]> git.street.me.uk Git - andy/dehydrated.git/log
andy/dehydrated.git
8 years agoMerge pull request #118 from allixx/lockfile-config.sh.example
Lukas Schauer [Wed, 3 Feb 2016 02:20:31 +0000 (03:20 +0100)]
Merge pull request #118 from allixx/lockfile-config.sh.example

Added LOCKFILE to config.sh.example

8 years agoAdded LOCKFILE to config.sh.example
allixx [Tue, 2 Feb 2016 08:16:53 +0000 (11:16 +0300)]
Added LOCKFILE to config.sh.example

8 years agoadded link to wiki page with example scripts for dns-01, fixes #117
Lukas Schauer [Mon, 1 Feb 2016 17:55:27 +0000 (18:55 +0100)]
added link to wiki page with example scripts for dns-01, fixes #117

8 years agodon't try to delete DOMAINS_TXT on early failure when not yet set
Lukas Schauer [Tue, 26 Jan 2016 16:49:28 +0000 (17:49 +0100)]
don't try to delete DOMAINS_TXT on early failure when not yet set

8 years agofixed curl check (fixes #112)
Lukas Schauer [Tue, 26 Jan 2016 16:16:34 +0000 (17:16 +0100)]
fixed curl check (fixes #112)

8 years agoMerge pull request #111 from weppos/patch-1
Lukas Schauer [Tue, 26 Jan 2016 16:15:19 +0000 (17:15 +0100)]
Merge pull request #111 from weppos/patch-1

The dns-01 support is now available in production

8 years agoMerge pull request #113 from hilbix/master
Lukas Schauer [Tue, 26 Jan 2016 16:12:11 +0000 (17:12 +0100)]
Merge pull request #113 from hilbix/master

pass IO descriptors to HOOK transparently

8 years agopass IO descriptors to HOOK transparently
Valentin Hilbig [Mon, 25 Jan 2016 00:12:56 +0000 (01:12 +0100)]
pass IO descriptors to HOOK transparently

closes #101

8 years agoThe dns-01 support is now available in production
Simone Carletti [Sun, 24 Jan 2016 09:45:43 +0000 (10:45 +0100)]
The dns-01 support is now available in production

See https://twitter.com/letsencrypt/status/689919523164721152

8 years agoMerge pull request #107 from jantore/hook-example
Lukas Schauer [Sat, 23 Jan 2016 11:43:00 +0000 (12:43 +0100)]
Merge pull request #107 from jantore/hook-example

Add hook script example.

8 years agoAdd hook script example.
Jan Tore Morken [Fri, 22 Jan 2016 20:48:19 +0000 (21:48 +0100)]
Add hook script example.

8 years agoMerge pull request #95 from nielslaukens/master
Lukas Schauer [Fri, 22 Jan 2016 15:54:47 +0000 (16:54 +0100)]
Merge pull request #95 from nielslaukens/master

Add ability to sign "arbitrary" CSRs

8 years agoMerge pull request #103 from nneul/fix-issue-102
Lukas Schauer [Fri, 22 Jan 2016 15:46:34 +0000 (16:46 +0100)]
Merge pull request #103 from nneul/fix-issue-102

Retain full result when submitting challenge. Fixes #102

8 years agoMerge pull request #99 from ymc/feature/add_conf.d_support
Lukas Schauer [Fri, 22 Jan 2016 15:40:21 +0000 (16:40 +0100)]
Merge pull request #99 from ymc/feature/add_conf.d_support

Add conf.d support

8 years agoMerge pull request #97 from ymc/feature/fix_syntax_highlighting
Lukas Schauer [Fri, 22 Jan 2016 15:36:35 +0000 (16:36 +0100)]
Merge pull request #97 from ymc/feature/fix_syntax_highlighting

Fix possibly broken syntax highlighting

8 years agoMerge pull request #100 from davidearl/master
Lukas Schauer [Fri, 22 Jan 2016 15:35:03 +0000 (16:35 +0100)]
Merge pull request #100 from davidearl/master

Add detail as to how dns-01 hook works

8 years agoMerge pull request #98 from ymc/fix/configuring_BASEDIR_does_not_affect_built_in_defaults
Lukas Schauer [Fri, 22 Jan 2016 15:31:15 +0000 (16:31 +0100)]
Merge pull request #98 from ymc/fix/configuring_BASEDIR_does_not_affect_built_in_defaults

Respect configured BASEDIR for default values

8 years agoRetain full result when submitting challenge. Fixes #102
Nathan Neulinger [Thu, 21 Jan 2016 23:11:11 +0000 (23:11 +0000)]
Retain full result when submitting challenge. Fixes #102

8 years agoAdd detail as to how dns-01 hook works
davidearl [Thu, 21 Jan 2016 15:39:18 +0000 (15:39 +0000)]
Add detail as to how dns-01 hook works

8 years agoAdd conf.d support
Daniel Beyer [Thu, 21 Jan 2016 15:29:16 +0000 (16:29 +0100)]
Add conf.d support

This adds support for a new config variable CONFIG_D in the main configuration
file. Setting a path to a directoy for CONFIG_D advises letsencrypt.sh to
source any additional files found in the specified CONFIG_D directory, that
have a '.sh' ending.
By default CONFIG_D is not set, meaning letsencrypt.sh does not source any
additional configuration files.

8 years agoRespect configured BASEDIR for default values
Daniel Beyer [Thu, 21 Jan 2016 14:56:52 +0000 (15:56 +0100)]
Respect configured BASEDIR for default values

If BASEDIR is set in config.sh, this does not modify the (default) values
of either PRIVATE_KEY, WELLKNOWN or LOCKFILE. One needs to manually specify
those three config variables in config.sh, if a different BASEDIR
should be used by letsencrypt.sh.

This commit makes letsencrypt.sh fully aware of a configured BASEDIR.

8 years agoFix possibly broken syntax highlighting
Daniel Beyer [Thu, 21 Jan 2016 10:58:49 +0000 (11:58 +0100)]
Fix possibly broken syntax highlighting

The pattern
```
 VAR="$(cmd '"')"
```
breaks syntax highlighting in some editors (e.g. gedit or jedit) due to
the tripple double quotes.

8 years agoAdd --signcsr command
Niels Laukens [Wed, 20 Jan 2016 10:32:56 +0000 (11:32 +0100)]
Add --signcsr command

8 years agoAdd extract_altnames() function
Niels Laukens [Wed, 20 Jan 2016 10:15:15 +0000 (11:15 +0100)]
Add extract_altnames() function

8 years agoSplit off CSR signing to separate function
Niels Laukens [Wed, 20 Jan 2016 10:15:01 +0000 (11:15 +0100)]
Split off CSR signing to separate function

8 years agoMerge pull request #89 from germeier/master
Lukas Schauer [Sat, 16 Jan 2016 21:41:03 +0000 (22:41 +0100)]
Merge pull request #89 from germeier/master

add support for  Elliptic Curve Cryptography (ECC)

8 years agoadded header with script-name and url to github repository
Lukas Schauer [Sat, 16 Jan 2016 21:29:09 +0000 (22:29 +0100)]
added header with script-name and url to github repository

8 years agomoved OSTYPE check and use built-in [[ for OSTYPE check
Lukas Schauer [Sat, 16 Jan 2016 21:28:17 +0000 (22:28 +0100)]
moved OSTYPE check and use built-in [[ for OSTYPE check

8 years agocheck exitcode of `curl -V` because of some issue with ancient versions of curl retur...
Lukas Schauer [Sat, 16 Jan 2016 20:50:15 +0000 (21:50 +0100)]
check exitcode of `curl -V` because of some issue with ancient versions of curl returning error codes on checking the version number

8 years agouse different sed version for different system types (mostly for compatibility with...
Lukas Schauer [Sat, 16 Jan 2016 20:40:12 +0000 (21:40 +0100)]
use different sed version for different system types (mostly for compatibility with ancient linux distros nobody should be using anyway ¯\_(ツ)_/¯)

8 years agoadd support for Elliptic Curve Cryptography (ECC)
Markus Germeier [Sat, 16 Jan 2016 17:55:36 +0000 (18:55 +0100)]
add support for  Elliptic Curve Cryptography (ECC)

8 years agoMerge pull request #88 from f1rebird/master
Lukas Schauer [Fri, 15 Jan 2016 22:36:28 +0000 (23:36 +0100)]
Merge pull request #88 from f1rebird/master

8 years agoMerge pull request #82 from jantore/wellknown-http-only
Lukas Schauer [Fri, 15 Jan 2016 22:29:14 +0000 (23:29 +0100)]
Merge pull request #82 from jantore/wellknown-http-only

Require $WELLKNOWN only when using http-01.

8 years agoMerge pull request #85 from jaquer/fix-exit
Lukas Schauer [Fri, 15 Jan 2016 22:24:45 +0000 (23:24 +0100)]
Merge pull request #85 from jaquer/fix-exit

Added missing space before exit code.

8 years agoI's are important
Moritz Kick [Fri, 15 Jan 2016 22:22:24 +0000 (23:22 +0100)]
I's are important

8 years agoMerge pull request #86 from petrkle/lock-dir-writable
Lukas Schauer [Fri, 15 Jan 2016 22:20:28 +0000 (23:20 +0100)]
Merge pull request #86 from petrkle/lock-dir-writable

Check if directory for LOCKFILE is writable.

8 years agocheck for sed with support for extended regular expressions
Lukas Schauer [Fri, 15 Jan 2016 22:03:12 +0000 (23:03 +0100)]
check for sed with support for extended regular expressions

8 years agoFix typo
Petr [Fri, 15 Jan 2016 09:43:34 +0000 (10:43 +0100)]
Fix typo

8 years agoCheck if directory for LOCKFILE is writable.
Petr [Fri, 15 Jan 2016 09:25:06 +0000 (10:25 +0100)]
Check if directory for LOCKFILE is writable.

8 years agoAdded missing space before exit code.
Arturo R [Thu, 14 Jan 2016 04:33:13 +0000 (20:33 -0800)]
Added missing space before exit code.

8 years agouse -z instead of `== ""`.. it's late.
Lukas Schauer [Sun, 10 Jan 2016 03:46:52 +0000 (04:46 +0100)]
use -z instead of `== ""`.. it's late.

8 years agoshow help if no arguments are provided
Lukas Schauer [Sun, 10 Jan 2016 03:44:44 +0000 (04:44 +0100)]
show help if no arguments are provided

8 years agoRequire $WELLKNOWN only when using http-01.
Jan Tore Morken [Sat, 9 Jan 2016 17:42:50 +0000 (18:42 +0100)]
Require $WELLKNOWN only when using http-01.

8 years agoMerge pull request #81 from pascalj/remove-home-path
Lukas Schauer [Sat, 9 Jan 2016 14:51:33 +0000 (15:51 +0100)]
Merge pull request #81 from pascalj/remove-home-path

Remove home path from config.sh.example

8 years agoRemove home path from config.sh.example
Pascal Jungblut [Sat, 9 Jan 2016 14:13:09 +0000 (15:13 +0100)]
Remove home path from config.sh.example

8 years agocall mktemp with `-t XXXXXX` for compatibility with older BSD versions
Lukas Schauer [Sat, 9 Jan 2016 00:38:44 +0000 (01:38 +0100)]
call mktemp with `-t XXXXXX` for compatibility with older BSD versions

8 years agofixed whitespace-stripping, replace all whitespace in domains.txt entries with single...
Lukas Schauer [Fri, 8 Jan 2016 22:03:06 +0000 (23:03 +0100)]
fixed whitespace-stripping, replace all whitespace in domains.txt entries with single space character (fixes #60 and #78)

8 years agocleanup for dns-01-challenge-support code
Lukas Schauer [Fri, 8 Jan 2016 21:51:57 +0000 (22:51 +0100)]
cleanup for dns-01-challenge-support code

8 years agomade link in readme clickable
Lukas Schauer [Fri, 8 Jan 2016 21:29:36 +0000 (22:29 +0100)]
made link in readme clickable

8 years agomoved import notice up in readme
Lukas Schauer [Fri, 8 Jan 2016 21:28:06 +0000 (22:28 +0100)]
moved import notice up in readme

8 years agoMerge pull request #77 from germeier/master
Lukas Schauer [Fri, 8 Jan 2016 21:26:45 +0000 (22:26 +0100)]
Merge pull request #77 from germeier/master

add support for dns-01 challenge - try 2

8 years agomoved import scripts from repository to wiki and updated readme a bit
Lukas Schauer [Fri, 8 Jan 2016 21:20:16 +0000 (22:20 +0100)]
moved import scripts from repository to wiki and updated readme a bit

8 years agoadd support for dns-01 challenge - try 2
Markus Germeier [Fri, 8 Jan 2016 21:09:27 +0000 (22:09 +0100)]
add support for dns-01 challenge - try 2

8 years agocheck for mktemp dependency
Lukas Schauer [Fri, 8 Jan 2016 21:01:59 +0000 (22:01 +0100)]
check for mktemp dependency

8 years agofixed BASEDIR dependent default config values
Lukas Schauer [Fri, 8 Jan 2016 20:55:38 +0000 (21:55 +0100)]
fixed BASEDIR dependent default config values

8 years agore-set RENEW_DAYS to 30 (got accidentally reverted in one of the previous commits)
Lukas Schauer [Fri, 8 Jan 2016 20:41:47 +0000 (21:41 +0100)]
re-set RENEW_DAYS to 30 (got accidentally reverted in one of the previous commits)

8 years agomake hook a command line parameter
Markus Germeier [Fri, 8 Jan 2016 20:05:16 +0000 (21:05 +0100)]
make hook a command line parameter

8 years agodo not change exit code of loop in command_sign_domains
Lukas Schauer [Fri, 8 Jan 2016 19:33:59 +0000 (20:33 +0100)]
do not change exit code of loop in command_sign_domains

8 years agochanged urlbase64 helper to also use sed for character replacements
Lukas Schauer [Fri, 8 Jan 2016 19:18:31 +0000 (20:18 +0100)]
changed urlbase64 helper to also use sed for character replacements

8 years agouse _exiterr helper in a few more places
Lukas Schauer [Fri, 8 Jan 2016 18:48:02 +0000 (19:48 +0100)]
use _exiterr helper in a few more places

8 years agoadded a few more comments
Lukas Schauer [Fri, 8 Jan 2016 18:45:29 +0000 (19:45 +0100)]
added a few more comments

8 years agoremoved get_json_array helper, rearranged sign_domain method a bit, made grep for...
Lukas Schauer [Fri, 8 Jan 2016 18:39:20 +0000 (19:39 +0100)]
removed get_json_array helper, rearranged sign_domain method a bit, made grep for PEM-format-check quiet

8 years agoreturn error on invalid request method in http_request, shortened http_request a bit
Lukas Schauer [Fri, 8 Jan 2016 18:35:55 +0000 (19:35 +0100)]
return error on invalid request method in http_request, shortened http_request a bit

8 years agoremoved anti_newline helper
Lukas Schauer [Fri, 8 Jan 2016 18:33:18 +0000 (19:33 +0100)]
removed anti_newline helper

8 years agomoved _openssl helper a bit up to be near the other helper methods
Lukas Schauer [Fri, 8 Jan 2016 18:30:56 +0000 (19:30 +0100)]
moved _openssl helper a bit up to be near the other helper methods

8 years agorewritten command_revoke method (shortened + changed output to look less like one...
Lukas Schauer [Fri, 8 Jan 2016 18:28:19 +0000 (19:28 +0100)]
rewritten command_revoke method (shortened + changed output to look less like one of those weird openssl error messages)

8 years agoupdated readme
Lukas Schauer [Fri, 8 Jan 2016 18:26:44 +0000 (19:26 +0100)]
updated readme

8 years agofixed --domain syntax in test.sh
Lukas Schauer [Fri, 8 Jan 2016 18:25:58 +0000 (19:25 +0100)]
fixed --domain syntax in test.sh

8 years agorewritten init_system method and parts of command_sign_domains (DOMAINS_TXT handling)
Lukas Schauer [Fri, 8 Jan 2016 18:16:39 +0000 (19:16 +0100)]
rewritten init_system method and parts of command_sign_domains (DOMAINS_TXT handling)

8 years agorewritten help method to get rid of `column` dependency
Lukas Schauer [Fri, 8 Jan 2016 18:13:50 +0000 (19:13 +0100)]
rewritten help method to get rid of `column` dependency

8 years agorewritten argument handling and moved to new main() method, added dependency checks...
Lukas Schauer [Fri, 8 Jan 2016 18:10:50 +0000 (19:10 +0100)]
rewritten argument handling and moved to new main() method, added dependency checks, added _exiterr helper

8 years agorewritten hex2bin method
Lukas Schauer [Fri, 8 Jan 2016 18:02:13 +0000 (19:02 +0100)]
rewritten hex2bin method

8 years agomoved loading of configuration to seperate method
Lukas Schauer [Fri, 8 Jan 2016 17:59:01 +0000 (18:59 +0100)]
moved loading of configuration to seperate method

8 years agorenamed _request method to http_request
Lukas Schauer [Fri, 8 Jan 2016 16:59:46 +0000 (17:59 +0100)]
renamed _request method to http_request

8 years agoMerge pull request #71 from chrisb86/master
Lukas Schauer [Wed, 6 Jan 2016 19:55:23 +0000 (20:55 +0100)]
Merge pull request #71 from chrisb86/master

Changed shebang of import-certs.sh to #!/usr/bin/env bash

8 years agoChanged shebang of import-certs.sh to #!/usr/bin/env bash
Christian Busch [Wed, 6 Jan 2016 18:12:08 +0000 (19:12 +0100)]
Changed shebang of import-certs.sh to #!/usr/bin/env bash

8 years agoMerge pull request #68 from onovy/master
Lukas Schauer [Tue, 5 Jan 2016 14:21:49 +0000 (15:21 +0100)]
Merge pull request #68 from onovy/master

Renew certificate 30 days before expiration

8 years agoMerge pull request #69 from olf/upstream
Lukas Schauer [Tue, 5 Jan 2016 14:20:56 +0000 (15:20 +0100)]
Merge pull request #69 from olf/upstream

fix typo in test.sh (ngrok not found)

8 years agofix typo in test.sh (ngrok not found)
Olaf Peters [Tue, 5 Jan 2016 11:20:36 +0000 (12:20 +0100)]
fix typo in test.sh (ngrok not found)

8 years agoRenew certificate 30 days before expiration
Ondřej Nový [Sat, 2 Jan 2016 17:31:42 +0000 (18:31 +0100)]
Renew certificate 30 days before expiration

According to https://community.letsencrypt.org/t/quick-start-guide/1631
Renewals and Lifetimes:
Certificates from Let's Encrypt are valid for 90 days. We recommend
renewing them every 60 days to provide a nice margin of error.

8 years agoadded license (fixes #63)
Lukas Schauer [Tue, 22 Dec 2015 14:11:39 +0000 (15:11 +0100)]
added license (fixes #63)

8 years agohide output of grep for pem-format-check
Lukas Schauer [Sun, 20 Dec 2015 18:54:39 +0000 (19:54 +0100)]
hide output of grep for pem-format-check

8 years agoMerge pull request #59 from erdgeist/master
Lukas Schauer [Sat, 19 Dec 2015 22:34:08 +0000 (23:34 +0100)]
Merge pull request #59 from erdgeist/master

when using printf, we do not need inline expansion of variables

8 years agowhen using printf, we do not need inline expansion of variables
Dirk Engling [Sat, 19 Dec 2015 22:26:49 +0000 (23:26 +0100)]
when using printf, we do not need inline expansion of variables

8 years agowat. removed some unnecessary code.
Lukas Schauer [Sat, 19 Dec 2015 22:24:29 +0000 (23:24 +0100)]
wat. removed some unnecessary code.

8 years agoreadme: mores infos about WELLKNOWN
Lukas Schauer [Sat, 19 Dec 2015 16:45:24 +0000 (17:45 +0100)]
readme: mores infos about WELLKNOWN

8 years agoshellcheck fixes
Lukas Schauer [Sat, 19 Dec 2015 01:36:18 +0000 (02:36 +0100)]
shellcheck fixes

8 years agorevoke: follow symlink, exit with error on non-existing certificate file
Markus Germeier [Wed, 16 Dec 2015 18:30:20 +0000 (19:30 +0100)]
revoke: follow symlink, exit with error on non-existing certificate file

8 years agoadd perl shebang
Dominik Heidler [Fri, 18 Dec 2015 09:20:10 +0000 (10:20 +0100)]
add perl shebang

8 years agouse temporary openssl config instead of weird fake fds (fixes #57)
Lukas Schauer [Sat, 19 Dec 2015 00:57:58 +0000 (01:57 +0100)]
use temporary openssl config instead of weird fake fds (fixes #57)

8 years agoalso test SAN config
Lukas Schauer [Sat, 19 Dec 2015 00:56:04 +0000 (01:56 +0100)]
also test SAN config

8 years agoformat CA certificate as PEM
Lukas Schauer [Thu, 17 Dec 2015 17:42:36 +0000 (18:42 +0100)]
format CA certificate as PEM

8 years agonever PASS with content in errorlog
Lukas Schauer [Thu, 17 Dec 2015 17:40:45 +0000 (18:40 +0100)]
never PASS with content in errorlog

8 years agocheck if renewal works
Lukas Schauer [Thu, 17 Dec 2015 17:33:54 +0000 (18:33 +0100)]
check if renewal works

8 years agouse different fake-ca for travis tests
Lukas Schauer [Thu, 17 Dec 2015 17:22:01 +0000 (18:22 +0100)]
use different fake-ca for travis tests

8 years agoRevert "tests are failing because of api limits, removed badge from readme"
Lukas Schauer [Thu, 17 Dec 2015 17:20:53 +0000 (18:20 +0100)]
Revert "tests are failing because of api limits, removed badge from readme"

This reverts commit 76e2f0dc9c44ad02fa077b6330bcaddeae6c2330.

8 years agotests are failing because of api limits, removed badge from readme
Lukas Schauer [Thu, 17 Dec 2015 14:45:50 +0000 (15:45 +0100)]
tests are failing because of api limits, removed badge from readme

8 years agooops.. repaired test script
Lukas Schauer [Thu, 17 Dec 2015 14:41:18 +0000 (15:41 +0100)]
oops.. repaired test script

8 years agoremoved TODO mark from help text on renew of changed domains
Lukas Schauer [Thu, 17 Dec 2015 14:38:57 +0000 (15:38 +0100)]
removed TODO mark from help text on renew of changed domains

8 years agoadditional tests and show log output if script execution fails
Lukas Schauer [Thu, 17 Dec 2015 14:37:30 +0000 (15:37 +0100)]
additional tests and show log output if script execution fails