Commit graph

15 commits

Author SHA1 Message Date
orangepizza
5a70c3661d
feat: support for certificate with raw IP SAN (RFC8738) (#1838) 2023-05-02 19:02:18 +02:00
Paul Dee
27a2c014f7
feat: add RSA 3072 (#1856) 2023-03-01 15:27:20 +00:00
Ludovic Fernandez
409b3c9959
feat: update to go1.18 (#1700) 2022-08-22 15:05:31 +00:00
Chris Smith
15762c2277
fix: panic in certcrypto.ParsePEMPrivateKey (#1596) 2022-02-20 15:23:52 +01:00
Stuart Auld
719341250f
Extend validity of TLS-ALPN-01 certificates to 365 days (#1534) 2021-11-27 04:22:59 +00:00
Ludovic Fernandez
e79975cf14
csr: support NEW CERTIFICATE REQUEST as CSR type (#1423) 2021-06-05 13:47:39 +02:00
Ludovic Fernandez
52ad9d72e8
chore: update linter (#1367) 2021-03-04 19:16:59 +00:00
Ludovic Fernandez
6043c9347c
chore: update linter. (#1145) 2020-05-08 19:35:25 +02:00
Ludovic Fernandez
2da1ce06ea
chore: wrap errors. (#1070) 2020-02-27 19:14:45 +01:00
Matt Holt
5cdc0002e9
crypto: Treat CommonName as optional (#1064) 2020-02-21 19:28:07 +01:00
Matt Holt
c7bbf62dd4 Successfully parse private key PEM blocks (#1030) 2020-01-06 16:52:56 +01:00
Ludovic Fernandez
3edb75872d
chore: migrate to new org. (#824) 2019-03-11 17:56:48 +01:00
Ludovic Fernandez
219222fdda
Use canonical imports (#822)
* fix: challenge are not required for revoke.
2019-03-11 16:54:35 +01:00
Ludovic Fernandez
9409b92ed5
fix: CLI and key type. (#790) 2019-02-08 19:29:28 +01:00
Ludovic Fernandez
42941ccea6
Refactor the core of the lib (#700)
- Packages
- Isolate code used by the CLI into the package `cmd`
- (experimental) Add e2e tests for HTTP01, TLS-ALPN-01 and DNS-01, use [Pebble](https://github.com/letsencrypt/pebble) and [challtestsrv](https://github.com/letsencrypt/boulder/tree/master/test/challtestsrv) 
- Support non-ascii domain name (punnycode)
- Check all challenges in a predictable order
- No more global exported variables
- Archive revoked certificates
- Fixes revocation for subdomains and non-ascii domains
- Disable pending authorizations
- use pointer for RemoteError/ProblemDetails
- Poll authz URL instead of challenge URL
- The ability for a DNS provider to solve the challenge sequentially
- Check all nameservers in a predictable order
- Option to disable the complete propagation Requirement
- CLI, support for renew with CSR
- CLI, add SAN on renew
- Add command to list certificates.
- Logs every iteration of waiting for the propagation
- update DNSimple client
- update github.com/miekg/dns
2018-12-06 22:50:17 +01:00