Matthew Holt
6762df415c
Clean up leaking goroutines and safer Start()/Stop()
2015-10-28 22:54:27 -06:00
Matthew Holt
1818b1ea62
letsencrypt: Better error handling, prompt user for SA
2015-10-28 18:12:07 -06:00
xenolf
b67543f81c
Track the latest lego OCSP changes
2015-10-28 16:35:19 +01:00
Matt Holt
7d91cfb512
Merge pull request #290 from mholt/le-graceful
...
Graceful restarts/reloads, refactoring
2015-10-27 14:17:40 -06:00
Matthew Holt
8548641dc1
letsencrypt: Check for errors
2015-10-27 13:02:47 -06:00
Matthew Holt
c46898592f
Merge branch 'letsencrypt' into le-graceful
...
Conflicts:
caddy/letsencrypt/letsencrypt.go
caddy/letsencrypt/renew.go
2015-10-27 12:59:55 -06:00
Matthew Holt
362ead2760
Minor test improvements
2015-10-27 12:53:31 -06:00
Matthew Holt
a6ea1e6b55
letsencrypt: -ca flag to customize CA server
2015-10-27 12:52:58 -06:00
Matthew Holt
c487b702a2
Little cleanup
2015-10-27 00:05:22 -06:00
Matthew Holt
bb6613d0ae
core: Fix SIGUSR1 so it actually reloads config
2015-10-26 17:57:32 -06:00
Matthew Holt
821c0fab09
core: Refactoring POSIX-only code for build tags
2015-10-26 16:49:05 -06:00
Matthew Holt
5b1962303d
core: More refactoring, code cleanup, docs
2015-10-26 14:55:03 -06:00
Matthew Holt
41c4484222
core: SIGUSR1 to reload config; some code cleanup
2015-10-26 14:28:50 -06:00
Matthew Holt
4ebff9a130
core: Major refactor for graceful restarts; numerous fixes
...
Merged config and app packages into one called caddy. Abstracted away caddy startup functionality making it easier to embed Caddy in any Go application and use it as a library. Graceful restart (should) now ensure child starts properly. Now piping a gob bundle to child process so that the child can match up inherited listeners to server address. Much cleanup still to do.
2015-10-26 13:34:31 -06:00
Matthew Holt
6936658019
letsencrypt: Work with latest lego changes
2015-10-25 19:30:29 -06:00
Matthew Holt
b5b31e398c
letsencrypt: Graceful restarts
...
Lots of refinement still needed and runs only on POSIX systems. Windows will not get true graceful restarts (for now), but we will opt for very, very quick forceful restarts. Also, server configs are no longer put into a map; it is critical that they stay ordered so that they can be matched with their sockets in the child process after forking.
This implementation of graceful restarts is probably not perfect, but it is a good start. Lots of details to attend to now.
2015-10-25 18:45:55 -06:00
xenolf
f9f1aafe0c
Update to lego update. DevMode no longer exists.
2015-10-26 00:53:36 +01:00
xenolf
91465d8e6f
Support for OCSP Stapling. Fixes #280
2015-10-24 04:36:54 +02:00
xenolf
f8ad050dda
Update for latest lego changes (cert bundling)
2015-10-24 04:35:55 +02:00
xenolf
2e5eb63850
Function name changed in lego
2015-10-23 16:29:05 +02:00
Matthew Holt
f24ecee603
letsencrypt: Basic renewal failover and better error handling
2015-10-21 21:28:33 -06:00
Matt Holt
c5635f21a3
Merge pull request #283 from mholt/le-simplerenew
...
letsencrypt: Simplify timing mechanism for checking renewals
2015-10-21 17:08:57 -06:00
Matthew Holt
605f1942ef
Merge branch 'letsencrypt' into le-simplerenew
...
Conflicts:
config/letsencrypt/letsencrypt.go
2015-10-21 16:35:32 -06:00
Matthew Holt
a16beb98de
letsencrypt: Revoke certificate
2015-10-21 00:09:45 -06:00
Matthew Holt
38885e4301
Simplify timing mechanism for checking renewals
2015-10-20 20:16:01 -06:00
xenolf
c626774da2
First, raw renewal implementation. Pretty basic :D
2015-10-20 02:44:00 +02:00
Matthew Holt
cd0b47d068
letsencrypt: Don't auto-configure loopback hosts or 'tls off'
...
User can specify 'tls off" in Caddyfile to force-disable automatic HTTPS configuration
2015-10-18 22:50:42 -06:00
Matthew Holt
4c93ab8c68
Merge branch 'configfix' into letsencrypt
2015-10-18 19:48:57 -06:00
Matthew Holt
c0ebe31560
Fix ServerBlockStorage so it actually stores stuff
2015-10-18 19:27:51 -06:00
Matthew Holt
cc1ff93250
letsencrypt: Fix Windows tests
2015-10-18 12:12:33 -06:00
Matthew Holt
42ac2d2dde
letsencrypt: More tests, tests for user.go & slight refactoring
2015-10-18 12:09:06 -06:00
Matthew Holt
d764111886
letsencrypt: Storage tests
2015-10-18 10:39:28 -06:00
Matthew Holt
8cd6b8aa99
letsencrypt: Tests for load/save RSA keys and redirPlaintextHost
2015-10-17 23:35:59 -06:00
Matthew Holt
da8a4fafcc
letsencrypt: Use existing certs & keys if already in storage
2015-10-17 22:55:50 -06:00
Matthew Holt
9f9de389d5
lego provides PEM-encoded certificate bytes for us
2015-10-17 21:18:46 -06:00
Matthew Holt
7568b0e215
Compatibility with latest lego commits (dev mode enabled)
2015-10-17 21:00:48 -06:00
Matthew Holt
a75663501d
Little more refactoring in letsencrypt
2015-10-17 20:51:46 -06:00
Matthew Holt
96ae288c4b
More refactoring; cleaning up code, preparing for tests
2015-10-17 20:44:33 -06:00
Matthew Holt
a3a826572f
Refactor letsencrypt code into its own package
2015-10-17 20:17:24 -06:00
Matthew Holt
fe7ad8ee05
core: Controller has field to persist server state
...
Also added ServerBlockHostIndex
2015-10-17 14:11:32 -06:00
Matthew Holt
307c2ffe3c
Remove obsolete test
2015-10-17 11:19:56 -06:00
Matthew Holt
06913ab74f
Oops (pass a pointer)
2015-10-17 11:15:43 -06:00
Matthew Holt
506630200b
Redirect HTTP requests to HTTPS by default
2015-10-17 09:36:25 -06:00
Matthew Holt
df194d567f
Don't forget to set port to "https" and indicate TLS enabled
2015-10-17 09:06:05 -06:00
Matthew Holt
9727603250
Try to use most recent user email if not provided
...
Also more comments and starting to clean up code
2015-10-17 00:01:32 -06:00
Matthew Holt
a0c8428f8c
Can issue and use SSL certs and serve sites
...
Code is a huge mess; much cleanup to follow.
2015-10-16 23:30:00 -06:00
Matthew Holt
dd91812b11
Merge branch 'configfix' into letsencrypt
2015-10-16 11:47:32 -06:00
Matthew Holt
10619f06b4
core: Disable TLS for sites where http is explicitly defined (fix)
2015-10-16 11:47:13 -06:00
Matthew Holt
0a1e472fc2
Merge branch 'configfix' into letsencrypt
...
Conflicts:
config/config.go
2015-10-16 11:40:44 -06:00
Matthew Holt
4e92c71259
LE flags, modified tis directive, moved LE stuff to own file
2015-10-16 11:38:56 -06:00