c93 - Browse repository at this point
Copy the full SHA 7173c93View commit details -
Make sure the connection is closed as soon as the body is read and also
put the head and body buffer pointers into http_get.
kristaps committedMay 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 2ff999a - Browse repository at this point
Copy the full SHA 2ff999aView commit details -
Have sreq and nreq return the HTTP error or -1, remove some debugging…
… messages, use the new http_get members instead of calling functions. "Clean-up."
kristaps committedMay 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 2db9098 - Browse repository at this point
Copy the full SHA 2db9098View commit details -
Fix scanning ahead for SAN DNS entries.
kristaps committedMay 25, 2016 Configuration menu - View commit details
-
Copy full SHA for c9ba346 - Browse repository at this point
Copy the full SHA c9ba346View commit details -
Figure out what tls_close does with the socket.
kristaps committedMay 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 7d2c743 - Browse repository at this point
Copy the full SHA 7d2c743View commit details -
Try to close connection properly.
kristaps committedMay 25, 2016 Configuration menu - View commit details
-
Copy full SHA for f44ab20 - Browse repository at this point
Copy the full SHA f44ab20View commit details
Commits on May 26, 2016
-
kristaps committed
May 26, 2016 Configuration menu - View commit details
-
Copy full SHA for 3065bb1 - Browse repository at this point
Copy the full SHA 3065bb1View commit details -
What's the point of dropping root privileges if root can't do anything?
kristaps committedMay 26, 2016 Configuration menu - View commit details
-
Copy full SHA for e6aac4a - Browse repository at this point
Copy the full SHA e6aac4aView commit details -
kristaps committed
May 26, 2016 Configuration menu - View commit details
-
Copy full SHA for 3beb99e - Browse repository at this point
Copy the full SHA 3beb99eView commit details -
Rename chroot-pledge into util-pledge, which is more appropriate.
kristaps committedMay 26, 2016 Configuration menu - View commit details
-
Copy full SHA for b3c9da8 - Browse repository at this point
Copy the full SHA b3c9da8View commit details
Commits on Jun 1, 2016
-
Fix usage. patch by Caspar Schutijser--thanks!
kristaps committedJun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for 7ba526e - Browse repository at this point
Copy the full SHA 7ba526eView commit details -
Remove comment about rename(2) (ack'd by deraadt@) and remove rpath from
inet pledge, which was a holdover from libcurl.
kristaps committedJun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for 49cdc56 - Browse repository at this point
Copy the full SHA 49cdc56View commit details -
Re-add chroot(2) for file process and challenge process. This is because
the whitepath doesn't exist (yet) for the former, and the challenge process has unknown files in a known path.
kristaps committedJun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for afec6fc - Browse repository at this point
Copy the full SHA afec6fcView commit details -
The user-drop now occurs only in the -portable code, so we don't want to
carry around all sorts of extra information we don't use.
kristaps committedJun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for 35ad88a - Browse repository at this point
Copy the full SHA 35ad88aView commit details -
kristaps committed
Jun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for fdcc5de - Browse repository at this point
Copy the full SHA fdcc5deView commit details -
Prune out setting a user: this is no longer necessary as all procs not
fully pledged need the root user for chroot.
kristaps committedJun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for b46de3f - Browse repository at this point
Copy the full SHA b46de3fView commit details -
Remove implementation notes. Suggested by deraadt@ among others.
kristaps committedJun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for d7e7305 - Browse repository at this point
Copy the full SHA d7e7305View commit details -
Kick out a lot of old header files we don't use any more.
kristaps committedJun 1, 2016 Configuration menu - View commit details
-
Copy full SHA for b97f3c1 - Browse repository at this point
Copy the full SHA b97f3c1View commit details
Commits on Jun 2, 2016
-
Protect against zero-length read (EOF) freeing with the realloc. Foun…
…d by Remco--thanks!
kristaps committedJun 2, 2016 Configuration menu - View commit details
-
Copy full SHA for e98f885 - Browse repository at this point
Copy the full SHA e98f885View commit details -
Correct allocation size as noted by @kaworu in pull/2.
kristaps committedJun 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 9836e7e - Browse repository at this point
Copy the full SHA 9836e7eView commit details -
Handle zero-length arrays and mark file-scoped function as static. The
former from a patch by @kaworu in pull/2 -- thanks!
kristaps committedJun 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 1369e48 - Browse repository at this point
Copy the full SHA 1369e48View commit details -
Fix an error-path memory leak and make more specific notes as to why
I'm not touching the memory (right now) of this mystery function. This raised by @kaworu in pull/2 -- thanks!
kristaps committedJun 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 93273c6 - Browse repository at this point
Copy the full SHA 93273c6View commit details
Commits on Jun 3, 2016
-
Fix typo noted by @kaworu in kristapsdz#3 -- thanks!
kristaps committedJun 3, 2016 Configuration menu - View commit details
-
Copy full SHA for 63e7773 - Browse repository at this point
Copy the full SHA 63e7773View commit details -
Remove dependency on RSA for account key. This is only the first step…
…, and makes the key extraction be generic. It will need more interoperability with the signing process to actually work.
kristaps committedJun 3, 2016 Configuration menu - View commit details
-
Copy full SHA for bd72caf - Browse repository at this point
Copy the full SHA bd72cafView commit details -
Require key to be RSA (for now). This builds on a patch submitted by
Remco--thank you!
kristaps committedJun 3, 2016 Configuration menu - View commit details
-
Copy full SHA for 45601bd - Browse repository at this point
Copy the full SHA 45601bdView commit details -
Remove dependency on RSA for the domain key. This completely lifts the
restrictions, as the certificate creation is opaque. This is from a patch by Remco--thanks!
kristaps committedJun 3, 2016 Configuration menu - View commit details
-
Copy full SHA for 60bd7b0 - Browse repository at this point
Copy the full SHA 60bd7b0View commit details -
Be more specific about RSA-ness.
kristaps committedJun 3, 2016 Configuration menu - View commit details
-
Copy full SHA for 2e6ce15 - Browse repository at this point
Copy the full SHA 2e6ce15View commit details
Commits on Jun 25, 2016
-
Do what the documentation says regarding -v -v and dump buffers.
kristaps committedJun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 5729d35 - Browse repository at this point
Copy the full SHA 5729d35View commit details -
Introduce -m (not documented while I test it) that appends the initial
domain to all paths. This makes it easier to use in systems where one's invoking letskencrypt multiple times. Also add some simple validation of the domain names to prevent them from (1) trampling the directory structure and (2) being bogus in general.
kristaps committedJun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for bfe292e - Browse repository at this point
Copy the full SHA bfe292eView commit details -
Don't modify the input buffer when tracing!
kristaps committedJun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 7ea8957 - Browse repository at this point
Copy the full SHA 7ea8957View commit details -
kristaps committed
Jun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for d37a399 - Browse repository at this point
Copy the full SHA d37a399View commit details -
Initialise variable and also downgrade "cached" message to trace mode.
kristaps committedJun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 7846213 - Browse repository at this point
Copy the full SHA 7846213View commit details -
kristaps committed
Jun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for f58a62f - Browse repository at this point
Copy the full SHA f58a62fView commit details -
Note RSA-specific functions as patched by Remco---thanks!
kristaps committedJun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 61ee3c2 - Browse repository at this point
Copy the full SHA 61ee3c2View commit details -
Split out more RSA-specific functions, from a modified patch by Remco…
…---thanks!
kristaps committedJun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 45c697e - Browse repository at this point
Copy the full SHA 45c697eView commit details -
Also move the key creation into an RSA-specific format, directly from a
patch by Remco---thanks!
kristaps committedJun 25, 2016 Configuration menu - View commit details
-
Copy full SHA for f08e3c9 - Browse repository at this point
Copy the full SHA f08e3c9View commit details
Commits on Jun 28, 2016
-
kristaps committed
Jun 28, 2016 Configuration menu - View commit details
-
Copy full SHA for 5ebcadb - Browse repository at this point
Copy the full SHA 5ebcadbView commit details -
Have creation of account key be properly umasked. From a patch by Rem…
…co---thanks!
kristaps committedJun 28, 2016 Configuration menu - View commit details
-
Copy full SHA for 035ecde - Browse repository at this point
Copy the full SHA 035ecdeView commit details
Commits on Jul 2, 2016
-
Use isalnum instead of isalpha for domain name validation. Submitted by
Remco and as kristapsdz#5
kristaps committedJul 2, 2016 Configuration menu - View commit details
-
Copy full SHA for c90ae85 - Browse repository at this point
Copy the full SHA c90ae85View commit details -
OpenBSD 5.7 needs stdint.h for uintptr_t.
kristaps committedJul 2, 2016 Configuration menu - View commit details
-
Copy full SHA for d111e4c - Browse repository at this point
Copy the full SHA d111e4cView commit details -
On OpenBSD 5.7, tls_read and family behave strangely: account for that.
kristaps committedJul 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 094535c - Browse repository at this point
Copy the full SHA 094535cView commit details
Commits on Jul 10, 2016
-
kristaps committed
Jul 10, 2016 Configuration menu - View commit details
-
Copy full SHA for bd3de43 - Browse repository at this point
Copy the full SHA bd3de43View commit details
Commits on Jul 12, 2016
-
Beginning of code to let the keyproc create a new RSA domain key. Thi…
…s was prompted by kristapsdz#7
kristaps committedJul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for e295cf8 - Browse repository at this point
Copy the full SHA e295cf8View commit details -
kristaps committed
Jul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for 298a93a - Browse repository at this point
Copy the full SHA 298a93aView commit details -
Move rsa key creation and loading into their own file (and header) for
usage (current) by acctproc and (pending) keyproc.
kristaps committedJul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for 96240a9 - Browse repository at this point
Copy the full SHA 96240a9View commit details -
Adding key creation to keyproc.
kristaps committedJul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for 78b8561 - Browse repository at this point
Copy the full SHA 78b8561View commit details -
Note domain key, not account key.
kristaps committedJul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for aa93e17 - Browse repository at this point
Copy the full SHA aa93e17View commit details -
kristaps committed
Jul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for 33f8fb1 - Browse repository at this point
Copy the full SHA 33f8fb1View commit details -
Add manual bits for -N, domain key registration.
kristaps committedJul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for 366b651 - Browse repository at this point
Copy the full SHA 366b651View commit details -
kristaps committed
Jul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for 6808685 - Browse repository at this point
Copy the full SHA 6808685View commit details -
Silence a coverity issue. No logical change.
kristaps committedJul 12, 2016 Configuration menu - View commit details
-
Copy full SHA for 9acfbce - Browse repository at this point
Copy the full SHA 9acfbceView commit details
Commits on Jul 13, 2016
-
Add check for extended error code (i.e., exit status of 2).
kristaps committedJul 13, 2016 Configuration menu - View commit details
-
Copy full SHA for 474a6fd - Browse repository at this point
Copy the full SHA 474a6fdView commit details -
Return a special error code when we update certificates.
kristaps committedJul 13, 2016 Configuration menu - View commit details
-
Copy full SHA for 6aaa883 - Browse repository at this point
Copy the full SHA 6aaa883View commit details -
Fix usage message, fix error message to be a bit more useful (as note…
…d in kristapsdz/acme-client-portable#3 ) and finally change the error code to be "2" if nothing changed on the disc, otherwise 0 on success (the certificates updated) and 1 on failure.
kristaps committedJul 13, 2016 Configuration menu - View commit details
-
Copy full SHA for 5207e22 - Browse repository at this point
Copy the full SHA 5207e22View commit details -
Note new exit codes, change "mkdir -m" for mkdir and chmod (not all s…
…ystems have the -m flag), and use the return codes in the example.
kristaps committedJul 13, 2016 Configuration menu - View commit details
-
Copy full SHA for da11a12 - Browse repository at this point
Copy the full SHA da11a12View commit details -
Fix example and reorder exit status documentation.
kristaps committedJul 13, 2016 Configuration menu - View commit details
-
Copy full SHA for d1f22f5 - Browse repository at this point
Copy the full SHA d1f22f5View commit details
Commits on Jul 16, 2016
-
When using -N or -n, try to open the key-file first, then only create it
if it doesn't exist. This allows using -nN even after first creating the files. From kristapsdz#8
kristaps committedJul 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 64cb509 - Browse repository at this point
Copy the full SHA 64cb509View commit details -
Allow PATH_VAR_EMPTY to be overridden. Apparently not all systems hav…
…e this directory, so let them provide their own.
kristaps committedJul 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 7994647 - Browse repository at this point
Copy the full SHA 7994647View commit details -
Properly check -n and -N existence in main.c, allowing them to propogate
to netproc and so on. This reverts a prior change that was incomplete.
kristaps committedJul 16, 2016 Configuration menu - View commit details
-
Copy full SHA for 563ba22 - Browse repository at this point
Copy the full SHA 563ba22View commit details
Commits on Jul 28, 2016
-
Initial backing-up of certificates.
Suggested by kristapsdz#12 and kristapsdz#9
kristaps committedJul 28, 2016 Configuration menu - View commit details
-
Copy full SHA for 8d18097 - Browse repository at this point
Copy the full SHA 8d18097View commit details -
kristaps committed
Jul 28, 2016 Configuration menu - View commit details
-
Copy full SHA for 4092dd3 - Browse repository at this point
Copy the full SHA 4092dd3View commit details
Commits on Aug 6, 2016
-
Adding override for agreement with -a flag. Noted (and partially patc…
…hed) in kristapsdz#15 and by ``pasta'' over e-mail -- thanks!
kristaps committedAug 6, 2016 Configuration menu - View commit details
-
Copy full SHA for 8cfee69 - Browse repository at this point
Copy the full SHA 8cfee69View commit details -
Allow overriding agreement and also update usage message.
kristaps committedAug 6, 2016 Configuration menu - View commit details
-
Copy full SHA for 0debf74 - Browse repository at this point
Copy the full SHA 0debf74View commit details -
kristaps committed
Aug 6, 2016 Configuration menu - View commit details
-
Copy full SHA for fe24b17 - Browse repository at this point
Copy the full SHA fe24b17View commit details -
Allow a fake-install prefix. From kristapsdz#16 .
kristaps committedAug 6, 2016 Configuration menu - View commit details
-
Copy full SHA for 6a0a3f5 - Browse repository at this point
Copy the full SHA 6a0a3f5View commit details
Commits on Aug 19, 2016
-
Merge kristapsdz/acme-client-portable#6 -- thanks, Bernard!
kristaps committedAug 19, 2016 Configuration menu - View commit details
-
Copy full SHA for a54458a - Browse repository at this point
Copy the full SHA a54458aView commit details
Commits on Aug 22, 2016
-
Initial support for the official "-t" option, which allows the caller to
be manage the challenge itself. Compile-tested but needs work. Also put all asprintf calls into doasprintf, which manages the null-ification on the failure track.
kristaps committedAug 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 028b423 - Browse repository at this point
Copy the full SHA 028b423View commit details -
Have the pledge(2) sandbox accept an argument as to whether the chall…
…enge process is going to do anything in the webroot.
kristaps committedAug 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 7bbbf78 - Browse repository at this point
Copy the full SHA 7bbbf78View commit details -
kristaps committed
Aug 22, 2016 Configuration menu - View commit details
-
Copy full SHA for 846781c - Browse repository at this point
Copy the full SHA 846781cView commit details
Commits on Aug 31, 2016
-
Add license (noted by florian@) and also note that letskencrypt is now
shipped as acme-client in OpenBSD.
kristaps committedAug 31, 2016 Configuration menu - View commit details
-
Copy full SHA for 33c4b38 - Browse repository at this point
Copy the full SHA 33c4b38View commit details -
kristaps committed
Aug 31, 2016 Configuration menu - View commit details
-
Copy full SHA for c3fb432 - Browse repository at this point
Copy the full SHA c3fb432View commit details
Commits on Sep 1, 2016
-
Initial steps in renaming to acme-client. This effort was triggered by
inclusion into OpenBSD as acme-client and further... suggested... by Josh Aas of Let's Encrypt.
kristaps committedSep 1, 2016 Configuration menu - View commit details
-
Copy full SHA for 69ae73d - Browse repository at this point
Copy the full SHA 69ae73dView commit details -
Continue renaming and merge in some fixes suggested by Raf Czlonka--t…
…hanks!
kristaps committedSep 1, 2016 Configuration menu - View commit details
-
Copy full SHA for 6985e81 - Browse repository at this point
Copy the full SHA 6985e81View commit details
Commits on Sep 2, 2016
-
White-space fixes merged from downstream OpenBSD commits.
kristaps committedSep 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 1fc7d29 - Browse repository at this point
Copy the full SHA 1fc7d29View commit details -
Continue merging white-space (and other misc.) fixes from downstream …
…OpenBSD.
kristaps committedSep 2, 2016 Configuration menu - View commit details
-
Copy full SHA for b1feb82 - Browse repository at this point
Copy the full SHA b1feb82View commit details -
kristaps committed
Sep 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 9d4655a - Browse repository at this point
Copy the full SHA 9d4655aView commit details -
Final raft of white-space changes from OpenBSD downstream.
kristaps committedSep 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 69eaeec - Browse repository at this point
Copy the full SHA 69eaeecView commit details -
kristaps committed
Sep 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 093055d - Browse repository at this point
Copy the full SHA 093055dView commit details
Commits on Sep 3, 2016
-
Use "acme" instead of "letsencrypt" in default paths. WARNING: IF YOU'RE
USING THE DEFAULT PATHS, YOU NEED TO RENAME!
kristaps committedSep 3, 2016 Configuration menu - View commit details
-
Copy full SHA for 6f988e9 - Browse repository at this point
Copy the full SHA 6f988e9View commit details -
Automatically create the -m directory if it does not exist and has no…
…t been overriden. For example, if providing -m foo.com without a -f, this would create the foo.com directory within /etc/acme.
kristaps committedSep 3, 2016 Configuration menu - View commit details
-
Copy full SHA for 583baab - Browse repository at this point
Copy the full SHA 583baabView commit details
Commits on Oct 29, 2016
-
kristaps committed
Oct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for 6133ea2 - Browse repository at this point
Copy the full SHA 6133ea2View commit details -
Fix typos in kristapsdz#21 and kristapsdz#19 -- thanks!
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for da74d8c - Browse repository at this point
Copy the full SHA da74d8cView commit details -
Merge some churn from OpenBSD downstream.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for ae258d6 - Browse repository at this point
Copy the full SHA ae258d6View commit details -
Merge OpenBSD variable initialisation.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for 464e49e - Browse repository at this point
Copy the full SHA 464e49eView commit details -
Merge some OpenBSD churn to reduce diff size.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for 2303a60 - Browse repository at this point
Copy the full SHA 2303a60View commit details -
Initialise the HTTP (really just the TLS) context so that it's not do…
…ne each time the connections are made. This needs to happen before pledging and/or jailing. Inspired by OpenBSD's downstream commit, but modified to prevent a static value being used for the configuration. While here, merge OpenBSD churn for variables.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for b5cb33e - Browse repository at this point
Copy the full SHA b5cb33eView commit details -
Merge Openbsd changes for variables and rename "revoke" to revocate.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for b5fa0c9 - Browse repository at this point
Copy the full SHA b5fa0c9View commit details -
Merge more OpenBSD variable changes.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for 05b925b - Browse repository at this point
Copy the full SHA 05b925bView commit details -
Bring more in line with OpenBSD's changes.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for 18c00eb - Browse repository at this point
Copy the full SHA 18c00ebView commit details -
Compilation on older OpenBSD machines.
kristaps committedOct 29, 2016 Configuration menu - View commit details
-
Copy full SHA for 4e3c816 - Browse repository at this point
Copy the full SHA 4e3c816View commit details
Commits on Oct 30, 2016
-
Some portability glue for tls_config_error, which will go away as I i…
…mprove the -portable logic.
kristaps committedOct 30, 2016 Configuration menu - View commit details
-
Copy full SHA for 7be0cf8 - Browse repository at this point
Copy the full SHA 7be0cf8View commit details -
First step at fork+exec. This re-executes each of the subprocesses in…
…stead of merely forking into them.
kristaps committedOct 30, 2016 Configuration menu - View commit details
-
Copy full SHA for c00c2ff - Browse repository at this point
Copy the full SHA c00c2ffView commit details -
Hack around some poor design decisions in early versions of libtls.
kristaps committedOct 30, 2016 Configuration menu - View commit details
-
Copy full SHA for 4f11a7f - Browse repository at this point
Copy the full SHA 4f11a7fView commit details -
Move error reporting into main process only. Document source code more.
kristaps committedOct 30, 2016 Configuration menu - View commit details
-
Copy full SHA for bcda427 - Browse repository at this point
Copy the full SHA bcda427View commit details
Commits on Oct 31, 2016
-
Make sure opened descriptors don't clobber the ones we've set aside. …
…Also document some other functions.
kristaps committedOct 31, 2016 Configuration menu - View commit details
-
Copy full SHA for ffee3ba - Browse repository at this point
Copy the full SHA ffee3baView commit details -
Bump min reserved descriptor, just in case.
kristaps committedOct 31, 2016 Configuration menu - View commit details
-
Copy full SHA for 9a0af22 - Browse repository at this point
Copy the full SHA 9a0af22View commit details -
Testing initial support for ECSDA domain keys.
kristaps committedOct 31, 2016 Configuration menu - View commit details
-
Copy full SHA for 8d12997 - Browse repository at this point
Copy the full SHA 8d12997View commit details -
Fix: forgot to dup certproc for netproc.
kristaps committedOct 31, 2016 Configuration menu - View commit details
-
Copy full SHA for c76a01c - Browse repository at this point
Copy the full SHA c76a01cView commit details -
kristaps committed
Oct 31, 2016 Configuration menu - View commit details
-
Copy full SHA for fddb1f7 - Browse repository at this point
Copy the full SHA fddb1f7View commit details -
kristaps committed
Oct 31, 2016 Configuration menu - View commit details
-
Copy full SHA for 6ad1964 - Browse repository at this point
Copy the full SHA 6ad1964View commit details -
Fix as per kristapsdz/acme-client-portable#9 -- thanks!
kristaps committedOct 31, 2016 Configuration menu - View commit details
-
Copy full SHA for 82dd102 - Browse repository at this point
Copy the full SHA 82dd102View commit details
Commits on Nov 1, 2016
-
Allow expanding the SAN domains of a certificate.
kristaps committedNov 1, 2016 Configuration menu - View commit details
-
Copy full SHA for 3f4da11 - Browse repository at this point
Copy the full SHA 3f4da11View commit details -
If we have a new domain, force updating the certificate.
kristaps committedNov 1, 2016 Configuration menu - View commit details
-
Copy full SHA for 0163b3e - Browse repository at this point
Copy the full SHA 0163b3eView commit details
Commits on Nov 2, 2016
-
Use idiom suggested in OpenBSD's style(9).
kristaps committedNov 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 2fc821f - Browse repository at this point
Copy the full SHA 2fc821fView commit details -
Change __dead to be an __attribute__ (better portability).
kristaps committedNov 2, 2016 Configuration menu - View commit details
-
Copy full SHA for f713a8c - Browse repository at this point
Copy the full SHA f713a8cView commit details -
Work around old versions of libtls.
kristaps committedNov 2, 2016 Configuration menu - View commit details
-
Copy full SHA for 864972f - Browse repository at this point
Copy the full SHA 864972fView commit details
Commits on Nov 9, 2016
-
Use timegm instead of mktime as we're processing a UTC time. Also, the
latter causes us to reach out over the file-system for locale data with some operating systems, which trips up our sandbox.
kristaps committedNov 9, 2016 Configuration menu - View commit details
-
Copy full SHA for 941858d - Browse repository at this point
Copy the full SHA 941858dView commit details
Commits on Nov 24, 2016
-
kristapsdz/acme-client-portable#12 that pushes the check for file pre-existence with -n and -N only into the main process, stripping out the arguments before passing them to the child. This fixes a race condition.
kristaps committedNov 24, 2016 Configuration menu - View commit details
-
Copy full SHA for 233abc1 - Browse repository at this point
Copy the full SHA 233abc1View commit details
Commits on Nov 25, 2016
-
Final check-in for fork+exec fallout: have an extra argument, '-X', that
allows certain variables to be overriden. This allows us to provide -nN and have them properly be nullified by the child processes.
kristaps committedNov 25, 2016 Configuration menu - View commit details
-
Copy full SHA for 9e0c35c - Browse repository at this point
Copy the full SHA 9e0c35cView commit details -
Disallow '-X' in parent process.
kristaps committedNov 25, 2016 Configuration menu - View commit details
-
Copy full SHA for efbc294 - Browse repository at this point
Copy the full SHA efbc294View commit details
Commits on Dec 2, 2016
-
Merge in OpenBSD's fix to the tls_close() function. And in doing so, …
…back- port that to the older API of libressl.
kristaps committedDec 2, 2016 Configuration menu - View commit details
-
Copy full SHA for afdffbe - Browse repository at this point
Copy the full SHA afdffbeView commit details
Commits on Dec 5, 2016
-
Force umask for creation of challenge file.
kristaps committedDec 5, 2016 Configuration menu - View commit details
-
Copy full SHA for 6c44c54 - Browse repository at this point
Copy the full SHA 6c44c54View commit details
Commits on Jan 28, 2017
-
Add OCSP stapling support. Not tested yet.
kristaps committedJan 28, 2017 Configuration menu - View commit details
-
Copy full SHA for fffcdf8 - Browse repository at this point
Copy the full SHA fffcdf8View commit details -
Add OCSP support to front-end.
kristaps committedJan 28, 2017 Configuration menu - View commit details
-
Copy full SHA for 4cf0d91 - Browse repository at this point
Copy the full SHA 4cf0d91View commit details -
Expand on the external thumbprint idea, from kristapsdz/acme-client-p…
…ortable#13 . This creates a triplet exported to the operator: challenge type, domain, and print.
kristaps committedJan 28, 2017 Configuration menu - View commit details
-
Copy full SHA for 4538be8 - Browse repository at this point
Copy the full SHA 4538be8View commit details -
Modified version of manpage update in kristapsdz/acme-client-portable#13
kristaps committedJan 28, 2017 Configuration menu - View commit details
-
Copy full SHA for 71fa0a3 - Browse repository at this point
Copy the full SHA 71fa0a3View commit details
Commits on Jan 30, 2017
-
Move key-generation message prior to action so that long-running task…
…s can be noted approriately. From kristapsdz#29 -- thanks!
kristaps committedJan 30, 2017 Configuration menu - View commit details
-
Copy full SHA for 8cd6e10 - Browse repository at this point
Copy the full SHA 8cd6e10View commit details -
Debug message before long-running action.
kristaps committedJan 30, 2017 Configuration menu - View commit details
-
Copy full SHA for baefe84 - Browse repository at this point
Copy the full SHA baefe84View commit details
Commits on Feb 1, 2017
-
Reduce using "Let's Encrypt" unless where applicable. (Future version…
…s will make this optional.)
kristaps committedFeb 1, 2017 Configuration menu - View commit details
-
Copy full SHA for e72cef3 - Browse repository at this point
Copy the full SHA e72cef3View commit details
Commits on Feb 12, 2017
-
Deprecate working with pre-5.9 OpenBSD. We should be using the most u…
…p to date version of libressl out there.
kristaps committedFeb 12, 2017 Configuration menu - View commit details
-
Copy full SHA for 44b9585 - Browse repository at this point
Copy the full SHA 44b9585View commit details
Commits on Feb 14, 2017
-
kristaps committed
Feb 14, 2017 Configuration menu - View commit details
-
Copy full SHA for d1ba902 - Browse repository at this point
Copy the full SHA d1ba902View commit details
Commits on Mar 12, 2017
-
Fix a harmless error-exit found by Dimitris Papastamos---thanks!
kristaps committedMar 12, 2017 Configuration menu - View commit details
-
Copy full SHA for ab6155c - Browse repository at this point
Copy the full SHA ab6155cView commit details -
Clarify that older OpenBSD isn't supported. You shouldn't be running …
…versions as old as that.
kristaps committedMar 12, 2017 Configuration menu - View commit details
-
Copy full SHA for f54440b - Browse repository at this point
Copy the full SHA f54440bView commit details -
kristaps committed
Mar 12, 2017 Configuration menu - View commit details
-
Copy full SHA for d496a6f - Browse repository at this point
Copy the full SHA d496a6fView commit details
Commits on Jul 1, 2017
-
Move example configuration into the EXAMPLE section and include both …
…nginx and Apache (more to come). Inspired by kristapsdz#32 --- thanks!
kristaps committedJul 1, 2017 Configuration menu - View commit details
-
Copy full SHA for d609cb3 - Browse repository at this point
Copy the full SHA d609cb3View commit details
Commits on Jul 2, 2017
-
Add OpenBSD httpd(8) configuration.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for b579218 - Browse repository at this point
Copy the full SHA b579218View commit details -
Start moving operations (and configuration) into struct config.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for 52b8b8d - Browse repository at this point
Copy the full SHA 52b8b8dView commit details -
Move "force" into configuration.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for fb2d049 - Browse repository at this point
Copy the full SHA fb2d049View commit details -
Move "expand" and "backup" into configuration object.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for 1d20e1b - Browse repository at this point
Copy the full SHA 1d20e1bView commit details -
Move last "low-hanging fruit" config ops to configuration.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for f9088e2 - Browse repository at this point
Copy the full SHA f9088e2View commit details -
kristaps committed
Jul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for 542f743 - Browse repository at this point
Copy the full SHA 542f743View commit details -
Move the choice of CA directory service into main.c and a config field.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for eec809c - Browse repository at this point
Copy the full SHA eec809cView commit details -
Move agreement URL into configuration as well.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for 09e5702 - Browse repository at this point
Copy the full SHA 09e5702View commit details -
Move the challenge type into struct config.
kristaps committedJul 2, 2017 Configuration menu - View commit details
-
Copy full SHA for aa252cc - Browse repository at this point
Copy the full SHA aa252ccView commit details
Commits on Sep 8, 2018
-
Ooops! I hope I don't see any more of those!
Configuration menu - View commit details
-
Copy full SHA for 97200fb - Browse repository at this point
Copy the full SHA 97200fbView commit details -
Configuration menu - View commit details
-
Copy full SHA for af0feb0 - Browse repository at this point
Copy the full SHA af0feb0View commit details