Commit Graph

1114 Commits

Author SHA1 Message Date
Anthony Arroyo
dc103dcabd
Merge pull request #765 from urbit/https-acme
adds letsencrypt client :acme, integrates with :dns app and %eyre
2018-07-19 12:11:04 -07:00
Joe Bryan
4db7e486ed stub out :acme +sigh-recoverable-error rate-limit callback, print httr in mark 2018-07-19 14:11:16 -04:00
Joe Bryan
ffe7970d74 retry failed domain validation token verification 2018-07-19 14:11:16 -04:00
Joe Bryan
05050a09ff retry failed dns bindings in +hear:tell 2018-07-19 14:11:16 -04:00
Joe Bryan
7aada841f4 fix typo in error message 2018-07-19 14:11:16 -04:00
Joe Bryan
243c0a9a10 ignores our own route updates in :dns 2018-07-19 14:11:16 -04:00
Joe Bryan
22e5bb0366 uses pkcs8 private keys for %eyre cert installation 2018-07-19 14:11:16 -04:00
Joe Bryan
36d15d296c fixes pkcs8 ASN.1 en/de-coding (missing constant version) 2018-07-19 14:11:16 -04:00
Joe Bryan
f5991978be retry %direct binding verification of 504 response (cttp timeout) 2018-07-19 14:11:16 -04:00
Joe Bryan
6419f27e3a adds debug install/uninstall cert events 2018-07-10 16:42:46 -04:00
Joe Bryan
5a953aa01b fixes bug in +reserved predicate for ipv4 addresses 2018-07-10 16:42:46 -04:00
Joe Bryan
14841db28d updates :dns to notify %eyre on new bindings 2018-07-10 16:42:46 -04:00
Anthony Arroyo
758b66fe7e just disabled all of web/pages/nutalk due to fcgi issues 2018-07-02 12:18:00 -07:00
Anthony Arroyo
d1dad2d59e another page tthat breaks tests because of fcgi issues 2018-07-02 12:04:26 -07:00
Joe Bryan
6ec776f04a defers :acme initialization to first certificate order 2018-06-29 00:02:34 -04:00
Joe Bryan
5393b129f2 defers pending order creation to after registration 2018-06-28 23:46:24 -04:00
Joe Bryan
26b10e79b5 defer initial http request from +prep 2018-06-28 23:45:10 -04:00
Joe Bryan
c8c90bc587 integrates :acme with %eyre (receive new domains/orders, install certificates) 2018-06-28 23:45:04 -04:00
Joe Bryan
76788656d7 refactors +nonce:effect and call sites
and fixes typo in +bad-nonce
2018-06-28 14:04:11 -04:00
Joe Bryan
d40151604b adds comment to and reformats +emsa:rs256 2018-06-28 14:04:11 -04:00
Joe Bryan
8a8b16e0bd adds csr context-specific tag explanation comment 2018-06-28 14:04:11 -04:00
Joe Bryan
d2a7111f58 adds pkcs8 private key en/de-coding 2018-06-28 14:04:11 -04:00
Joe Bryan
f46e226247 updates +der %bit en/de-coding to use +octs, tests for significant trailing zeros 2018-06-28 14:04:11 -04:00
Joe Bryan
56db9be687 refactors jwk public/private key en/de-coding 2018-06-28 14:04:11 -04:00
Joe Bryan
0b4ee7702e improves rsa key generation (somewhat) 2018-06-28 14:04:11 -04:00
Joe Bryan
e194b15b78 refactors +parse:der 2018-06-28 14:04:11 -04:00
Joe Bryan
fffff33dfc refactors +parse:base64 2018-06-28 14:04:11 -04:00
Joe Bryan
a9871af7fb always parse :len bytes in +de:der 2018-06-28 14:04:11 -04:00
Joe Bryan
67590f70c7 updates +de:base64 to output +octs 2018-06-28 14:04:11 -04:00
Joe Bryan
3238cf6ce6 updates +der encoding to produce +octs, base-64 encoding to accept octs 2018-06-28 14:04:11 -04:00
Joe Bryan
b5f352f3bc refactors +der %oct parser 2018-06-28 14:04:11 -04:00
Joe Bryan
84452a6e00 updates ASN.1 %oct to explicitly track byte-length 2018-06-28 14:04:11 -04:00
Joe Bryan
546053fb7c adds failing test case for invalid JWS 2018-06-28 14:04:11 -04:00
Joe Bryan
c2ccfed00f adds reproduction for invalid jws signature 2018-06-28 14:04:11 -04:00
Joe Bryan
90efc6daf0 adds mechanism to print account key 2018-06-28 14:04:11 -04:00
Joe Bryan
92d27238c1 archives active order in +add-order 2018-06-28 14:04:11 -04:00
Joe Bryan
dcf947712f support already-completed domain validation challenges 2018-06-28 14:04:11 -04:00
Joe Bryan
2acd46a701 refactors +sigh-httr 2018-06-28 14:04:11 -04:00
Joe Bryan
1fb2f0624f adds +certificate:event to +sigh-httr 2018-06-28 14:04:11 -04:00
Joe Bryan
3a1c072527 revises :acme state, rewrites API client 2018-06-28 14:04:11 -04:00
Joe Bryan
1029a44758 tweaks and formats block comments 2018-06-28 14:04:11 -04:00
Joe Bryan
31f95df959 additional refactoring and comment cleanup in asn1 and pkcs library cores 2018-06-28 14:04:11 -04:00
Joe Bryan
218369c85d adds more comments and further refactors +asn1 and +der 2018-06-28 14:04:11 -04:00
Joe Bryan
f7a6ad1fb2 first pass new-style comments for library cores 2018-06-28 14:04:11 -04:00
Joe Bryan
8c0eea3a19 renames +en-host to +join 2018-06-28 14:04:11 -04:00
Joe Bryan
2a83c41f24 removes redundant new-order 2018-06-28 14:04:11 -04:00
Joe Bryan
77391241c7 really make sure account/certificate keys are different 2018-06-28 14:04:11 -04:00
Joe Bryan
b4197152fe parses order responses more minimally 2018-06-28 14:04:10 -04:00
Joe Bryan
9b7c5f9337 insure that account and certificate keys are different
determinism ftw!
2018-06-28 14:04:10 -04:00
Joe Bryan
8567866e89 fixes the nonce retry fix 2018-06-28 14:04:10 -04:00
Joe Bryan
0eae33af9e disables some overly-restrictive json response parsing 2018-06-28 14:04:10 -04:00
Joe Bryan
2bbd8af930 use only one certificate key (for now) 2018-06-28 14:04:10 -04:00
Joe Bryan
2198de77d8 support empty re-registration response, minor cleanup 2018-06-28 14:04:10 -04:00
Joe Bryan
831813c660 fixes badNonce retry, archives old orders when adding a new one 2018-06-28 14:04:10 -04:00
Joe Bryan
671cc1d277 tests challenges locally before notifying ACME server 2018-06-28 14:04:10 -04:00
Joe Bryan
a16dde1476 comment jihad 2018-06-28 14:04:10 -04:00
Joe Bryan
192ebadd87 refactors DER ASN.1 parser 2018-06-28 14:04:10 -04:00
Joe Bryan
2938c19be1 refactors DER en/de-coding out of +asn1 into a separate core 2018-06-28 14:04:10 -04:00
Joe Bryan
3d40edc8d1 refactors JWS, JWK thumbprint, and ACME POST requests 2018-06-28 14:04:10 -04:00
Joe Bryan
5e0a2fcb95 refactors pkcs1, 8, and 10, separating ASN.1 specs from DER encoding
also adds pkcs1 RSA public key en/de-coding and tests
2018-06-28 14:04:10 -04:00
Joe Bryan
39ac62275d removes automatic ~ship.urbit.org order initialization 2018-06-28 14:04:10 -04:00
Joe Bryan
90d2768358 updates rsa-key structure to support public keys 2018-06-28 14:04:10 -04:00
Joe Bryan
09d61ca3d7 finishes basic ACMEv2 flow, refactors multiple event queuing 2018-06-28 14:04:10 -04:00
Joe Bryan
854f9aace4 adds detailed state structures, parsers, control flow to :acme 2018-06-28 14:04:10 -04:00
Joe Bryan
55b33d8578 random cleanup 2018-06-28 14:04:10 -04:00
Joe Bryan
e96d0e77d5 adds pkcs10 encoding for Certificate Signing Requests 2018-06-28 14:04:10 -04:00
Joe Bryan
e4014ca385 adds pkcs8 encoding for RSA public keys 2018-06-28 14:04:10 -04:00
Joe Bryan
37d5c6edbb adds auras to +spec:asn1 2018-06-28 14:04:10 -04:00
Joe Bryan
f2fe13bf73 implements jwk en/de-coding for RSA private keys, fixes JWS tests (and jws-body) 2018-06-28 14:04:10 -04:00
Joe Bryan
d952b368cb tests for pkcs1 version number in DER decoding 2018-06-28 14:04:10 -04:00
Joe Bryan
d8d1f36eaa refactors +jwk, corrects decoding, implements encoding 2018-06-28 14:04:10 -04:00
Joe Bryan
fd95b950d1 cleans up tests, adds comments with sources for most test parameters 2018-06-28 14:04:10 -04:00
Joe Bryan
8fdfa71a8d adds some base64 en/de-coding tests 2018-06-28 14:04:10 -04:00
Joe Bryan
dce78a303a implements EMSA-PKCS1-v1_5 for RSA signatures
finally compatible with openssl!
2018-06-28 14:04:10 -04:00
Joe Bryan
aefb6dff4d adds additional RSA PEM/DER test cases, reorders tests 2018-06-28 14:04:10 -04:00
Joe Bryan
340d7da618 fixes ASN.1 DER unsigned integer en/de-coding 2018-06-28 14:04:10 -04:00
Joe Bryan
5388900d03 fixes ASN.1 DER multi-byte length prefix en/de-coding 2018-06-28 14:04:10 -04:00
Joe Bryan
2b0836a815 cleans up +till:asn1 (length-prefixed byte parser) 2018-06-28 14:04:10 -04:00
Joe Bryan
7f6adc5759 adds PEM and DER decoding for RSA private keys 2018-06-28 14:04:10 -04:00
Joe Bryan
e31d6f1db9 adds DER and PEM encoding for RSA private keys 2018-06-28 14:04:10 -04:00
Joe Bryan
b0b8e3f1d7 adds %int to asn.1 en/de-code 2018-06-28 14:04:10 -04:00
Joe Bryan
7162b69a46 updates base64 en/de-coding to optionally support padding and url-safety 2018-06-28 14:04:10 -04:00
Joe Bryan
ea9dd4be11 makes rsa public exponent configurable, moves +rsa 2018-06-28 14:04:10 -04:00
Joe Bryan
94bef066a8 refactors rsa keys in tests 2018-06-28 14:04:10 -04:00
Joe Bryan
dd201b9ab0 wraps long lines 2018-06-28 14:04:10 -04:00
Joe Bryan
78b379b00d adds (partial) asn1 parser, tests 2018-06-28 14:04:10 -04:00
Joe Bryan
6edf321e36 adds asn1 digests to +rs256 (WIP - still failing) 2018-06-28 14:04:10 -04:00
Joe Bryan
91ec568fda re-enables and corrects some failing tests 2018-06-28 14:04:10 -04:00
Joe Bryan
0928fe50e1 implements initial asn1 serialization (for sha-256 digests) 2018-06-28 14:04:10 -04:00
Joe Bryan
de7bd9c661 better base64 2018-06-28 14:04:10 -04:00
Joe Bryan
d0d9ac3bf3 updates test-runner to print tangs 2018-06-28 14:04:10 -04:00
Joe Bryan
3a6e8c6f7b adds :acme work-in-progress demo app
:acme %test (base64 json variation failures atm)
:acme %init (new account fails due to jws parse or rsa prime issues)
2018-06-28 14:04:10 -04:00
Elliot Glaysher
87cbea377d Remove indirect hoons and fix up callsites using // 2018-06-26 13:52:56 -07:00
Anthony Arroyo
e14ba242a7 skip pages that need /$ 2018-06-25 12:51:35 -07:00
Anthony Arroyo
7b42153198 Merge branch 'collections' into collections-dom-json 2018-06-25 12:14:40 -07:00
Anthony Arroyo
5da73e0bd6 Merge branch 'collections' into collections-dom-json 2018-06-25 12:10:33 -07:00
Anthony Arroyo
5b3370253a
Merge pull request #752 from urbit/https-proxy-config-dns
adds dns app, http(s) server-config and proxy notification moves
2018-06-21 11:34:32 -07:00
Joe Bryan
3b543b46de implements safe re-binding, refactors |gcloud 2018-06-20 19:24:13 -04:00
Joe Bryan
cd4330a024 auto-starts :dns, adds generator to configure authority 2018-06-20 19:24:13 -04:00
Joe Bryan
08b39a8f64 checks for reserved IP addresses before creating %direct binding 2018-06-20 19:24:13 -04:00
Joe Bryan
2f743a504b removes debug binding in +poke-noun, unnecessary printfs 2018-06-20 19:24:13 -04:00
Joe Bryan
f2f47a07fb creates sur/dns, refactors app, ands %dns-bind and %dns-bond marks 2018-06-20 19:24:13 -04:00
Joe Bryan
5f1ec21de3 adds relay confirmation via http before requesting %directing binding 2018-06-20 19:24:13 -04:00
Joe Bryan
5cc8aecc98 changes %binding notifications: authority pokes relay, relay pokes ship 2018-06-20 19:24:01 -04:00
Anthony Arroyo
1edbbce529 Revert "new profile mark and hood/write changes added"
This reverts commit c76f77994c.
2018-06-20 14:55:20 -07:00
Joe Bryan
427b5115d4 print failed %pokes in +coup 2018-06-20 17:33:32 -04:00
Joe Bryan
9696890fb1 add http request-error handling, reset state on failed authority config 2018-06-20 17:33:32 -04:00
Joe Bryan
53cbb607d8 cleanup and enforce more %dns-bind invariants 2018-06-20 17:33:32 -04:00
Joe Bryan
f5a43730bc correctly specify forwarding-on-behalf-of ship 2018-06-20 17:33:32 -04:00
Joe Bryan
83e2b2ca1e enforce invariants: stars direct only, indirect target already bound 2018-06-20 17:33:32 -04:00
Joe Bryan
d53becf191 adds latest-style arm comments 2018-06-20 17:33:32 -04:00
Joe Bryan
e4339a770b initial gcloud record creation and confirmation 2018-06-20 17:33:32 -04:00
Joe Bryan
a7ac502c60 cleanup, logging, etc. 2018-06-20 17:33:32 -04:00
Joe Bryan
f4679f2571 refactors +authority, implements initial authority confirmation 2018-06-20 17:33:32 -04:00
Joe Bryan
f801776bac refactors binding and acknowledgment pokes 2018-06-20 17:33:32 -04:00
Joe Bryan
ba614f3f72 adds initial dns app 2018-06-20 17:33:32 -04:00
Anthony Arroyo
81502d5618 need to add files to app/test/example.* for ren testing 2018-06-20 14:21:13 -07:00
Isaac Visintainer
c76f77994c new profile mark and hood/write changes added 2018-06-20 13:53:18 -07:00
Anthony Arroyo
470a664a81 merging in merged collections 2018-06-20 11:38:36 -07:00
Joe Bryan
138beed3b0 disables collection renders in :test 2018-06-19 22:01:52 -04:00
Joe Bryan
9d72b8f92b Merge branch 'collections' into collections-merge
* collections: (127 commits)
  Revert "cross-ship permissions works now"
  deleted more unused files, updated json arm of collections mark
  removed unused index file (was used for debug)
  cross-ship permissions works now
  rendered MVE css and js 272af56804f822c23efa645aafcf1d5d8a8bfdff
  simplified latest alias
  new 'latest' page in colls
  deleted a swp file
  mve updates f83035d162dd60107b45798117cf924437070798
  isaac's eyre changes to polling parameters as requested by Logan
  rendered MVE f0a44584883e8789ec5bab9c80334ae0ee251e02
  source new circle to inbox in collections app
  relative href
  removed topic text from collection json
  patch back in realnet ames (was testnet ames in xship-wrap
  collections now sends invites to whitelist
  aded fascen to pass along fasbuc params
  add x-htm wrappers for &htm
  rename default eyre mark to x-urb, do xhsip on x- prefix requests
  updated json endpoints in accordance with logan's requests
  ...
2018-06-19 20:51:22 -04:00
Isaac Visintainer
b793bc07d2 Revert "cross-ship permissions works now"
This reverts commit fd4de4e435.
2018-06-19 15:42:23 -07:00
Isaac Visintainer
fd4de4e435 cross-ship permissions works now 2018-06-18 14:30:53 -07:00
Isaac Visintainer
54cdd589c4 fixed outside urls 2018-06-15 11:22:15 -07:00
Curtis Yarvin
07e8e3029f Initial rind installation. 2018-06-15 10:37:57 -07:00
Isaac Visintainer
5c90d76de4 fixed clay mut problem 2018-06-14 13:30:20 -07:00
Elliot Glaysher
8cdf3cf165 Dontjo is something that shall be overcome. 2018-06-13 13:28:09 -07:00
Elliot Glaysher
ddf0334b15 Switch Gall to use the Turbo vane.
This fixes Gall and userland apps so that they boot. It then disables
%hall and %talk, which will only boot with the +fond jet disabled.
(Otherwise, we get a bail from the jet.)
2018-06-13 13:12:32 -07:00
Anthony Arroyo
fb07c6cd6d made cross-ship collections logic cleaner 2018-06-07 14:42:50 -07:00
Isaac Visintainer
86d9286f08 made hymn renderer unneccesary 2018-06-04 20:48:06 -07:00
Isaac Visintainer
2c058e147c variety of bug-fixes 2018-06-04 16:58:40 -07:00
Elliot Glaysher
dd20225625 Restore the dontjo +prep arm 2018-06-04 11:23:12 -07:00
Anthony Arroyo
e9b816fbf3 basic foreign post 2018-06-04 10:09:04 -07:00
Elliot Glaysher
bc17312fa3 Merge branch 'master' into ford-turbo 2018-06-04 09:59:44 -07:00
Elliot Glaysher
74da8f878c %dontjo can now use the turbo vane to run the +ford-turbo test suite 2018-06-01 16:18:21 -07:00
Elliot Glaysher
ce7c46b2b7 Remove the number from the name. 2018-06-01 15:18:27 -07:00
Elliot Glaysher
85a419b469 %dontjo is able to do simple expressions 2018-06-01 15:18:12 -07:00
Curtis Yarvin
2c2a680c57 Introduced +$ notation. 2018-06-01 14:31:10 -07:00
Isaac Visintainer
7484887597 first pass, basic functionality working 2018-06-01 14:24:10 -07:00
Ted Blackman
6fae175bba WIP trying to get dontjo working 2018-05-31 17:14:39 -07:00
Curtis Yarvin
ddb0fc22f4 Chapter names for everyone. 2018-05-28 23:42:16 -07:00
Curtis Yarvin
3c3130c37d Chapters with stub names. 2018-05-28 22:21:44 -07:00
Curtis Yarvin
bcd76e4caa More renaming. 2018-05-27 13:01:04 -07:00
Curtis Yarvin
a29b22357d Some renaming and stuff. 2018-05-27 12:15:15 -07:00
Curtis Yarvin
a26105370b Old help totally cleaned out. 2018-05-24 15:39:56 -07:00
Curtis Yarvin
d15578859b Badly done. 2018-05-20 13:23:01 -07:00
Curtis Yarvin
7caa1f86e1 Eliminate chapters in +coil. 2018-05-16 14:51:20 -07:00
Anthony Arroyo
4bfbfa418f source new circle to inbox in collections app 2018-05-16 10:20:28 -07:00
Fang
e362b4b1c8 Merge in userspace constitution work. 2018-05-14 19:59:34 +02:00
Anthony Arroyo
bfdbf00c30 collections now sends invites to whitelist 2018-05-11 14:18:20 -07:00