Anthony Arroyo
dc103dcabd
Merge pull request #765 from urbit/https-acme
...
adds letsencrypt client :acme, integrates with :dns app and %eyre
2018-07-19 12:11:04 -07:00
Joe Bryan
4db7e486ed
stub out :acme +sigh-recoverable-error rate-limit callback, print httr in mark
2018-07-19 14:11:16 -04:00
Joe Bryan
ffe7970d74
retry failed domain validation token verification
2018-07-19 14:11:16 -04:00
Joe Bryan
05050a09ff
retry failed dns bindings in +hear:tell
2018-07-19 14:11:16 -04:00
Joe Bryan
7aada841f4
fix typo in error message
2018-07-19 14:11:16 -04:00
Joe Bryan
243c0a9a10
ignores our own route updates in :dns
2018-07-19 14:11:16 -04:00
Joe Bryan
22e5bb0366
uses pkcs8 private keys for %eyre cert installation
2018-07-19 14:11:16 -04:00
Joe Bryan
36d15d296c
fixes pkcs8 ASN.1 en/de-coding (missing constant version)
2018-07-19 14:11:16 -04:00
Joe Bryan
f5991978be
retry %direct binding verification of 504 response (cttp timeout)
2018-07-19 14:11:16 -04:00
Joe Bryan
6419f27e3a
adds debug install/uninstall cert events
2018-07-10 16:42:46 -04:00
Joe Bryan
5a953aa01b
fixes bug in +reserved predicate for ipv4 addresses
2018-07-10 16:42:46 -04:00
Joe Bryan
14841db28d
updates :dns to notify %eyre on new bindings
2018-07-10 16:42:46 -04:00
Anthony Arroyo
758b66fe7e
just disabled all of web/pages/nutalk due to fcgi issues
2018-07-02 12:18:00 -07:00
Anthony Arroyo
d1dad2d59e
another page tthat breaks tests because of fcgi issues
2018-07-02 12:04:26 -07:00
Joe Bryan
6ec776f04a
defers :acme initialization to first certificate order
2018-06-29 00:02:34 -04:00
Joe Bryan
5393b129f2
defers pending order creation to after registration
2018-06-28 23:46:24 -04:00
Joe Bryan
26b10e79b5
defer initial http request from +prep
2018-06-28 23:45:10 -04:00
Joe Bryan
c8c90bc587
integrates :acme with %eyre (receive new domains/orders, install certificates)
2018-06-28 23:45:04 -04:00
Joe Bryan
76788656d7
refactors +nonce:effect and call sites
...
and fixes typo in +bad-nonce
2018-06-28 14:04:11 -04:00
Joe Bryan
d40151604b
adds comment to and reformats +emsa:rs256
2018-06-28 14:04:11 -04:00
Joe Bryan
8a8b16e0bd
adds csr context-specific tag explanation comment
2018-06-28 14:04:11 -04:00
Joe Bryan
d2a7111f58
adds pkcs8 private key en/de-coding
2018-06-28 14:04:11 -04:00
Joe Bryan
f46e226247
updates +der %bit en/de-coding to use +octs, tests for significant trailing zeros
2018-06-28 14:04:11 -04:00
Joe Bryan
56db9be687
refactors jwk public/private key en/de-coding
2018-06-28 14:04:11 -04:00
Joe Bryan
0b4ee7702e
improves rsa key generation (somewhat)
2018-06-28 14:04:11 -04:00
Joe Bryan
e194b15b78
refactors +parse:der
2018-06-28 14:04:11 -04:00
Joe Bryan
fffff33dfc
refactors +parse:base64
2018-06-28 14:04:11 -04:00
Joe Bryan
a9871af7fb
always parse :len bytes in +de:der
2018-06-28 14:04:11 -04:00
Joe Bryan
67590f70c7
updates +de:base64 to output +octs
2018-06-28 14:04:11 -04:00
Joe Bryan
3238cf6ce6
updates +der encoding to produce +octs, base-64 encoding to accept octs
2018-06-28 14:04:11 -04:00
Joe Bryan
b5f352f3bc
refactors +der %oct parser
2018-06-28 14:04:11 -04:00
Joe Bryan
84452a6e00
updates ASN.1 %oct to explicitly track byte-length
2018-06-28 14:04:11 -04:00
Joe Bryan
546053fb7c
adds failing test case for invalid JWS
2018-06-28 14:04:11 -04:00
Joe Bryan
c2ccfed00f
adds reproduction for invalid jws signature
2018-06-28 14:04:11 -04:00
Joe Bryan
90efc6daf0
adds mechanism to print account key
2018-06-28 14:04:11 -04:00
Joe Bryan
92d27238c1
archives active order in +add-order
2018-06-28 14:04:11 -04:00
Joe Bryan
dcf947712f
support already-completed domain validation challenges
2018-06-28 14:04:11 -04:00
Joe Bryan
2acd46a701
refactors +sigh-httr
2018-06-28 14:04:11 -04:00
Joe Bryan
1fb2f0624f
adds +certificate:event to +sigh-httr
2018-06-28 14:04:11 -04:00
Joe Bryan
3a1c072527
revises :acme state, rewrites API client
2018-06-28 14:04:11 -04:00
Joe Bryan
1029a44758
tweaks and formats block comments
2018-06-28 14:04:11 -04:00
Joe Bryan
31f95df959
additional refactoring and comment cleanup in asn1 and pkcs library cores
2018-06-28 14:04:11 -04:00
Joe Bryan
218369c85d
adds more comments and further refactors +asn1 and +der
2018-06-28 14:04:11 -04:00
Joe Bryan
f7a6ad1fb2
first pass new-style comments for library cores
2018-06-28 14:04:11 -04:00
Joe Bryan
8c0eea3a19
renames +en-host to +join
2018-06-28 14:04:11 -04:00
Joe Bryan
2a83c41f24
removes redundant new-order
2018-06-28 14:04:11 -04:00
Joe Bryan
77391241c7
really make sure account/certificate keys are different
2018-06-28 14:04:11 -04:00
Joe Bryan
b4197152fe
parses order responses more minimally
2018-06-28 14:04:10 -04:00
Joe Bryan
9b7c5f9337
insure that account and certificate keys are different
...
determinism ftw!
2018-06-28 14:04:10 -04:00
Joe Bryan
8567866e89
fixes the nonce retry fix
2018-06-28 14:04:10 -04:00
Joe Bryan
0eae33af9e
disables some overly-restrictive json response parsing
2018-06-28 14:04:10 -04:00
Joe Bryan
2bbd8af930
use only one certificate key (for now)
2018-06-28 14:04:10 -04:00
Joe Bryan
2198de77d8
support empty re-registration response, minor cleanup
2018-06-28 14:04:10 -04:00
Joe Bryan
831813c660
fixes badNonce retry, archives old orders when adding a new one
2018-06-28 14:04:10 -04:00
Joe Bryan
671cc1d277
tests challenges locally before notifying ACME server
2018-06-28 14:04:10 -04:00
Joe Bryan
a16dde1476
comment jihad
2018-06-28 14:04:10 -04:00
Joe Bryan
192ebadd87
refactors DER ASN.1 parser
2018-06-28 14:04:10 -04:00
Joe Bryan
2938c19be1
refactors DER en/de-coding out of +asn1 into a separate core
2018-06-28 14:04:10 -04:00
Joe Bryan
3d40edc8d1
refactors JWS, JWK thumbprint, and ACME POST requests
2018-06-28 14:04:10 -04:00
Joe Bryan
5e0a2fcb95
refactors pkcs1, 8, and 10, separating ASN.1 specs from DER encoding
...
also adds pkcs1 RSA public key en/de-coding and tests
2018-06-28 14:04:10 -04:00
Joe Bryan
39ac62275d
removes automatic ~ship.urbit.org order initialization
2018-06-28 14:04:10 -04:00
Joe Bryan
90d2768358
updates rsa-key structure to support public keys
2018-06-28 14:04:10 -04:00
Joe Bryan
09d61ca3d7
finishes basic ACMEv2 flow, refactors multiple event queuing
2018-06-28 14:04:10 -04:00
Joe Bryan
854f9aace4
adds detailed state structures, parsers, control flow to :acme
2018-06-28 14:04:10 -04:00
Joe Bryan
55b33d8578
random cleanup
2018-06-28 14:04:10 -04:00
Joe Bryan
e96d0e77d5
adds pkcs10 encoding for Certificate Signing Requests
2018-06-28 14:04:10 -04:00
Joe Bryan
e4014ca385
adds pkcs8 encoding for RSA public keys
2018-06-28 14:04:10 -04:00
Joe Bryan
37d5c6edbb
adds auras to +spec:asn1
2018-06-28 14:04:10 -04:00
Joe Bryan
f2fe13bf73
implements jwk en/de-coding for RSA private keys, fixes JWS tests (and jws-body)
2018-06-28 14:04:10 -04:00
Joe Bryan
d952b368cb
tests for pkcs1 version number in DER decoding
2018-06-28 14:04:10 -04:00
Joe Bryan
d8d1f36eaa
refactors +jwk, corrects decoding, implements encoding
2018-06-28 14:04:10 -04:00
Joe Bryan
fd95b950d1
cleans up tests, adds comments with sources for most test parameters
2018-06-28 14:04:10 -04:00
Joe Bryan
8fdfa71a8d
adds some base64 en/de-coding tests
2018-06-28 14:04:10 -04:00
Joe Bryan
dce78a303a
implements EMSA-PKCS1-v1_5 for RSA signatures
...
finally compatible with openssl!
2018-06-28 14:04:10 -04:00
Joe Bryan
aefb6dff4d
adds additional RSA PEM/DER test cases, reorders tests
2018-06-28 14:04:10 -04:00
Joe Bryan
340d7da618
fixes ASN.1 DER unsigned integer en/de-coding
2018-06-28 14:04:10 -04:00
Joe Bryan
5388900d03
fixes ASN.1 DER multi-byte length prefix en/de-coding
2018-06-28 14:04:10 -04:00
Joe Bryan
2b0836a815
cleans up +till:asn1 (length-prefixed byte parser)
2018-06-28 14:04:10 -04:00
Joe Bryan
7f6adc5759
adds PEM and DER decoding for RSA private keys
2018-06-28 14:04:10 -04:00
Joe Bryan
e31d6f1db9
adds DER and PEM encoding for RSA private keys
2018-06-28 14:04:10 -04:00
Joe Bryan
b0b8e3f1d7
adds %int to asn.1 en/de-code
2018-06-28 14:04:10 -04:00
Joe Bryan
7162b69a46
updates base64 en/de-coding to optionally support padding and url-safety
2018-06-28 14:04:10 -04:00
Joe Bryan
ea9dd4be11
makes rsa public exponent configurable, moves +rsa
2018-06-28 14:04:10 -04:00
Joe Bryan
94bef066a8
refactors rsa keys in tests
2018-06-28 14:04:10 -04:00
Joe Bryan
dd201b9ab0
wraps long lines
2018-06-28 14:04:10 -04:00
Joe Bryan
78b379b00d
adds (partial) asn1 parser, tests
2018-06-28 14:04:10 -04:00
Joe Bryan
6edf321e36
adds asn1 digests to +rs256 (WIP - still failing)
2018-06-28 14:04:10 -04:00
Joe Bryan
91ec568fda
re-enables and corrects some failing tests
2018-06-28 14:04:10 -04:00
Joe Bryan
0928fe50e1
implements initial asn1 serialization (for sha-256 digests)
2018-06-28 14:04:10 -04:00
Joe Bryan
de7bd9c661
better base64
2018-06-28 14:04:10 -04:00
Joe Bryan
d0d9ac3bf3
updates test-runner to print tangs
2018-06-28 14:04:10 -04:00
Joe Bryan
3a6e8c6f7b
adds :acme work-in-progress demo app
...
:acme %test (base64 json variation failures atm)
:acme %init (new account fails due to jws parse or rsa prime issues)
2018-06-28 14:04:10 -04:00
Elliot Glaysher
87cbea377d
Remove indirect hoons and fix up callsites using //
2018-06-26 13:52:56 -07:00
Anthony Arroyo
e14ba242a7
skip pages that need /$
2018-06-25 12:51:35 -07:00
Anthony Arroyo
7b42153198
Merge branch 'collections' into collections-dom-json
2018-06-25 12:14:40 -07:00
Anthony Arroyo
5da73e0bd6
Merge branch 'collections' into collections-dom-json
2018-06-25 12:10:33 -07:00
Anthony Arroyo
5b3370253a
Merge pull request #752 from urbit/https-proxy-config-dns
...
adds dns app, http(s) server-config and proxy notification moves
2018-06-21 11:34:32 -07:00
Joe Bryan
3b543b46de
implements safe re-binding, refactors |gcloud
2018-06-20 19:24:13 -04:00
Joe Bryan
cd4330a024
auto-starts :dns, adds generator to configure authority
2018-06-20 19:24:13 -04:00
Joe Bryan
08b39a8f64
checks for reserved IP addresses before creating %direct binding
2018-06-20 19:24:13 -04:00
Joe Bryan
2f743a504b
removes debug binding in +poke-noun, unnecessary printfs
2018-06-20 19:24:13 -04:00
Joe Bryan
f2f47a07fb
creates sur/dns, refactors app, ands %dns-bind and %dns-bond marks
2018-06-20 19:24:13 -04:00
Joe Bryan
5f1ec21de3
adds relay confirmation via http before requesting %directing binding
2018-06-20 19:24:13 -04:00
Joe Bryan
5cc8aecc98
changes %binding notifications: authority pokes relay, relay pokes ship
2018-06-20 19:24:01 -04:00
Anthony Arroyo
1edbbce529
Revert "new profile mark and hood/write changes added"
...
This reverts commit c76f77994c
.
2018-06-20 14:55:20 -07:00
Joe Bryan
427b5115d4
print failed %pokes in +coup
2018-06-20 17:33:32 -04:00
Joe Bryan
9696890fb1
add http request-error handling, reset state on failed authority config
2018-06-20 17:33:32 -04:00
Joe Bryan
53cbb607d8
cleanup and enforce more %dns-bind invariants
2018-06-20 17:33:32 -04:00
Joe Bryan
f5a43730bc
correctly specify forwarding-on-behalf-of ship
2018-06-20 17:33:32 -04:00
Joe Bryan
83e2b2ca1e
enforce invariants: stars direct only, indirect target already bound
2018-06-20 17:33:32 -04:00
Joe Bryan
d53becf191
adds latest-style arm comments
2018-06-20 17:33:32 -04:00
Joe Bryan
e4339a770b
initial gcloud record creation and confirmation
2018-06-20 17:33:32 -04:00
Joe Bryan
a7ac502c60
cleanup, logging, etc.
2018-06-20 17:33:32 -04:00
Joe Bryan
f4679f2571
refactors +authority, implements initial authority confirmation
2018-06-20 17:33:32 -04:00
Joe Bryan
f801776bac
refactors binding and acknowledgment pokes
2018-06-20 17:33:32 -04:00
Joe Bryan
ba614f3f72
adds initial dns app
2018-06-20 17:33:32 -04:00
Anthony Arroyo
81502d5618
need to add files to app/test/example.* for ren testing
2018-06-20 14:21:13 -07:00
Isaac Visintainer
c76f77994c
new profile mark and hood/write changes added
2018-06-20 13:53:18 -07:00
Anthony Arroyo
470a664a81
merging in merged collections
2018-06-20 11:38:36 -07:00
Joe Bryan
138beed3b0
disables collection renders in :test
2018-06-19 22:01:52 -04:00
Joe Bryan
9d72b8f92b
Merge branch 'collections' into collections-merge
...
* collections: (127 commits)
Revert "cross-ship permissions works now"
deleted more unused files, updated json arm of collections mark
removed unused index file (was used for debug)
cross-ship permissions works now
rendered MVE css and js 272af56804f822c23efa645aafcf1d5d8a8bfdff
simplified latest alias
new 'latest' page in colls
deleted a swp file
mve updates f83035d162dd60107b45798117cf924437070798
isaac's eyre changes to polling parameters as requested by Logan
rendered MVE f0a44584883e8789ec5bab9c80334ae0ee251e02
source new circle to inbox in collections app
relative href
removed topic text from collection json
patch back in realnet ames (was testnet ames in xship-wrap
collections now sends invites to whitelist
aded fascen to pass along fasbuc params
add x-htm wrappers for &htm
rename default eyre mark to x-urb, do xhsip on x- prefix requests
updated json endpoints in accordance with logan's requests
...
2018-06-19 20:51:22 -04:00
Isaac Visintainer
b793bc07d2
Revert "cross-ship permissions works now"
...
This reverts commit fd4de4e435
.
2018-06-19 15:42:23 -07:00
Isaac Visintainer
fd4de4e435
cross-ship permissions works now
2018-06-18 14:30:53 -07:00
Isaac Visintainer
54cdd589c4
fixed outside urls
2018-06-15 11:22:15 -07:00
Curtis Yarvin
07e8e3029f
Initial rind installation.
2018-06-15 10:37:57 -07:00
Isaac Visintainer
5c90d76de4
fixed clay mut problem
2018-06-14 13:30:20 -07:00
Elliot Glaysher
8cdf3cf165
Dontjo is something that shall be overcome.
2018-06-13 13:28:09 -07:00
Elliot Glaysher
ddf0334b15
Switch Gall to use the Turbo vane.
...
This fixes Gall and userland apps so that they boot. It then disables
%hall and %talk, which will only boot with the +fond jet disabled.
(Otherwise, we get a bail from the jet.)
2018-06-13 13:12:32 -07:00
Anthony Arroyo
fb07c6cd6d
made cross-ship collections logic cleaner
2018-06-07 14:42:50 -07:00
Isaac Visintainer
86d9286f08
made hymn renderer unneccesary
2018-06-04 20:48:06 -07:00
Isaac Visintainer
2c058e147c
variety of bug-fixes
2018-06-04 16:58:40 -07:00
Elliot Glaysher
dd20225625
Restore the dontjo +prep arm
2018-06-04 11:23:12 -07:00
Anthony Arroyo
e9b816fbf3
basic foreign post
2018-06-04 10:09:04 -07:00
Elliot Glaysher
bc17312fa3
Merge branch 'master' into ford-turbo
2018-06-04 09:59:44 -07:00
Elliot Glaysher
74da8f878c
%dontjo can now use the turbo vane to run the +ford-turbo test suite
2018-06-01 16:18:21 -07:00
Elliot Glaysher
ce7c46b2b7
Remove the number from the name.
2018-06-01 15:18:27 -07:00
Elliot Glaysher
85a419b469
%dontjo is able to do simple expressions
2018-06-01 15:18:12 -07:00
Curtis Yarvin
2c2a680c57
Introduced +$ notation.
2018-06-01 14:31:10 -07:00
Isaac Visintainer
7484887597
first pass, basic functionality working
2018-06-01 14:24:10 -07:00
Ted Blackman
6fae175bba
WIP trying to get dontjo working
2018-05-31 17:14:39 -07:00
Curtis Yarvin
ddb0fc22f4
Chapter names for everyone.
2018-05-28 23:42:16 -07:00
Curtis Yarvin
3c3130c37d
Chapters with stub names.
2018-05-28 22:21:44 -07:00
Curtis Yarvin
bcd76e4caa
More renaming.
2018-05-27 13:01:04 -07:00
Curtis Yarvin
a29b22357d
Some renaming and stuff.
2018-05-27 12:15:15 -07:00
Curtis Yarvin
a26105370b
Old help totally cleaned out.
2018-05-24 15:39:56 -07:00
Curtis Yarvin
d15578859b
Badly done.
2018-05-20 13:23:01 -07:00
Curtis Yarvin
7caa1f86e1
Eliminate chapters in +coil.
2018-05-16 14:51:20 -07:00
Anthony Arroyo
4bfbfa418f
source new circle to inbox in collections app
2018-05-16 10:20:28 -07:00
Fang
e362b4b1c8
Merge in userspace constitution work.
2018-05-14 19:59:34 +02:00
Anthony Arroyo
bfdbf00c30
collections now sends invites to whitelist
2018-05-11 14:18:20 -07:00