xenolf
85eddfa347
Remove check for auto renewed cert from . This is no longer part of the spec
2016-10-17 11:12:54 +02:00
Ely Deckers
4083ff8bc3
Fix duplicate json tag in recoveryKeyMessage
...
Fixed issue by removing unused recoveryKeyMessage struct
Issue appears in Go 1.8+ due to this improvement to vet:
https://go-review.googlesource.com/#/c/16704/
2016-10-15 19:32:28 +02:00
Matthew Holt
70a2b229e2
Document that challenge providers get replaced on these calls
2016-09-28 18:19:52 -06:00
Kate Jefferson
2569c53efe
Add sync.Mutex to lock and unlock j.nonces
2016-08-18 16:35:03 -04:00
Matthew Holt
6bd7f505e1
Log when skipping challenges due to valid authz
2016-08-16 14:00:17 -06:00
Matthew Holt
b2d7a1821e
Skip solving challenges when authz is already valid ( fixes #267 )
2016-08-16 13:50:56 -06:00
Cristian Graziano
2818a41068
Export PreCheckDNS so library users can manage the DNS check in tests
2016-08-09 22:15:54 -07:00
liz
5eae7e889c
Fix documentation for acme.NewClient
2016-08-04 12:09:42 -04:00
janeczku
d6197084fc
Fixes zone lookup for domains that have a CNAME with the target in another zone
2016-07-29 21:28:28 +02:00
xenolf
e2f341198f
Remove unneeded re-checking of OCSP responses. The stdlib has us covered already.
...
Fixes #247
2016-07-21 03:32:56 +02:00
xenolf
029ece0fd2
Well a timeout of 10 something is a good idea indeed...
2016-07-21 03:27:34 +02:00
xenolf
082ff6d029
Removed HTTPTimeout and exported a new HTTPClient variable as a replacement.
...
The HTTPTimeout was not honored by the default client. Clients should now construct their own HTTPClient for overriding the timeout.
Fixes #246
2016-07-21 03:24:11 +02:00
Chris Marchesi
575370e196
cert: Extend acme.CertificateResource, support CSRs on renew
...
client.RenewCertificate now supports CSRs, and in fact prefers them,
when renewing certificates. In other words, if the certificate was
created via a CSR then using that will be attempted before re-generating
off a new private key.
Also adjusted the API of ObtainCertificateForCSR to be a little
more in line with the original ObtainCertificate function.
2016-06-14 21:15:25 -07:00
Will Glynn
8d7afd02b9
Add ObtainCertificateForCSR()
...
This commit also breaks requestCertificate() into two parts, the first of
which generates a CSR, the second of which became requestCertificateForCsr()
which does what the name implies.
2016-06-14 21:15:25 -07:00
xenolf
c570b320ae
Merge pull request #222 from connctd/registration
...
In case of conflict during registration, the old registration is now recovered
2016-06-14 13:13:50 +02:00
Till Klocke
402756c1c5
registration message in case of conflict 409 should not contain contact details
2016-06-14 09:50:12 +02:00
Derek McGowan
be785fda33
Updated original signature and removed new function
2016-06-12 22:57:22 -07:00
Russ Cox
c8b0781028
Add TLS SNI Challenge function which returns domain
...
Used by rsc.io/letsencrypt to get the challenge domain.
Originally committed under rsc.io/letsencrypt/vendor.
2016-06-10 11:47:43 -07:00
Chris Marchesi
3028225371
reg: Add Query and Delete functions
...
Add 2 new functions to acme.Client for registration stuff:
* QueryRegistration: This performs a POST on the client
registration's URI and gets the updated registration info.
* DeleteRegistration: This deletes the registration as currently
configured in the client.
The latter, while a part of the IETF draft, may not be 100%
functional in LE yet, my tests showed that resources were still
available after deletion.
2016-06-08 16:36:42 -07:00
Till Klocke
599eb9a739
In case of conflict during registration, the old registration is now recovered
2016-06-06 15:32:02 +02:00
zealic
88932f9167
Add dns-timeout support.
2016-05-25 11:22:09 +08:00
xenolf
9e0c21c439
Add HTTPTimeout variable to http.go.
...
This lets users of this library override the default internal timeout for HTTP requests issued by the library. The default is 10 seconds.
2016-05-19 18:51:47 +02:00
xenolf
094e3d41bb
httpError - Set detail string to the content of the HTTP response if it's not parsed as JSON
...
Fixes #188
2016-04-15 03:09:29 +02:00
xenolf
cbca761215
Merge pull request #186 from LukeHandle/patch-dns-retryquery
...
Retry logic for dnsQuery
2016-04-14 20:27:14 +02:00
LukeHandle
a684bab9a4
Fix typo in "retry"
2016-04-12 07:36:42 +01:00
xenolf
23e88185c2
Merge pull request #185 from rekby/jws-out-of-range
...
Fix out of range
2016-04-12 02:41:31 +02:00
LukeHandle
dbad97ebc6
Retry logic for dnsQuery
...
Added a slice of NS to be used when retrying queries. Also used with FindZoneByFqdn()
Adjusted 2 error messages given to better differentiate the returned error string
2016-04-12 00:24:11 +01:00
Rekby
e81192c912
errors.New -> fmt.Errorf
2016-04-11 11:49:20 +03:00
Rekby
3ab9b75696
simple, without retriing
2016-04-11 11:43:32 +03:00
Rekby
334ebd6ee6
gofmt
2016-04-11 07:27:12 +03:00
Rekby
7557681b06
doesn't sleep after last try
2016-04-11 07:26:45 +03:00
Rekby
3a426a1382
retry get nonce few times before return error
2016-04-11 07:22:00 +03:00
Rekby
f32c8a55e7
typo
2016-04-11 07:03:21 +03:00
Rekby
1107e337a5
returt to master version for clean pull request
2016-04-11 07:02:06 +03:00
Rekby
ec18c6e42f
Fix out of range
2016-04-11 06:45:32 +03:00
Rekby
232fbbef08
Fix out of range
2016-04-10 16:06:49 +03:00
xenolf
44d92633c6
Move duplicate code to a function
...
Signed-off-by: xenolf <xenolf@users.noreply.github.com>
2016-04-08 01:04:38 +02:00
Alexander Neumann
ec667a7ed1
Only try to parse JSON documents
...
This patch adds code to only parse the HTTP response body as JSON if the
content-type header advertises the content as JSON. In my case, the
directory server was unavailable: it returned a 503 HTTP response code
with an HTML document, and the only thing lego reported was:
2016/04/04 19:12:56 Could not create client: get directory at 'https://acme-v01.api.letsencrypt.org/directory ': invalid character '<' looking for beginning of value
This was caused by trying to parse the document body (HTML) as JSON,
without looking at the content-type header and returning the JSON parse
error.
2016-04-04 23:15:49 +02:00
Cedric Staub
6528bf217e
Build with go-jose.v1 instead of master
2016-03-27 12:38:49 -07:00
LukeHandle
20ab8300eb
Use zone name when talking to DNS APIs
...
This should handle multiple zones more efficiently
2016-03-21 00:18:49 +00:00
xenolf
d6fb247c29
Fix typo in dns_challenge
2016-03-19 17:48:50 +01:00
Michael Cross
8aa797f49d
Add ChallengeProviderTimeout type to acme package
...
This type allows for implementing DNS ChallengeProviders that require
an unsually long timeout when checking for record propagation.
2016-03-16 18:17:03 +00:00
Michael Cross
f70a48e28a
Improve wording of ChallengeProvider comment
2016-03-15 12:46:48 +00:00
xenolf
98c95e83c9
Add link to account to certificate meta data.
2016-03-14 03:29:29 +01:00
xenolf
3252b0bcb9
Fix WaitFor calls
2016-03-11 04:52:59 +01:00
xenolf
c50baa67cb
Move WaitFor into new utils.go and switch timeout and interval to time.Duration.
2016-03-11 03:52:46 +01:00
xenolf
2ae35a755d
Rename provider types as provider names are already in the package name. Added package level comments and fixed the name of the interface the providers are importing.
2016-03-11 03:46:09 +01:00
xenolf
9008ec6949
Move functions from dns package back into ACME.
2016-03-11 03:40:28 +01:00
xenolf
b412c67aa6
Move providers out of ACME package.
2016-03-03 01:14:32 +01:00
Pauline Middelink
8b90b1a380
Added testcase for in-valid.co.uk
...
Camelcased: fqdn2zone to fqdnToZone
Grammatical fix in externally visible error message
2016-02-29 08:46:15 +01:00
