girish@cloudron.io
4e94c8ea56
updateContact gets 202 and not 200
2016-01-13 16:46:01 -08:00
girish@cloudron.io
26c9bcbc28
fix this and that
2016-01-13 15:00:33 -08:00
girish@cloudron.io
cd35ab5932
acme: update contact information before getting a cert
...
part of #544
there were two approaches considered:
1. pipe through owner email from appstore. this requires to save this
value in settingsdb and we need to remember this in case user changes
the email. another issue is that selfhost installer tooling needs to
require this new value.
2. simply update owner email each time. this is the chosen approach.
2016-01-13 14:06:31 -08:00
girish@cloudron.io
5eb3c208f1
allow email to be configured
2016-01-13 12:15:27 -08:00
Girish Ramakrishnan
190c2b2756
firefox is unhappy with incorrect chain
2015-12-17 19:42:49 -08:00
Girish Ramakrishnan
7c975384cd
better error messages
2015-12-17 19:35:52 -08:00
Girish Ramakrishnan
fe042891a3
Add acme.getCertificate
2015-12-17 13:31:28 -08:00
Girish Ramakrishnan
a9b594373d
do not pass accountKeyPem everywhere
2015-12-17 13:27:10 -08:00
Girish Ramakrishnan
5edc3cde2a
set prod option based on provider
2015-12-17 13:17:46 -08:00
Girish Ramakrishnan
a636731764
allow configuring prod/staging of LE url
2015-12-17 13:12:54 -08:00
Girish Ramakrishnan
b4433af9b5
remove unused require
2015-12-17 12:55:47 -08:00
Girish Ramakrishnan
1ae2e07883
leave note on 429 error code
2015-12-15 14:25:23 -08:00
Girish Ramakrishnan
9f524da642
use admin@cloudron.io for email
...
registrations are failing because the LE server is doing a MX check.
we don't have a proper email to provide here since the box is not
activated yet. we should "update" the email at some point with
the owner information.
2015-12-15 10:39:03 -08:00
Girish Ramakrishnan
b5b67f2e6a
define CA_ORIGIN
2015-12-15 00:49:00 -08:00
Girish Ramakrishnan
fe723f5a53
remove trailing slash in url
2015-12-15 00:42:18 -08:00
Girish Ramakrishnan
409096cbff
Use production LE
2015-12-14 17:31:41 -08:00
Girish Ramakrishnan
89bff16053
fix crash
2015-12-14 14:08:45 -08:00
Girish Ramakrishnan
f51b61e407
do not dump the csr
2015-12-14 13:41:30 -08:00
Girish Ramakrishnan
a409dd026d
use url file to download cert if present
2015-12-14 12:22:57 -08:00
Girish Ramakrishnan
4731f8e5a7
move key creation into the acme flow
2015-12-14 12:21:41 -08:00
Girish Ramakrishnan
7e05259b0e
save url for renewal in .url files
2015-12-14 12:17:57 -08:00
Girish Ramakrishnan
14ab85dc4f
do not pass outdir
2015-12-14 11:42:59 -08:00
Girish Ramakrishnan
0651bfc4b8
provide cert and key file in callback
2015-12-14 09:29:48 -08:00
Girish Ramakrishnan
d9a83eacd2
explicitly prune out second argument
2015-12-13 20:35:23 -08:00
Girish Ramakrishnan
7b40674c0d
add a backend for caas
2015-12-13 19:09:57 -08:00
Girish Ramakrishnan
936c1989f1
refactor code a bit for renewal
2015-12-13 12:26:31 -08:00
Girish Ramakrishnan
d8a1e4aab0
more debug messages
2015-12-12 20:39:24 -08:00
Girish Ramakrishnan
be4d2afff3
fix path to cert
2015-12-12 20:30:50 -08:00
Girish Ramakrishnan
8b7833e8b1
fix debug namespacing
2015-12-11 21:49:24 -08:00
Girish Ramakrishnan
66441f133d
fix typo
2015-12-11 20:09:16 -08:00
Girish Ramakrishnan
3c4adb1aed
fix config path
2015-12-10 13:36:44 -08:00
Girish Ramakrishnan
5fc4788269
remove test code
2015-12-10 11:09:37 -08:00
Girish Ramakrishnan
d0f8293b73
treat acme as a cert backend
2015-12-10 11:08:22 -08:00
Girish Ramakrishnan
54c4053728
add LE cross signed
...
https://letsencrypt.org/certs/lets-encrypt-x1-cross-signed.pem.txt
2015-12-10 09:06:36 -08:00