Matthew Holt
64cded8246
letsencrypt: Don't maintain assets of sites we don't maintain
2015-10-29 17:24:11 -06:00
Matthew Holt
e3be524447
core: Fix for graceful reload after first reload signal
...
The file path of the originally-loaded Caddyfile must be piped to the forked process; previously it was using stdin after the first fork, which wouldn't load the newest Caddyfile from disk, which is the point of SIGUSR1.
2015-10-29 17:23:20 -06:00
Matthew Holt
89ad7593bd
Merge branch 'caddyfile' into letsencrypt
2015-10-29 15:41:34 -06:00
Matthew Holt
efeeece735
caddyfile: http and https hosts should render in URL format
2015-10-29 10:13:30 -06:00
Matthew Holt
976f5182e1
caddyfile: Better string and number handling
2015-10-29 00:22:56 -06:00
Matthew Holt
30c949085c
letsencrypt: Stubbed out OCSP staple updates
...
OCSP status is checked at a regular interval, and if the OCSP status changes for any of the certificates, the change callback is executed (restarts the server, updating the OCSP staple).
2015-10-28 23:43:26 -06:00
Matthew Holt
6762df415c
Clean up leaking goroutines and safer Start()/Stop()
2015-10-28 22:54:27 -06:00
Matthew Holt
1818b1ea62
letsencrypt: Better error handling, prompt user for SA
2015-10-28 18:12:07 -06:00
xenolf
b67543f81c
Track the latest lego OCSP changes
2015-10-28 16:35:19 +01:00
Matt Holt
7d91cfb512
Merge pull request #290 from mholt/le-graceful
...
Graceful restarts/reloads, refactoring
2015-10-27 14:17:40 -06:00
Matthew Holt
8548641dc1
letsencrypt: Check for errors
2015-10-27 13:02:47 -06:00
Matthew Holt
c46898592f
Merge branch 'letsencrypt' into le-graceful
...
Conflicts:
caddy/letsencrypt/letsencrypt.go
caddy/letsencrypt/renew.go
2015-10-27 12:59:55 -06:00
Matthew Holt
362ead2760
Minor test improvements
2015-10-27 12:53:31 -06:00
Matthew Holt
a6ea1e6b55
letsencrypt: -ca flag to customize CA server
2015-10-27 12:52:58 -06:00
Matthew Holt
0f19df8a81
Keep tests deterministic
2015-10-27 00:43:24 -06:00
Matthew Holt
ee5c842c7d
Code to convert between JSON and Caddyfile
...
This will be used by the API so clients have an easier time manipulating the configuration
2015-10-27 00:07:22 -06:00
Matthew Holt
c487b702a2
Little cleanup
2015-10-27 00:05:22 -06:00
Matthew Holt
bb6613d0ae
core: Fix SIGUSR1 so it actually reloads config
2015-10-26 17:57:32 -06:00
Matthew Holt
821c0fab09
core: Refactoring POSIX-only code for build tags
2015-10-26 16:49:05 -06:00
Matthew Holt
5b1962303d
core: More refactoring, code cleanup, docs
2015-10-26 14:55:03 -06:00
Matthew Holt
41c4484222
core: SIGUSR1 to reload config; some code cleanup
2015-10-26 14:28:50 -06:00
Matthew Holt
4ebff9a130
core: Major refactor for graceful restarts; numerous fixes
...
Merged config and app packages into one called caddy. Abstracted away caddy startup functionality making it easier to embed Caddy in any Go application and use it as a library. Graceful restart (should) now ensure child starts properly. Now piping a gob bundle to child process so that the child can match up inherited listeners to server address. Much cleanup still to do.
2015-10-26 13:34:31 -06:00
Matthew Holt
6936658019
letsencrypt: Work with latest lego changes
2015-10-25 19:30:29 -06:00
Matthew Holt
b5b31e398c
letsencrypt: Graceful restarts
...
Lots of refinement still needed and runs only on POSIX systems. Windows will not get true graceful restarts (for now), but we will opt for very, very quick forceful restarts. Also, server configs are no longer put into a map; it is critical that they stay ordered so that they can be matched with their sockets in the child process after forking.
This implementation of graceful restarts is probably not perfect, but it is a good start. Lots of details to attend to now.
2015-10-25 18:45:55 -06:00
xenolf
f9f1aafe0c
Update to lego update. DevMode no longer exists.
2015-10-26 00:53:36 +01:00
xenolf
91465d8e6f
Support for OCSP Stapling. Fixes #280
2015-10-24 04:36:54 +02:00
xenolf
f8ad050dda
Update for latest lego changes (cert bundling)
2015-10-24 04:35:55 +02:00
xenolf
2e5eb63850
Function name changed in lego
2015-10-23 16:29:05 +02:00
Matthew Holt
f24ecee603
letsencrypt: Basic renewal failover and better error handling
2015-10-21 21:28:33 -06:00
Matt Holt
c5635f21a3
Merge pull request #283 from mholt/le-simplerenew
...
letsencrypt: Simplify timing mechanism for checking renewals
2015-10-21 17:08:57 -06:00
Matthew Holt
605f1942ef
Merge branch 'letsencrypt' into le-simplerenew
...
Conflicts:
config/letsencrypt/letsencrypt.go
2015-10-21 16:35:32 -06:00
Matthew Holt
a16beb98de
letsencrypt: Revoke certificate
2015-10-21 00:09:45 -06:00
Matthew Holt
38885e4301
Simplify timing mechanism for checking renewals
2015-10-20 20:16:01 -06:00
xenolf
c626774da2
First, raw renewal implementation. Pretty basic :D
2015-10-20 02:44:00 +02:00
Matthew Holt
cd0b47d068
letsencrypt: Don't auto-configure loopback hosts or 'tls off'
...
User can specify 'tls off" in Caddyfile to force-disable automatic HTTPS configuration
2015-10-18 22:50:42 -06:00
Matthew Holt
4c93ab8c68
Merge branch 'configfix' into letsencrypt
2015-10-18 19:48:57 -06:00
Matthew Holt
c0ebe31560
Fix ServerBlockStorage so it actually stores stuff
2015-10-18 19:27:51 -06:00
Matthew Holt
cc1ff93250
letsencrypt: Fix Windows tests
2015-10-18 12:12:33 -06:00
Matthew Holt
42ac2d2dde
letsencrypt: More tests, tests for user.go & slight refactoring
2015-10-18 12:09:06 -06:00
Matthew Holt
d764111886
letsencrypt: Storage tests
2015-10-18 10:39:28 -06:00
Matthew Holt
8cd6b8aa99
letsencrypt: Tests for load/save RSA keys and redirPlaintextHost
2015-10-17 23:35:59 -06:00
Matthew Holt
da8a4fafcc
letsencrypt: Use existing certs & keys if already in storage
2015-10-17 22:55:50 -06:00
Matthew Holt
9f9de389d5
lego provides PEM-encoded certificate bytes for us
2015-10-17 21:18:46 -06:00
Matthew Holt
7568b0e215
Compatibility with latest lego commits (dev mode enabled)
2015-10-17 21:00:48 -06:00
Matthew Holt
a75663501d
Little more refactoring in letsencrypt
2015-10-17 20:51:46 -06:00
Matthew Holt
96ae288c4b
More refactoring; cleaning up code, preparing for tests
2015-10-17 20:44:33 -06:00
Matthew Holt
a3a826572f
Refactor letsencrypt code into its own package
2015-10-17 20:17:24 -06:00
Matthew Holt
fe7ad8ee05
core: Controller has field to persist server state
...
Also added ServerBlockHostIndex
2015-10-17 14:11:32 -06:00
Matthew Holt
307c2ffe3c
Remove obsolete test
2015-10-17 11:19:56 -06:00
Matthew Holt
06913ab74f
Oops (pass a pointer)
2015-10-17 11:15:43 -06:00
