Girish Ramakrishnan
64665542bc
select app's cert based on domain's wildcard flag
...
this also removes the confusing type field in the bundle. we instead
check the current nginx config to see what cert is in use.
2018-09-12 14:22:54 -07:00
Girish Ramakrishnan
54d2a4f17b
rework args to ensureCertificate
2018-09-12 12:50:04 -07:00
Girish Ramakrishnan
97ab521038
make ensureCertificate check any wildcard cert
2018-09-11 23:47:23 -07:00
Girish Ramakrishnan
c138c4bb5f
acme2: implement wildcard certs
2018-09-11 23:15:50 -07:00
Girish Ramakrishnan
d0dde04695
acme2: dns authorization
2018-09-10 21:46:53 -07:00
Girish Ramakrishnan
2f38a4018c
pass domain arg to getCertificate API
2018-09-10 20:48:47 -07:00
Girish Ramakrishnan
2c76716bc7
rename func
2018-09-10 20:35:48 -07:00
Girish Ramakrishnan
68536b6d7d
acme2 implementation
2018-09-10 16:26:24 -07:00
Girish Ramakrishnan
017460b497
acme -> acme1
2018-09-10 10:57:48 -07:00
Johannes Zellner
922b6d2b18
Also renew alternate domain certificates
...
Part of #583
2018-08-25 11:04:53 +02:00
Girish Ramakrishnan
6a3b45223a
Better name for internal functions
2018-08-24 15:38:44 -07:00
Girish Ramakrishnan
93b0f39545
ensureCertificate: make it take appDomain object
2018-08-24 15:07:13 -07:00
Girish Ramakrishnan
dbe86af31e
Make getApi takes a string domain
2018-08-24 15:00:19 -07:00
Girish Ramakrishnan
3ede50a141
remove unused function
2018-08-24 14:11:02 -07:00
Johannes Zellner
c13c4d0b28
Ensure we purge all nginx configs of an app
2018-06-29 23:14:06 +02:00
Johannes Zellner
868ed977b3
Cleanup alternateDomain dns records and nginx config
2018-06-29 23:14:06 +02:00
Johannes Zellner
3088ac098f
Put redirect label into alternateDomain nginx configs
2018-06-29 23:14:06 +02:00
Johannes Zellner
45a41ea161
Fix typo
2018-06-29 23:14:06 +02:00
Johannes Zellner
6c17709d2a
Fix fqdn building for alternateDomains
2018-06-29 23:14:06 +02:00
Johannes Zellner
3d0da34960
Create nginx configs for app redirects
2018-06-29 23:14:06 +02:00
Johannes Zellner
a6e53e3617
Ensure certificates for alternateDomains
2018-06-29 23:14:06 +02:00
Girish Ramakrishnan
70128458b2
Fix crash when renewAll is called when cloudron is not setup yet
2018-06-05 21:27:32 -07:00
Girish Ramakrishnan
4fd58fb46b
Rename user.js to users.js
2018-04-29 11:19:04 -07:00
Girish Ramakrishnan
bec032702d
Remove SAN check
...
-checkhost already checks the SAN. It is implementation dependent
as to whether the CN is checked for.
2018-02-09 14:20:03 -08:00
Girish Ramakrishnan
fc79047bbf
Generate fallback cert to contain naked domain in SAN
2018-02-09 13:44:29 -08:00
Girish Ramakrishnan
5263ea860d
Add cert tests
2018-02-09 11:19:47 -08:00
Johannes Zellner
5bd218b3b6
Fix intrinsicFqdn removal breakage
2018-02-08 15:23:38 +01:00
Johannes Zellner
b6384d5025
Remove intrinsicFqdn
2018-02-08 15:07:49 +01:00
Johannes Zellner
b1939e73f4
Remove all occurances of altDomain in the code
...
Tests are pending
2018-02-08 09:00:31 +01:00
Girish Ramakrishnan
8f5105388f
Fix crash when cert renewal fails
2018-02-02 21:21:51 -08:00
Girish Ramakrishnan
4c0da7a8c9
use fallback cert of altDomain
2018-02-02 20:29:04 -08:00
Girish Ramakrishnan
8014cc8ae1
le -> letsencrypt
2018-01-31 18:53:29 -08:00
Girish Ramakrishnan
ab7448926f
Fix use of fallback certs
...
We used to always use nginx cert dir. When custom fallback certs
were set, we used to copy it in boxdata cert dir and then nginx cert dir.
The issue is then that we have to copy all certs to nginx cert dir on
cloudron restore.
To fix this, we simply give priority to nginx cert dir and not copy
around certs anymore. caas cert will reside in nginx cert dir and
not get backed up, as expected.
2018-01-31 18:20:29 -08:00
Johannes Zellner
a727fc5efa
Use tlsConfig from domain, not settings in reverseproxy
2018-01-31 18:37:08 +01:00
Johannes Zellner
9b21167a8d
Use tlsConfig from the domain, not from settings
2018-01-31 18:27:18 +01:00
Girish Ramakrishnan
3299efc113
typos
2018-01-30 20:38:58 -08:00
Girish Ramakrishnan
cd31ed23bc
rewrite renewAll to use existing functions
2018-01-30 16:34:26 -08:00
Girish Ramakrishnan
639a0eb43b
Move the BOX_ENV check for more test coverage
2018-01-30 16:14:05 -08:00
Girish Ramakrishnan
86cf8bf9e7
Add auditSource to ensureCertificate
2018-01-30 15:16:34 -08:00
Girish Ramakrishnan
8e500e0243
caas: make the cert provider use domain fallback certs
2018-01-30 14:18:34 -08:00
Girish Ramakrishnan
781cc3b67a
Merge ensureCertificate and configuring nginx
2018-01-30 13:54:13 -08:00
Girish Ramakrishnan
f379724128
merge certificates.js and nginx.js to reverseproxy.js
...
when certs change, we have to call into nginx anyway. since they
go hand in hand, just merge those files. modern reverse proxies
do this job integrated already.
2018-01-30 12:26:09 -08:00
