Roxen.git/ server/ etc/ modules/ CertDB.pmod

2020-05-06

2020-05-06 10:23:08 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• ac42a039d20ef67331d999994f4ead087b67423f (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: 6.2

Merge branch 'patches/ws580' into 6.2

* patches/ws580:
StartTLSProtocol: Changed ssl_keys to contain names of key pairs.
CertDB: Added get_keypairs_by_name().
Protocol: Cleaned up defvar initialization.
CertDB: Update active ports when certificates change.
StartTLSProtocol: Get rid of race on certificate change.

2020-04-27

2020-04-27 13:35:16 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 73da8ba55f8ac8aae33394daab83ab951c2f72bf (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: 6.3

Merge branch 'patches/ws580' into devel

* patches/ws580:
StartTLSProtocol: Changed ssl_keys to contain names of key pairs.
CertDB: Added get_keypairs_by_name().
Protocol: Cleaned up defvar initialization.

2020-04-27 13:28:40 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• f2496ad0fc3acc9461ec6fecd32186cf84eab1b0 (13 lines) (+7/-6) ^{[ Show | Annotate | Diff ]}
  Branch: f2496ad0fc3acc9461ec6fecd32186cf84eab1b0

StartTLSProtocol: Changed ssl_keys to contain names of key pairs.

This changes ssl_keys from being a set of keypair identifier numbers
to a set of keypair names. This should make updating certificates
on the fly (with eg Let's Encrypt) behave more like users expect.

Previously if the certificate switched to a new key it was regarded
as a new certificate and manual configuration was needed. Now the
new certificate and key will most likely have the same name, and
will thus be used automatically.

Fixes [WS-580].

2020-04-27 13:26:42 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 2d4ccb14318d92975221e4629ebbe3467e3e82ce (24 lines) (+24/-0) ^{[ Show | Annotate | Diff ]}
  Branch: f2496ad0fc3acc9461ec6fecd32186cf84eab1b0

CertDB: Added get_keypairs_by_name().

Needed for [WS-580].

2020-04-27 13:21:41 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• e5122b4ea179b2b3d43815b9067ef3f55accf42b (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: f2496ad0fc3acc9461ec6fecd32186cf84eab1b0

Merge branch 'patches/ws580-old' into patches/ws580

* patches/ws580-old:
CertDB: Update active ports when certificates change.
StartTLSProtocol: Get rid of race on certificate change.
Core: Scan for certs in a handler thread

2019-11-18

2019-11-18 15:12:12 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• c4f8e5faafbbe9eb7cc4224385e9b5174207cc30 (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: 6.3

Merge branch 'patches/ws580' into devel

* patches/ws580:
CertDB: Update active ports when certificates change.
StartTLSProtocol: Get rid of race on certificate change.

2019-11-18 15:07:44 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 6f7e7292686ee9d340eda4aa326e5574f9f6e52c (24 lines) (+15/-9) ^{[ Show | Annotate | Diff ]}
  Branch: 6f7e7292686ee9d340eda4aa326e5574f9f6e52c

CertDB: Update active ports when certificates change.

Fixes some of [WS-580].

2018-03-16

2018-03-16 12:57:44 by Karl Gustav Sterneberg <kg@roxen.com>

• 0b56c7a520c48991e2525367522d7ac65bee5b03 (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: kg/WS-168-webdav

Merge branch 'devel' into kg/WS-168-webdav

* devel: (1803 commits)
Loader [MariaDB]: Set sql_mode in my.cnf.
DBManager: Use CREATE USER with MariaDB 10.2 and later.
WebDAV: Use urn:uuid: namespace for locks.
Version bumped to 6.2.94 by buildsystem.
APIs: Roxen.lookup_real_path_case_insens() now assumes utf-8 fs.
APIs: Improved ambiguity recovery in lookup_real_path_case_insens().
APIs: Roxen.lookup_real_path_case_insens() now survives NFD.
FTP: Normalize filenames to NFC.
APIs: find_dir() now normalizes paths to NFC.
HTTP: Normalize paths to Unicode NFC.
Fixes bug [WS-172] where an empty initial prestate issued an internal server error.
Loader: Remove the global __pragma_save_parent__.
Version bumped to 6.2.93 by buildsystem.
Use string_to_utf8 rather than Charset.Encoder when possible.
Added more verifications in test base class. [WS-168]
Adding support for copy and move between different mount points. [WS-168]
Broke out parent class from RoxenTest_webdav.pike [WS-168]
Version bumped to 6.2.92 by buildsystem.
Fixed FIXME comment in RoxenTest_webdav.pike. [WS-168]
Version bumped to 6.2.91 by buildsystem.
...

2018-03-15

2018-03-15 11:35:22 by Karl Gustav Sterneberg <kg@roxen.com>

• f8edd53d05637fab8d9c850f570b5be64f6d74fa (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: kg/WS-168-webdav

Merge branch 'devel' into kg/WS-168-webdav

* devel: (1803 commits)
Loader [MariaDB]: Set sql_mode in my.cnf.
DBManager: Use CREATE USER with MariaDB 10.2 and later.
WebDAV: Use urn:uuid: namespace for locks.
Version bumped to 6.2.94 by buildsystem.
APIs: Roxen.lookup_real_path_case_insens() now assumes utf-8 fs.
APIs: Improved ambiguity recovery in lookup_real_path_case_insens().
APIs: Roxen.lookup_real_path_case_insens() now survives NFD.
FTP: Normalize filenames to NFC.
APIs: find_dir() now normalizes paths to NFC.
HTTP: Normalize paths to Unicode NFC.
Fixes bug [WS-172] where an empty initial prestate issued an internal server error.
Loader: Remove the global __pragma_save_parent__.
Version bumped to 6.2.93 by buildsystem.
Use string_to_utf8 rather than Charset.Encoder when possible.
Added more verifications in test base class. [WS-168]
Adding support for copy and move between different mount points. [WS-168]
Broke out parent class from RoxenTest_webdav.pike [WS-168]
Version bumped to 6.2.92 by buildsystem.
Fixed FIXME comment in RoxenTest_webdav.pike. [WS-168]
Version bumped to 6.2.91 by buildsystem.
...

2017-12-01

2017-12-01 12:55:53 by Pontus Östlund <ponost@roxen.com>

• b1e4d7515aaba4cd8400ed54ac8941089369ba09 (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: ponost/admin-if-17

Merge branch 'devel' into ponost/admin-if-17

2017-11-17

2017-11-17 10:17:43 by Karl Gustav Sterneberg <kg@roxen.com>

• 47c3bb365855cf6d1e46ba3b0ef98b79d8f92f40 (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: kg/archive-client

Merge branch 'devel' into kg/archive-client

2017-11-13

2017-11-13 10:23:18 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 6ad688e140751b0070f2cf238e25feddbc252c68 (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: devel

Merge branch 'patches/ws85' into devel

* patches/ws85:
CertDB: Fixed typo in comment.
CertDB: Clean up low_refresh_pem().
StartTLSProtocol: Added some more notes.
StartTLSProtocol: Removed some disabled code.
ConfigIF: Remove broken action "certs.pike".
CertDB: Update the private key data too.
ConfigIF: Added missing white space in doc.

2017-11-13 10:22:48 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• a571183b808c11874d09fcaea5846665aae34728 (3 lines) (+2/-1) ^{[ Show | Annotate | Diff ]}
  Branch: patches/ws85

CertDB: Fixed typo in comment.

2017-11-13 10:22:47 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 7a7a4d3fedab2f634cd65ea598f3a3471def40fe (363 lines) (+177/-186) ^{[ Show | Annotate | Diff ]}
  Branch: patches/ws85

CertDB: Clean up low_refresh_pem().

Split low_refresh_pem() into multiple smaller functions.

Fixes some of [WS-91] Issue #10.

2017-11-13 10:22:39 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 5aa6259f68a128d57d73e62e6f40dc3cd3418098 (29 lines) (+23/-6) ^{[ Show | Annotate | Diff ]}
  Branch: patches/ws85

CertDB: Update the private key data too.

Fixes the case where the data for an existing private key
has become corrupted.

Fixes [WS-91] Issue #1.

2017-11-07

2017-11-07 10:25:54 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 610338be9c159c54d1f9c2b56cd42b2ed253ea74 (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: devel

Merge branch 'patches/ws85' into devel

* patches/ws85:
Core: Disabled some certificate scanning debug.
CertDB: Improved diagnostics somewhat.
ConfigIF: Added some more doc for the SSL/TLS certificate selector.
ConfigIF: Hide the old SSL/TLS certificate settings.
CertificateKeyChoiceVariable: Show full source paths
CertificateKeyChoiceVariable: Show source paths
CertificateKeyChoiceVariable: Layout and localization

2017-11-07 10:01:53 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• f6b684644fe038090553839b69d2c83b5dc3efb8 (5 lines) (+4/-1) ^{[ Show | Annotate | Diff ]}
  Branch: d6c62854f94a8a1d58b2ca79334811220ecc9fcf

CertDB: Improved diagnostics somewhat.

2017-11-06

2017-11-06 13:01:45 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• ea3b31bb350b05e3d9ec23b44cd243d3c2d1419e (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: devel

Merge branch 'patches/ws85' into devel

* patches/ws85:
CertDB: Added get_keypair_metadata().
CertDB: Cleaned up types.

2017-11-06 13:01:33 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 4fcc11b4e104e809bbbfc6b443e8d2b318a661b7 (65 lines) (+65/-0) ^{[ Show | Annotate | Diff ]}
  Branch: 4fcc11b4e104e809bbbfc6b443e8d2b318a661b7

CertDB: Added get_keypair_metadata().

Add a function to retreive metadata about keypairs.

2017-11-06 12:51:51 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 5396c4c47b421daef7a1ca3f16a2516b35e85bef (27 lines) (+15/-12) ^{[ Show | Annotate | Diff ]}
  Branch: 4fcc11b4e104e809bbbfc6b443e8d2b318a661b7

CertDB: Cleaned up types.

Add and use the typedef sql_row.

2017-11-03

2017-11-03 11:12:46 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• c6455c7cdff759707ac3e241d94d5b57be50478f (0 lines) (+0/-0) ^{[ Show | Annotate | Diff ]}
  Branch: devel

Merge branch 'patches/ws85' into devel

* patches/ws85:
CertDB: Improved diagnostics.
StartTLSProtocol: Improved rendering of certificate selector.
Variable.MultipleChoice: Added render_element().
Init: Refresh all PEM files at start.
CertDB: Added refresh_all_pem_files().
CertDB: Update the PEM file metadata.
CertDB: Add names to the keypairs.
ConfigIF: Added ACME task.
StartTLSProtocol: Use the CertDB.
StartTLSProtocol: Removed some Pike 7.8 compat.
CertDB: New module.
SSL/TLS: Add registry for certificates.

2017-11-03 11:12:25 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• b0ffc9894bc11eb90a58e8f4fee8ebd8798915f4 (31 lines) (+18/-13) ^{[ Show | Annotate | Diff ]}
  Branch: b0ffc9894bc11eb90a58e8f4fee8ebd8798915f4

CertDB: Improved diagnostics.

2017-11-03 11:12:19 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• c6ea1029345fbe9cb41181f1db8faa4c3f69d2bb (22 lines) (+19/-3) ^{[ Show | Annotate | Diff ]}
  Branch: b0ffc9894bc11eb90a58e8f4fee8ebd8798915f4

CertDB: Added refresh_all_pem_files().

2017-11-03 11:12:18 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 38ee686c76413e1fa75967d6bcc0b933a4897ae6 (47 lines) (+40/-7) ^{[ Show | Annotate | Diff ]}
  Branch: b0ffc9894bc11eb90a58e8f4fee8ebd8798915f4

CertDB: Update the PEM file metadata.

2017-11-03 11:12:16 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 61f7885c0380646e108bc0e401f4846f34832228 (71 lines) (+65/-6) ^{[ Show | Annotate | Diff ]}
  Branch: b0ffc9894bc11eb90a58e8f4fee8ebd8798915f4

CertDB: Add names to the keypairs.

2017-11-03 11:12:11 by Henrik Grubbström (Grubba) <grubba@grubba.org>

• 5c8f4f179bd966a3b2361b8a8a771ef4f07a6844 (464 lines) (+464/-0) ^{[ Show | Annotate | Diff ]}
  Branch: b0ffc9894bc11eb90a58e8f4fee8ebd8798915f4

CertDB: New module.

Provide an API to access the SSL/TLS Certificate registry.

Fixes some of [WS-66]/[WS-85].