Commit Graph
345 Commits
Author SHA1 Message Date
Tim Bruijnzeels 1ea10bb0cd Be more lenient in accepting RFC8181/6492 CMS structures and Id Certs - because they are poorly defined. (#13) 2019-07-24 16:26:30 -04:00
Tim Bruijnzeels b1bdd08071 Should fix the RFC6492 CMS signatures. (#13) 2019-07-24 09:47:38 -04:00
Tim Bruijnzeels d6ecccb224 Log error with base64 of RFC6492 response CMS in case response cannot be decoded. 2019-07-23 12:34:46 -04:00
Tim Bruijnzeels 9b790757f4 Ignore critical extensions on IdCert (for interop testing). 2019-07-23 11:41:52 -04:00
Tim Bruijnzeels 985126f15b Add command line options to add RFC6492 parent. 2019-07-23 11:24:31 -04:00
Tim Bruijnzeels 69b0172070 Fix build. 2019-07-23 10:21:49 -04:00
Tim Bruijnzeels 5ec918b26b Add type alias for ChildHandle -> Handle 2019-07-22 19:36:58 -04:00
Tim Bruijnzeels 29ce65ab46 Improve test for running an rfc6492 child under the embedded ta. 2019-07-22 18:47:05 -04:00
Tim Bruijnzeels 831cfed299 Renamed and organised CA code. (#13) 2019-07-22 14:02:52 -04:00
Tim Bruijnzeels 3c8e9a470c Fix racecondition (save the updated aggregate!), and deadlock (use outer_lock on pub functions). 2019-07-21 15:54:59 -04:00
Tim Bruijnzeels 2e7b6258fe Get certificate from RFC6492 parent / issue to child. (#13) 2019-07-21 15:53:37 -04:00
Tim Bruijnzeels 329c35eba2 Moving republish (all) to Scheduler. (#13) 2019-07-21 15:51:01 -04:00
Tim Bruijnzeels 2737a829da Support publishing to embedded pub server through scheduler. (#13) 2019-07-19 22:57:35 +02:00
Tim Bruijnzeels 38464aa2cf Introducing message queue for asynchronous triggered processes: request certs, publish. (work in progress for #13) 2019-07-19 21:20:18 +02:00
Tim Bruijnzeels 446a1c339b Add rfc6492 parent to child CA (#13). 2019-07-19 09:16:22 +02:00
Tim Bruijnzeels 901e2dfae7 Accept invalid certs when connecting to localhost or 127.0.0.1 - useful when testing. 2019-07-18 12:05:22 +02:00
Tim Bruijnzeels a6cbddbdf5 Generate the RFC8183 ID when a CA is initialised. Return RFC 8183 Child Request for CAs. 2019-07-18 11:55:20 +02:00
Tim Bruijnzeels b30c3a02b7 Merging cms_proxy module back into commons, so that we can define RFC8183 parents more easily. (#13) 2019-07-17 13:09:07 +02:00
Tim Bruijnzeels 3b7dd8fe20 Clippy knows best. 2019-07-17 11:32:26 +02:00
Tim Bruijnzeels 8f64fdf38b Rephrase 'decode' as 'validate' because we are really validating RFC8183 XML. (#13) 2019-07-17 11:30:40 +02:00
Tim Bruijnzeels 67ffeecd25 Enforce validation of id cert for repository response (#13) 2019-07-17 11:25:36 +02:00
Tim Bruijnzeels 84e7740c4b Enforce validation of id cert for publisher request (#13) 2019-07-17 11:17:41 +02:00
Tim Bruijnzeels 133cdb9502 Use ServiceUri (support plain http parent) for publication parent. (#13) 2019-07-17 11:10:50 +02:00
Tim Bruijnzeels 46f2d189e4 Support RFC8183 Parent Response. See issue #13. 2019-07-17 11:02:12 +02:00
Tim Bruijnzeels 5a79d0c18f Support RFC8183 Child Request. See issue #13. 2019-07-16 16:05:48 +02:00
Tim Bruijnzeels 52229023c0 Support RFC6492 Not Performed Response. 2019-07-16 14:27:37 +02:00
Tim Bruijnzeels 35ba179557 Support RFC6492 Revocation Response XML 2019-07-16 12:43:57 +02:00
Tim Bruijnzeels f8c83950a4 Support RFC6492 Revocation Request XML. 2019-07-16 12:21:43 +02:00
Tim Bruijnzeels 6b2d64e4f8 Support RFC6492 Issuance Report XML, and use it internally as well. (Issue #13) 2019-07-16 12:16:24 +02:00
Tim Bruijnzeels f622c14588 Support RFC6492 Issuance Report XML, and use it internally as well. (Issue #13) 2019-07-15 17:10:00 +02:00
Tim Bruijnzeels 63ddaec0b0 Support RFC6492 Certificate Issuance Request XML. (Issue #13) 2019-07-15 14:13:19 +02:00
Tim Bruijnzeels e859146bad Support RFC6492 List Response XML (for issue: #13) 2019-07-15 13:42:05 +02:00
Tim Bruijnzeels b6a0bfd0c6 Clean-up. 2019-07-11 17:10:02 +02:00
Tim Bruijnzeels 780fb8eaab Encode/decode RFC6492 list query xml. See #13. 2019-07-11 17:00:23 +02:00
Tim Bruijnzeels 109ee0d7f7 Ran yarn upgrade to update dep. and clear security alert. We will remove the dependency on yarn in the not-so-distant future. 2019-07-11 14:36:23 +02:00
Tim Bruijnzeels 4cb43debb8 Fixes support for RFC8181 clients again. 2019-07-11 14:31:48 +02:00
Tim BruijnzeelsandGitHub 2b6e600bc7 Merge pull request #48 from NLnetLabs/child-ca
Child ca
2019-07-11 10:09:51 +02:00
Tim Bruijnzeels 57b3096418 Manage embedded delegated CA through CLI. 2019-07-10 15:06:28 +02:00
Tim Bruijnzeels 0280e6eaec Simplify: let TA and CA use same codebase 'CertAuth' 2019-07-09 12:17:40 +02:00
Tim Bruijnzeels fd1df3bb82 Merge branch 'master' into child-ca 2019-07-05 15:51:55 +02:00
Tim Bruijnzeels 092a507c20 Add dependency to actix-identity after this was removed in actix-web 1.0.2. 2019-07-05 15:14:57 +02:00
Tim BruijnzeelsandGitHub 13dc5072e7 Merge pull request #46 from NLnetLabs/enrico-ui
Restyling and navigation updates
2019-07-05 15:07:57 +02:00
Tim BruijnzeelsandGitHub 9f7ff13137 Merge pull request #47 from NLnetLabs/upgrade-actix-web
Simplifications
2019-07-05 15:07:39 +02:00
Tim Bruijnzeels 1e597f89ab Merge branch 'master' into upgrade-actix-web 2019-07-05 15:05:17 +02:00
Tim Bruijnzeels 6e22317576 Clean-up 2019-07-05 14:53:38 +02:00
Tim Bruijnzeels e0d7596de4 Support child CA under embedded TA. Work in progress. Issue #14 2019-07-05 12:13:39 +02:00
Enrico Berti 344d90310f Restyled TA page 2019-06-13 10:03:52 +02:00
Enrico Berti ce6bb66211 Added navigation bar on top instead of landing page 2019-06-13 09:38:53 +02:00
Tim Bruijnzeels 813e075ede Simplifications and code formatting. 2019-06-13 08:53:02 +02:00
Tim BruijnzeelsandGitHub bdaf927403 Merge pull request #44 from NLnetLabs/upgrade-actix-web
Upgrade actix web. Closes #43
2019-06-11 22:19:09 +02:00