summaryrefslogtreecommitdiff
path: root/acme-certify.hs
AgeCommit message (Collapse)Author
2019-06-30remove unused codeAndrew Cady
2019-06-30re-enable disabled warningAndrew Cady
2019-06-30whitespaceAndrew Cady
2017-07-05add command to check for certificate expiration on remote HTTP hostsAndrew Cady
2017-06-11spellingAndrew Cady
2017-06-11avoid unneeded provision checksAndrew Cady
2017-06-11provision check is now optionalAndrew Cady
2017-03-02update to lts-8.3Andrew Cady
2017-03-02improve command-line usage helpAndrew Cady
2016-10-28factor out function 'configGetCertReqs'Andrew Cady
2016-05-01ensure created certs have proper permissionsAndrew Cady
2016-05-01actually respect --config command line optionAndrew Cady
2016-05-01switch to new X3 certificateAndrew Cady
2016-04-11Properly check for added subdomainsAndrew Cady
Regardless of whether the certificate isn't near expiration, if any name in the configuration file isn't in the certificate, a new certificate will be generated.
2016-04-11Implement code to read X509 subjectAltNameAndrew Cady
This isn't actually used yet; it's just printed out.
2016-04-11Check existing certificate expirationAndrew Cady
This disables renewing the cert unless the existing cert will expire within 20 days. It doesn't check if the existing cert has the same names as the new cert would! This needs to be done.
2016-04-10New option to "update": --tryAndrew Cady
2016-04-10fix bug where "." as subdomain was not substitutedAndrew Cady
2016-04-10Add option "--dry-run" to command "update"Andrew Cady
2016-04-10successfully fetched real certificateAndrew Cady
2016-04-10Perform all provision checks before any ACME requestsAndrew Cady
Also removed various test output
2016-04-10'acme update' accepts hosts as argumentsAndrew Cady
When arguments are specified on the command line, they will be interpreted as hosts to limit the update to. Without arguments, update all hosts.
2016-04-09Change certificate output directoryAndrew Cady
It's now saved under <host>/<domain> even if only a subdomain of <domain> is being certified.
2016-04-09successfully retrieved certificate with update codeAndrew Cady
2016-04-09disable misc. test outputAndrew Cady
2016-04-09fix erroneous use of "show" on DomainNameAndrew Cady
2016-04-09Specify remote provisioning paths in config fileAndrew Cady
2016-04-09implement remote file http provisionerAndrew Cady
2016-04-09implement code to install & clean up remote temporary filesAndrew Cady
(via ssh)
2016-04-09generate stub CertSpec objects from config fileAndrew Cady
(CertSpec is the new name for AcmeCertRequest)
2016-04-09stub parsing of yaml config fileAndrew Cady
2016-04-09import Data.Yaml.ConfigAndrew Cady
2016-04-09Separate CLI into subcommandsAndrew Cady
Viz. 'update' and 'certify' 'certify' is just the previous CLI. 'update' is unimplemented. The binary was renamed from 'acme-certify' to 'acme' to reflect this.
2016-04-09Trivial, formattingAndrew Cady
2016-04-09Move generation of CSR into `certify` functionAndrew Cady
2016-04-08More renames/cleanup related to HttpProvisionerAndrew Cady
2016-04-08Improve HttpProvisioner interfaceAndrew Cady
These still need to be renamed
2016-04-08More refactoringAndrew Cady
2016-04-08Change type of HttpProvisionerAndrew Cady
Now it is parameterized on domain name. This will allow to provision to a different directory for each (sub)domain.
2016-04-08slight refactorAndrew Cady
2016-01-27remove Keys type from Network.ACME.EncodingAndrew Cady
2016-01-27Embed issuer certificate in binaryAndrew Cady
This permits the program to be run from outside the source directory.
2016-01-26Pre-generate DH paramsAndrew Cady
The program now outputs a combined PEM certificate. A new option allows DH-param generation to be disabled.
2016-01-25generate DH params; use PEM for final outputAndrew Cady
this needs to be made optional and the DH params should be cached, because generating them is very slow.
2016-01-25move genReq into the libraryAndrew Cady
2016-01-25Change API of "certify"Andrew Cady
It now expects a callback to provision the challenge responses. This needs to be improved so that it will also do cleanup.
2016-01-24fix warningsAndrew Cady
2016-01-24Oops; don't use "show" with DomainName typeAndrew Cady
2016-01-24Don't save CSR to disk; cleanupAndrew Cady
2016-01-24use BasePreludeAndrew Cady