190c2b2756
firefox is unhappy with incorrect chain
2015-12-17 19:42:49 -08:00
7c975384cd
better error messages
2015-12-17 19:35:52 -08:00
fe042891a3
Add acme.getCertificate
2015-12-17 13:31:28 -08:00
a9b594373d
do not pass accountKeyPem everywhere
2015-12-17 13:27:10 -08:00
5edc3cde2a
set prod option based on provider
2015-12-17 13:17:46 -08:00
a636731764
allow configuring prod/staging of LE url
2015-12-17 13:12:54 -08:00
b4433af9b5
remove unused require
2015-12-17 12:55:47 -08:00
5ae45381e2
fix metrics path
...
See 03da5cc6b382f6f7aad69395d9f8a9d29d18ec26 in installer
We now use the cgroupfs driver instead of systemd cgroup driver
2015-12-15 15:54:19 -08:00
1ae2e07883
leave note on 429 error code
2015-12-15 14:25:23 -08:00
aa34850d4e
fix typo
2015-12-15 12:52:41 -08:00
9f524da642
use admin@cloudron.io for email
...
registrations are failing because the LE server is doing a MX check.
we don't have a proper email to provide here since the box is not
activated yet. we should "update" the email at some point with
the owner information.
2015-12-15 10:39:03 -08:00
a4ea693c3c
update superagent
...
the latest superchanged changed the meaning of 'error'. Previously,
error implied a network error. With the latest superagent, error means
a REST api error i.e 4xx, 5xx are flagged as errors.
error && !error.response means network error
2015-12-15 09:53:37 -08:00
b5b67f2e6a
define CA_ORIGIN
2015-12-15 00:49:00 -08:00
fe723f5a53
remove trailing slash in url
2015-12-15 00:42:18 -08:00
c55e1ff6b7
debug output the error
2015-12-15 00:23:57 -08:00
f46af93528
do not installAdminCertificate for upgrades
2015-12-14 23:37:52 -08:00
8ead0e662a
detect apptask crashes
2015-12-14 19:11:26 -08:00
409096cbff
Use production LE
2015-12-14 17:31:41 -08:00
e5a40faf82
simply use fallback certs if LE fails
...
currently, it fails if we cannot get a cert.
This means that we need to provide some option to simply use fallback
cert. This requires UI changes that I want to avoid :-)
2015-12-14 17:13:54 -08:00
89bff16053
fix crash
2015-12-14 14:08:45 -08:00
a89476c538
fix renewal check
2015-12-14 13:52:54 -08:00
f51b61e407
do not dump the csr
2015-12-14 13:41:30 -08:00
f31d63aabd
implement cert auto-renewal
2015-12-14 12:40:39 -08:00
fd20246e8b
ensureCertificate: check if cert needs renewal
2015-12-14 12:38:19 -08:00
0c1ea39a02
add getApi
2015-12-14 12:28:00 -08:00
a409dd026d
use url file to download cert if present
2015-12-14 12:22:57 -08:00
4731f8e5a7
move key creation into the acme flow
2015-12-14 12:21:41 -08:00
7e05259b0e
save url for renewal in .url files
2015-12-14 12:17:57 -08:00
14ab85dc4f
do not pass outdir
2015-12-14 11:42:59 -08:00
0651bfc4b8
provide cert and key file in callback
2015-12-14 09:29:48 -08:00
21b94b2655
fix debug message
2015-12-14 08:52:43 -08:00
4e40c2341a
code now uses backend
2015-12-14 08:50:57 -08:00
d9a83eacd2
explicitly prune out second argument
2015-12-13 20:35:23 -08:00
7b40674c0d
add a backend for caas
2015-12-13 19:09:57 -08:00
936c1989f1
refactor code a bit for renewal
2015-12-13 12:26:31 -08:00
cfe336c37c
fix path to acme key
2015-12-13 11:54:17 -08:00
d8a1e4aab0
more debug messages
2015-12-12 20:39:24 -08:00
be4d2afff3
fix path to cert
2015-12-12 20:30:50 -08:00
c2a4ef5f93
maybe this gets the certificate
2015-12-12 20:30:50 -08:00
22634b4ceb
tlsConfig is part of the database
2015-12-12 15:43:42 -08:00
fe94190c2f
do not save certs in database
2015-12-12 13:29:10 -08:00
9d91340223
add settings.setTlsConfig
2015-12-11 22:39:13 -08:00
e0a56f75c3
typo
2015-12-11 22:27:00 -08:00
4cfd30f9e8
use tlsConfig to determine acme or not
2015-12-11 22:25:57 -08:00
3fbcbf0e5d
store tls config in database
2015-12-11 22:14:56 -08:00
8b7833e8b1
fix debug namespacing
2015-12-11 21:49:24 -08:00
66441f133d
fix typo
2015-12-11 20:09:16 -08:00
8a12d6019a
assert assert everywhere, hope none fires!
2015-12-11 14:50:30 -08:00
39c626dc75
more moving of nginx code
2015-12-11 14:48:39 -08:00
a7480c3f29
implement installation of admin certificate via acme
2015-12-11 14:37:55 -08:00
Girish Ramakrishnan