summaryrefslogtreecommitdiff
path: root/usr.sbin/acme-client
AgeCommit message (Collapse)Author
2017-01-21typo; ok bennoFlorian Obser
2017-01-21acme-client use configuration file [5 of 5]Sebastian Benoit
implement new -n option to check and print configuration ok florian
2017-01-21acme-client use configuration file [4 of 5]Sebastian Benoit
fix getopt() ok florian
2017-01-21acme-client use configuration file [3 of 5]Sebastian Benoit
change command line options: n -> A new Account key N -> D new Domain key With this acme-client has these main usage patterns: * create new Account Key and Domain Key and get a certificate: acme-client -A -D www.example.com * renew certificate: acme-client www.example.com * revoke certificate: acme-client -r www.example.com ok florian
2017-01-21acme-client use configuration file [2 of 5]Sebastian Benoit
- add challengedir option to config file - remove -C option from command line ok florian
2017-01-21acme-client use configuration file [1 of 5]Sebastian Benoit
start using the configuration file and delete command line arguments: -a agreement -> agreement url ... -c certdir -> domain certificate "path" -f accountkey -> account key "path" -k domainkey -> domain key "path" -s authority -> sign with "name" new argument: -f configfile the changes needed to use the new configuration are local to main.c for now. While the configuration could be passed directly to netproc(), keyproc() etc, the diff is smaller this way. This also removes the multidir (-m) mode for now - specify different paths in each domain {} block instead. ok florian
2017-01-05Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with moreKenneth R Westerback
modern TAILQ_FOREACH_SAFE(). No intentional functional change. ok millert@ bluhm@ gilles@
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
with more modern TAILQ_FOREACH(). This what symget() was already doing. Add paranoia '{}' around body of symget()'s TAILQ_FOREACH(). No intentional functional change. ok bluhm@ otto@
2016-11-02Use secure defaults for TLS - instead of accepting TLSv1.0 and any cipherJoel Sing
suite, use the libtls defaults and require TLSv1.2 with an AEAD+PFS cipher suite - given who we're talking to one would hope that they meet these requirements... ok benno@ deraadt@ florian@
2016-10-04Avoid a potential MITM - calling tls_config_insecure_noverify() is a badJoel Sing
idea, so stop doing that. Instead, use a single tls_config, set it up and configure the CA file to use while we still have rpath, then drop rpath. This also avoids creating a new tls_config for each and every HTTPS connection, which is unnecessary. ok benno@ florian@
2016-10-04s/letsencrypt/ACME/Joel Sing
2016-10-04tls_close() can return TLS_WANT_POLLIN/TLS_WANT_POLLOUT - handle thisJoel Sing
case correctly. ok florian@
2016-09-24The file descriptor needs to be closed in both the TLS and non-TLS case,Joel Sing
so make it a common/shared code path.
2016-09-24Both tls_free() and tls_config_free() are safe to call with NULL.Joel Sing
2016-09-24Remove more backwards compat for unsupported OpenBSD releases.Joel Sing
2016-09-20reoorder includes,Sebastian Benoit
noticed by & ok florian@
2016-09-18tweak previous;Jason McIntyre
2016-09-18add a config file parser to acme-client (unused at the moment, so thatSebastian Benoit
it can be worked on in the tree). ok florian@ deraadt@
2016-09-15more fat trimming;Jason McIntyre
2016-09-14move default file and directory locations to a new FILES sectionT.J. Townsend
and trim some extraneous text. ok florian jmc deraadt
2016-09-13convert some ifs to switches. ok millert tbTed Unangst
2016-09-13A small amount more KNF to make this easier on our eyes. Not going furtherTheo de Raadt
than this. ok florian
2016-09-13hoist local variable initialization directly into the definitions,Theo de Raadt
rather than doing it right afterwards. ok florian
2016-09-13hoist local variable initialization directly into the definitions,Theo de Raadt
rather than doing it right afterwards. ok florian
2016-09-13Inconsistant use of case (value): idiom drives me nuts, I have no ideaTheo de Raadt
what purpose it was intended to serve.
2016-09-13RAND_status() and RAND_seed() are not needed, this is 2016.Theo de Raadt
2016-09-13use reallocarray()Theo de Raadt
2016-09-13chroot is not the reason this is run as rootTheo de Raadt
2016-09-06some indent; from michael reedJason McIntyre
2016-09-05We do not compile things -g by defaultTheo de Raadt
2016-09-05this file cannot be kept accurateTheo de Raadt
2016-09-01Use b64_ntop instead of adding yet another base implementation of base64Theo Buehler
encoding to base. Tweaked version of a diff by florian. ok florian
2016-09-01update usage(); pointed out by jmc@Florian Obser
2016-09-01tidy up the list;Jason McIntyre
2016-09-01Implement table driven selection to which ACME authorities we canFlorian Obser
talk. Suggest by and OK deraadt, OK benno. (Later on deraadt and benno discussed if this should be handled with a config file. This seems to be good enough for now. We can do a config file later.)
2016-09-01make the page more neutral, as suggested by deraadt;Jason McIntyre
add STANDARDS, as suggested by florian; help/ok deraadt florian
2016-09-01various cleanup;Jason McIntyre
2016-09-01we don't have config.hFlorian Obser
2016-09-01line wrap usageTheo de Raadt
2016-09-01do { } while is easier to eyeballTheo de Raadt
2016-09-01PATH_VAR_EMPTY is not usedTheo de Raadt
2016-09-01Collapse krazy abstractions for other sandbox models, using chroot andTheo de Raadt
pledge directly as needed. ok florian
2016-09-01knfSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31whitespaceSebastian Benoit
2016-08-31We are past 5.8. Also gets rid of asserts as a bonus.Florian Obser
OK benno@, deraadt@
2016-08-31Bring in license for man page Kristaps just added upstream inFlorian Obser
commit 33c4b38b1db65097e4301e982c9cffcb8c3e648d.
2016-08-31whitespaceSebastian Benoit
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-15 14:29:27 +0000