summaryrefslogtreecommitdiff
path: root/usr.sbin/acme-client
AgeCommit message (Collapse)Author
2018-08-08In netproc process, unveil to only expose the CA file.Theo de Raadt
ok florian
2018-08-03return is not a function and if (x) -> if (x != NULL)Sebastian Benoit
From Ross L Richardson, thanks ok millert@
2018-08-03fix error messages from earlier syntax changeSebastian Benoit
From Ross L Richardson ok millert@
2018-08-03correct an error message, from Ross L RichardsonSebastian Benoit
ok millert@
2018-08-03document the default in the abscence of a certificate authority.Sebastian Benoit
From Ross L Richardson
2018-08-03Document that domain certificate is optional.Sebastian Benoit
From Ross L Richardson
2018-08-02According to code (and testing), each is optional but at leastSebastian Benoit
one must be present. From Ross L Richardson, thanks ok sthen@
2018-08-02It's an "X.509 certificate" rather than a "TLS certificate".Sebastian Benoit
As pointed out by sthen@, TLS isn't the only possible use. From Ross L Richardson ok shten@
2018-08-02its a X.509 certificate, consistency with acme-client.conf.5Sebastian Benoit
From Ross L Richardson ok sthen@
2018-07-30cleanup initialization of chngdir. inspired by Ross L Richardson.Sebastian Benoit
ok tb@
2018-07-30replace exit() with return(), from Ross L Richardson.Sebastian Benoit
ok tb@ (previous 3 commits to main.c as well)
2018-07-30replace warn() + exit() with err()Sebastian Benoit
From Ross L Richardson.
2018-07-30line too long and whitespace. From Ross L Richardson.Sebastian Benoit
2018-07-30reorder option parsing to be alphabetical/same order as usage andSebastian Benoit
manpage. From Ross L Richardson.
2018-07-29Remove NULL checks before X509_{REQ,NAME}_free() and zap an unnecessaryTheo Buehler
pair of parens. From Ross L. Richardson
2018-07-29replace hand-rolled tmp files with mkstemp()Sebastian Benoit
ok florian@ back in april, reminded by theo.
2018-07-29remove extra space in output; from Ross L RichardsonTheo de Raadt
2018-07-28Remove NULL checks before (most) libcrypto *_free() functions.Theo Buehler
From Ross L. Richardson, thanks! ok deraadt
2018-07-11Do for most running out of memory err() what was done for most runningKenneth R Westerback
out of memory log_warn(). i.e. ("%s", __func__) instead of manual function names and redundant verbiage about which wrapper detected the out of memory condition. ok henning@
2018-07-09No need to mention which memory allocation entry point failed (malloc,Kenneth R Westerback
calloc or strdup), we just need to log that we ran out of memory in a particular function. Recommended by florian@ and deraadt@ ok benno@ henning@ tb@
2018-07-08Be consistent in warn() and log_warn() usage whenKenneth R Westerback
running out of memory. Next step, be correct *and* consistent. ok dennis@ tb@ benno@ schwarze@
2018-07-08clarify account key (pair) vs certificate (domain) key pair, andSebastian Benoit
that the domain block really describes a certificate to manage. from Ross L Richardson <openbsd at rlr dot id dot au>, thanks with feedback and ok jmc and sthen
2018-06-17Fix an off-by-one line count when using include statements.denis
Thanks to otto@ for the initial diff. OK benno@
2018-06-13Rename httpd.conf "root strip" option to "request strip".Reyk Floeter
"root strip" was semantically incorrect and did cause some confusion as it never stripped the root but the client's request path. Discussed with many. Heads up: this is a grammar change that also affects acme-client(1) configurations (see current.html). OK claudio@
2018-04-26Plug leak in error case of the common 'varset' implementations.Kenneth R Westerback
ok benno@
2018-04-08We warned long enough, also sysmerge(8) should have handled theFlorian Obser
removal of the agreement url by now. OK benno
2018-03-15writebufg() does two write(2) calls, both can return EPIPE, so handle it inOtto Moerbeek
both cases. Avoids race in the exit path. ok sthen@ florian@
2018-03-14letsencrypt responded with a 301 redirect when requesting the chainFlorian Obser
certificate for some time. While they stopped doing so it seems best to follow redirects anyway. More status codes pointed out by & OK sthen OK benno
2018-02-06move malloc check up so that it actually works.Florian Obser
OK benno
2018-02-06kill dead codeFlorian Obser
2017-11-27lenght->length, mostly in commentsStuart Henderson
2017-11-27Deprecate agreement url config option and get the information from theFlorian Obser
directory call. This way we don't need to update the acme-client.conf file every time it changes. Still parse the option, ignore and warn about it for a release. Sysmerge should be able to handle the removal. "nice" deraadt@ OK benno
2017-10-19fix a use after free and a memory leak in error pathsJonathan Gray
ok deraadt@ florian@
2017-10-17add missing HISTORY; based on CVS logs and release announcementsIngo Schwarze
2017-07-08fix typo in commentTheo Buehler
from Hiltjo Posthuma
2017-07-03no need to generate y.tab.h if nothing uses it, set YFLAGS to nothingMarc Espie
instead of CLEANFILES += y.tab.h okay millert@
2017-05-27Use basename(3) instead of hand rolling it.Florian Obser
Gets rid of double slashes, pointed out by Raf Czlonka (rczlonka at gmail), thanks! OK benno
2017-03-29account key needs to be in quotes.T.J. Townsend
ok benno deraadt
2017-03-26recallocarray() for data buffer from the net.Theo de Raadt
ok beck
2017-03-23It is perfectly valid to have a cert / key not owned by root; removeFlorian Obser
useless check. OK benno
2017-03-23pull root check up, the parser will bomb out anywayFlorian Obser
OK benno
2017-03-22Improve manpage and config file to show the more common use case.Sebastian Benoit
from Nick Holland (nick AT holland-consulting DOT net) ok jmc@ florian@
2017-03-20Simplify cron(8) job example.Antoine Jacoutot
input from jmc@ ok tb@ deraadt@
2017-02-03Don't use <sys/param.h> from userland without cause. Sort <sys/*>Philip Guenther
before other includes per style(9) while we're here. ok florian@ bcook@ jsing@ beck@
2017-01-28- -N got changed to -DJason McIntyre
- there is no Challenges section reported by michael reed
2017-01-25remove __BEGIN_DECLS and __END_DECLS from http.hKinichiro Inoguchi
sync with ocspcheck and acme-client ok benno@
2017-01-24Make returns consistent and remove parentheses per style(9).Joel Sing
Transformed with coccinelle. Requested by and ok tb@
2017-01-24nuke extra brackets. discussed with jsingTheo Buehler
2017-01-24Complete jsing's coccinelle cleanup... by handTheo de Raadt
ok jsing
2017-01-24errx() does not need extra newlineTheo de Raadt