Tim Bruijnzeels
86ea370e8f
Support (great-) grandchildren under multiple lineages. Closes : #25
2019-08-20 14:01:48 +02:00
Tim Bruijnzeels
fc98944d66
Split parent and resource class maps.
...
This is a little more hassle when talking to a parent, however this is easier
when talking to children. Also there is now an explicit split in the names used
by the parent, and local simple (numbered) names for resources and their name-
spaces when it comes to publishing.
2019-08-19 15:13:08 +02:00
Tim Bruijnzeels
7925e72e88
Create real type for ResourceClassName.
2019-08-19 11:18:00 +02:00
Tim Bruijnzeels
60a60fd5d2
Change the notion of being a TA to having a special parent proxy, thus making TAs and normal CAs more alike.
2019-08-16 11:40:27 +02:00
Tim Bruijnzeels
f421502253
Automatically shrink certificates after the grace period expires. ( Closes #55 )
2019-08-15 11:47:31 +02:00
Tim Bruijnzeels
84bdd0c4fa
Force update resources for child CA.
2019-08-14 16:15:09 +02:00
Tim Bruijnzeels
c91abfc3ec
Add revocation for revoked issued certificate to CRL.
2019-08-13 15:59:08 +02:00
Tim Bruijnzeels
f4f2d726b8
Let child CA remove resource class, and request key revocations, when it looses an entitlement. ( #56 )
2019-08-13 15:38:37 +02:00
Tim Bruijnzeels
3af6d08943
Simplify embedded parent/child CAs. No use for tokens here, and child cannot override parent handle.
2019-08-12 16:54:28 +02:00
Tim Bruijnzeels
00e9165388
Remove the 'remote krill parent ca option'
2019-08-12 16:18:11 +02:00
Tim Bruijnzeels
81114cc581
Use panic!, not unimplemented!, for cases that should be impossible by desing.
2019-08-12 16:05:49 +02:00
Tim Bruijnzeels
c1875b9de8
Manually finish key-roll by activating the new key. Tested with apnic. Fixes #23
2019-08-12 15:25:58 +02:00
Tim Bruijnzeels
47e0240734
Manually initialise a key roll for a CA. ( #23 )
2019-08-07 16:15:07 +02:00
Tim Bruijnzeels
d6ac0db936
Guard key status life cycle in an enum (state machine). ( #23 )
2019-08-07 10:27:56 +02:00
Tim Bruijnzeels
6f61084457
Separating out ResourceClass.
2019-08-06 14:38:56 +02:00
Tim Bruijnzeels
fe614d927f
Clean up removed resource class and withdraw contents. Closes #50 .
2019-08-06 12:47:08 +02:00
Tim Bruijnzeels
baacf0e8f1
Change default to logging to file.
2019-08-06 10:54:23 +02:00
Tim Bruijnzeels
c37c257821
Some cleanup
2019-08-06 10:47:11 +02:00
Tim Bruijnzeels
0c39530f22
Refreshing CA certificates in the background - not yet handling losing resources. ( #50 )
2019-08-05 17:23:46 +02:00
Tim Bruijnzeels
24b038d7ff
Update child token, id_cert and/or resources. Closes #51 .
2019-08-02 20:42:04 +02:00
Tim Bruijnzeels
5d2593857e
Refactor events - use parent/child handle consistently for clarity.
2019-07-30 15:06:57 +02:00
Tim Bruijnzeels
cd2e7133e9
Rustfmt
2019-07-30 13:58:48 +02:00
Tim Bruijnzeels
73a525c9b1
Fix interop with apnic RFC6492 (better check for CA bit) - ( #13 )
2019-07-26 11:30:29 -04:00
Tim Bruijnzeels
b1bdd08071
Should fix the RFC6492 CMS signatures. ( #13 )
2019-07-24 09:47:38 -04:00
Tim Bruijnzeels
d6ecccb224
Log error with base64 of RFC6492 response CMS in case response cannot be decoded.
2019-07-23 12:34:46 -04:00
Tim Bruijnzeels
69b0172070
Fix build.
2019-07-23 10:21:49 -04:00
Tim Bruijnzeels
5ec918b26b
Add type alias for ChildHandle -> Handle
2019-07-22 19:36:58 -04:00
Tim Bruijnzeels
831cfed299
Renamed and organised CA code. ( #13 )
2019-07-22 14:02:52 -04:00
Tim Bruijnzeels
2e7b6258fe
Get certificate from RFC6492 parent / issue to child. ( #13 )
2019-07-21 15:53:37 -04:00
Tim Bruijnzeels
329c35eba2
Moving republish (all) to Scheduler. ( #13 )
2019-07-21 15:51:01 -04:00
Tim Bruijnzeels
2737a829da
Support publishing to embedded pub server through scheduler. ( #13 )
2019-07-19 22:57:35 +02:00
Tim Bruijnzeels
38464aa2cf
Introducing message queue for asynchronous triggered processes: request certs, publish. (work in progress for #13 )
2019-07-19 21:20:18 +02:00
Tim Bruijnzeels
446a1c339b
Add rfc6492 parent to child CA ( #13 ).
2019-07-19 09:16:22 +02:00
Tim Bruijnzeels
901e2dfae7
Accept invalid certs when connecting to localhost or 127.0.0.1 - useful when testing.
2019-07-18 12:05:22 +02:00
Tim Bruijnzeels
a6cbddbdf5
Generate the RFC8183 ID when a CA is initialised. Return RFC 8183 Child Request for CAs.
2019-07-18 11:55:20 +02:00
Tim Bruijnzeels
b30c3a02b7
Merging cms_proxy module back into commons, so that we can define RFC8183 parents more easily. ( #13 )
2019-07-17 13:09:07 +02:00
Tim Bruijnzeels
6b2d64e4f8
Support RFC6492 Issuance Report XML, and use it internally as well. (Issue #13 )
2019-07-16 12:16:24 +02:00
Tim Bruijnzeels
4cb43debb8
Fixes support for RFC8181 clients again.
2019-07-11 14:31:48 +02:00
Tim Bruijnzeels
57b3096418
Manage embedded delegated CA through CLI.
2019-07-10 15:06:28 +02:00
Tim Bruijnzeels
0280e6eaec
Simplify: let TA and CA use same codebase 'CertAuth'
2019-07-09 12:17:40 +02:00
Tim Bruijnzeels
e0d7596de4
Support child CA under embedded TA. Work in progress. Issue #14
2019-07-05 12:13:39 +02:00
Tim Bruijnzeels
821274a8d0
Fix authorisation checks.
2019-06-11 17:06:42 +02:00
Tim Bruijnzeels
40b154c577
Upgrade to actix-web 1.0
2019-06-11 12:49:50 +02:00
Tim Bruijnzeels
26411075c7
Clean up dependencies on actix (not needed at all) and actix-web.
2019-06-06 13:26:43 +02:00
Tim Bruijnzeels
f93cbebbff
Clarify full-sync scenario, and use more descriptive error identifiers in code.
2019-06-06 11:14:24 +02:00
Tim Bruijnzeels
16ce1db2ec
Automate (re)-publication. Closes #33 .
2019-06-05 17:15:27 +02:00
Tim Bruijnzeels
2d122d6664
Reduce complexity in eventsourcing. Closes #41
2019-06-04 17:13:44 +02:00
Tim Bruijnzeels
a6d9aade03
Manual publication of TA MFT and CRL. Closes #12 .
2019-06-04 08:46:58 +02:00
Tim Bruijnzeels
733f76f53b
Refactoring the TrustAnchor in preparation of publication.
2019-05-23 11:34:21 +02:00
Tim Bruijnzeels
2705418eab
Create Manifest and CRL for TA (initially).
2019-05-14 12:31:17 +02:00
Tim Bruijnzeels