Christopher Broglie
|
c68df53e98
Default to validating bundles with x509.ExtKeyUsageAny
|
7 jaren geleden |
Christopher Broglie
|
459761ceb0
Additional Go 1.10 fixes
|
7 jaren geleden |
Zi Lin
|
706be56de3
Make bundler verify error useful.
|
8 jaren geleden |
Zi Lin
|
0ab35ecce6
Zi/bundle expiry update (#684)
|
8 jaren geleden |
Jacob H. Haven
|
45eb038244
Add support for bundling certs with Client Auth Key Usage (#666)
|
8 jaren geleden |
Jacob H. Haven
|
dacac80ca4
Fix data race in bundler by adding an "optimitic" first round of bundling.
|
9 jaren geleden |
Zi Lin
|
45c9a02ec3
update/search intermediates in a goroutine when bundling certificate chains
|
9 jaren geleden |
Jessica Frazelle
|
29ae6fddc6
run gofmt -w -s
|
9 jaren geleden |
Jacob H. Haven
|
7ec1b8253f
Fix various go vet errors
|
9 jaren geleden |
Zi Lin
|
db3bfc8e34
allow bundler to be created with nil RootPool
|
9 jaren geleden |
Zi Lin
|
4e33db9579
bundler: int-bundle and IntermediateStash can be empty
|
9 jaren geleden |
Zi Lin
|
eecf145e0f
Allow bundler to accept self-signed cert with flavor 'force'
|
9 jaren geleden |
Zi Lin
|
6e72cc757d
add more details to api bundle result and fine tuning a warning message
|
9 jaren geleden |
Zi Lin
|
ae3549ad0f
Force bundling should not require root and intermediate CA bundles
|
9 jaren geleden |
Nick Sullivan
|
0fd1b071dc
Update the ubiquity text.
|
9 jaren geleden |
Zi Lin
|
08e805b076
Rewrite/refactor SHA1 deprecation logic and improve test coverage.
|
9 jaren geleden |
ZenGround0
|
9e4822ff7a
Add PKCS #12 support to bundler.
|
9 jaren geleden |
ch684
|
21fbc913be
change CF-SSL to CFSSL in all documentation
|
9 jaren geleden |
Zi Lin
|
5de0954a20
Apply the intermediate naming scheme to intermediates fetched through URL as well
|
10 jaren geleden |
Zi Lin
|
a8a155baca
stashed intermediate ca certs get more identifiable names
|
10 jaren geleden |
Zi Lin
|
f4ee8524a6
When no metadata, bundle ubiquity should be false. Add some extra ubiquity tests for better coverage.
|
10 jaren geleden |
Zi Lin
|
2bd8785b68
Add a new member 'Root' to the bundler's output structure.
|
10 jaren geleden |
Zi Lin
|
8bbc503f59
Enable bundler to bundle with opqaue key
|
10 jaren geleden |
Zi Lin
|
1fdcf1e0de
refactor func errors.New()
|
10 jaren geleden |
Zi Lin
|
178ae69715
New feature of API 'bundle': verify bundle against input domain and/or ip.
|
10 jaren geleden |
Zi Lin
|
9d25efd821
When bundling, always verify and save input intermediates to the intermediate pool.
|
10 jaren geleden |
Zi Lin
|
9b830d9a81
bug-fix: don't store leaf cert as intermediate
|
10 jaren geleden |
Zi Lin
|
424fa99ef5
When bundling, always follow AIA issuer to the root.
|
10 jaren geleden |
Zi Lin
|
4121d415ce
Fix the over-zealous ubiquity optimization for SHA2, add tests.
|
10 jaren geleden |
Zi Lin
|
eed6db4ded
Ubiquity improvement: prefer a full SHA-2 chain if the leaf cert is a SHA-2 cert.
|
10 jaren geleden |