Commit Graph

384 Commits (feature/mock)

Author SHA1 Message Date
Richard Körber bb30ea8feb
[maven-release-plugin] prepare release v2.3 2018-09-03 22:45:26 +02:00
Richard Körber d0d93b855a
Support the acme-star extension 2018-08-22 18:39:13 +02:00
Richard Körber f609a797cb
Checkstyle fixes 2018-08-22 18:14:40 +02:00
Richard Körber a8047704aa
Fix syntax error in test JSON 2018-08-22 17:48:00 +02:00
Richard Körber bd485c23ef
Fix deprecated warnings 2018-08-22 17:47:47 +02:00
Richard Körber 95614e73c5
Changes for latest draft-ietf-acme-tls-alpn 2018-08-22 17:44:47 +02:00
Richard Körber 1cffd3428d
Support the acme-ip draft 2018-08-20 23:36:38 +02:00
Richard Körber 9e4ba4fcb1
Allow to pre-authorize and order Identifier objects 2018-08-20 23:09:41 +02:00
Richard Körber 3689ab5e5e
Support more identifier types 2018-08-20 23:07:07 +02:00
Richard Körber 57b050c868
Remove unused imports 2018-08-20 22:56:22 +02:00
Dmitriy Dumanskiy ff57bc224d IDE warnings fixes 2018-08-09 19:00:37 +02:00
Alexandr Dolgov 2370749e16 Log HEAD request and its headers 2018-08-01 09:56:27 +05:00
Dmitriy Dumanskiy cbc202ea14 #65 Added AccountBuilder.addEmail method 2018-07-29 17:34:08 +03:00
Richard Körber a0e481eedc
Also validate contacts on EditableAccount 2018-07-29 15:45:25 +02:00
Richard Körber f0000b9824
Change account key roll-over as described in draft 13 2018-07-29 12:51:10 +02:00
Richard Körber 0de4181848
[maven-release-plugin] prepare for next development iteration 2018-07-15 15:26:38 +02:00
Richard Körber c1dee451e7
[maven-release-plugin] prepare release v2.2 2018-07-15 15:26:38 +02:00
Richard Körber 6be3f5ef4f
[maven-release-plugin] prepare for next development iteration 2018-04-18 23:25:53 +02:00
Richard Körber 274cfc9a63
[maven-release-plugin] prepare release v2.1 2018-04-18 23:25:52 +02:00
Richard Körber 4d8d951a6b
Note that some lists have no specific order 2018-04-17 22:48:16 +02:00
Richard Körber 568438a1f3
Add support for tls-alpn-01 challenge 2018-04-17 00:35:26 +02:00
Richard Körber cd7038a7fa
Send kid instead of jwk when revoking a cert (fixes issue #62) 2018-04-16 19:40:34 +02:00
Richard Körber ee291da06b
Note that wildcard domains cannot be pre-authorized 2018-04-16 19:40:13 +02:00
Richard Körber 7a1136ec2a
Use GenericProvider without ClassLoader 2018-03-27 22:17:27 +02:00
Richard Körber aa04ade9bb
Document a missing Authorization state 2018-03-27 22:12:16 +02:00
Richard Körber efb0b9d2f8
Document change of terms of service 2018-03-21 23:14:23 +01:00
Richard Körber 3f901e9e18
Strip empty lines from downloaded cert chains
This fixes the "insufficient data" issue on IBMs crypto implementation.
2018-03-21 23:14:08 +01:00
Richard Körber 2ac4e7b7fb
Restore "Do not send authorization with challenge"
Also set Pebble to strict mode.

This reverts commit cdab2b8bd0.
2018-03-18 13:55:59 +01:00
Richard Körber 3cd74220dd
Restore syntax highlighting in documentation 2018-03-18 13:42:51 +01:00
Richard Körber 7093fe7e92
Add JSR305 annotations
Also fix FindBugs errors about possible null pointer dereferences.

Null-aware languages like Kotlin can now enjoy null-checks.
2018-03-18 13:25:25 +01:00
Richard Körber 4de82be5f3
JSON getters never return null 2018-03-17 18:18:44 +01:00
Richard Körber a8d3f86f85
[maven-release-plugin] prepare for next development iteration 2018-03-13 23:40:55 +01:00
Richard Körber 14484b9fc9
[maven-release-plugin] prepare release v2.0 2018-03-13 23:40:54 +01:00
Richard Körber 7cfcbc99b6
Handle empty JSON responses 2018-03-13 23:15:19 +01:00
Richard Körber 44a036a858
Review status documentation 2018-03-10 15:22:23 +01:00
Richard Körber 323788dfdb
SpotBugs fix 2018-03-10 15:21:53 +01:00
Richard Körber 49677d8dbc
Add support for Proxy connections 2018-03-06 22:11:05 +01:00
Richard Körber b4374dbf6d
Add support for wildcard flag 2018-03-06 22:10:55 +01:00
Richard Körber 09abb23599
Add SpotBugs and fix reported issues 2018-03-06 22:10:18 +01:00
Richard Körber 69a23e7bf6
Avoid unnecessary de/encoding of nonces 2018-03-06 22:10:08 +01:00
Richard Körber 1972d52bed
Review documentation, update to ACME v2 2018-02-21 20:04:59 +01:00
Richard Körber dadaf2493f
Separate Login from Session
This involves a lot of refactoring and some API changes. However, it allows to clean up some parts of the code that I always considered ugly.
2018-02-21 20:01:51 +01:00
Richard Körber a111187245
Relax HTTP status handling 2018-02-21 19:59:01 +01:00
Richard Körber 0d42089318
Return nonce header 2018-02-21 19:58:50 +01:00
Richard Körber b690e0ab45
Session contains account location instead of abstract key identifier 2018-02-21 19:56:59 +01:00
Richard Körber 431a5cf313
Update dependencies 2018-02-12 15:29:26 +01:00
Richard Körber 137c2c7dd0
Remove tls-sni-02 challenge 2018-01-23 18:03:55 +01:00
Richard Körber 472f1497db
Change challenge errors to error 2018-01-20 13:19:30 +01:00
Robert Kästel f42e783760 Remove code that replaces account key kid with external account binding
kid after the external account binding process is done.

Relevant discussion on IETF ACME mailing list: https://mailarchive.ietf.org/arch/search/?email_list=acme&gbt=1&index=_j_xfYp9rlLeAtOWtSuQ-UtX3k0
2018-01-16 11:24:03 +01:00
Richard Körber f37b14b55c
Add test for a missing branch 2018-01-14 14:42:09 +01:00
Richard Körber e528cad215
Minor code cleanup 2018-01-14 14:41:44 +01:00
Richard Körber 1eb56ed8d6
Move generic challenge generation to AbstractAcmeProvider 2018-01-14 14:18:39 +01:00
Richard Körber 3f8299c004
Rename respond method to prepareResponse 2018-01-14 14:16:29 +01:00
Richard Körber 8923e35d21
Challenge constructor requires JSON data 2018-01-14 14:16:20 +01:00
Richard Körber 252d886b3f
Refactor ACME resource classes
A new AcmeJsonResource takes care of fetching and keeping the resource state.
A lot of boilerplate code could be removed that way.
2018-01-14 14:07:25 +01:00
Richard Körber 816f0825c0
Get a JSON Value as Optional
This enables further filtering and mapping of a JSON Value.
2018-01-14 13:22:49 +01:00
Richard Körber 9a483fd4d1
Remove authorize method from challenges 2018-01-14 13:15:56 +01:00
Richard Körber 70d089c94d
Use Pebble minica in truststore 2018-01-13 13:51:50 +01:00
Richard Körber ae7e0da342
Bump to version 2.0, to emphasize the relation to ACMEv2 2018-01-07 22:49:52 +01:00
Richard Körber 92fff2379e
Set the LetsEncrypt ACMEv2 staging server URL 2018-01-05 07:40:05 +01:00
Richard Körber a7ea703e93
Remove unnecessary type from challenge response 2017-12-28 00:07:58 +01:00
Richard Körber 22975dc844
Support problem title. Enhance returned problem message. 2017-12-22 17:33:55 +01:00
Richard Körber 8c26cf869d
CamelCase JSON keys 2017-12-16 11:43:37 +01:00
Richard Körber 2ab4038bd5
Support external-account-required metadata 2017-12-14 00:06:03 +01:00
Richard Körber 173aa14e40
Set default value for optional JSON keys 2017-12-14 00:05:59 +01:00
Richard Körber 2ceffa42e3
Retry on bad nonce error 2017-12-14 00:05:46 +01:00
Richard Körber 2b61478f13
Remove oob-01 challenge
It is not part of the ACME specs any more
2017-12-14 00:03:13 +01:00
Richard Körber 4c4cf5b5cf
Connect to Pebble via https 2017-12-06 22:55:00 +01:00
Richard Körber 827e1277ef
Use an OrderBuilder for collecting order parameters 2017-12-05 22:26:28 +01:00
Richard Körber e0673c93bd
Implement new order finalization
Replaces the "CSR first" new-order flow, see ietf-wg-acme/acme#342
2017-12-05 22:26:27 +01:00
Richard Körber e386994fe5 Fix detail key in sub-problem 2017-12-01 00:09:15 +01:00
Richard Körber d6fb218a27 Add support for sub-problems 2017-11-29 01:28:14 +01:00
Richard Körber 1eedc755ea Remove Authorization scope 2017-11-29 00:36:59 +01:00
Richard Körber ed543bc0b7 Sonar fixes 2017-11-04 13:26:41 +01:00
Richard Körber 529eb13e3f Don't fail if version.properties is unreadable
Fixes issue #42
2017-11-04 13:18:52 +01:00
Richard Körber e9a330b3a2 Avoid URI to URL conversion 2017-11-04 11:40:20 +01:00
Richard Körber 42541ac299 Accept Content-Type header with charset parameter 2017-11-02 23:19:31 +01:00
Richard Körber a32c7bac03 Do not accept contacts with multiple email addresses 2017-11-01 17:42:09 +01:00
Richard Körber f36294eabd Rename internal util package in client module
Avoids a split package in Java 9.
2017-10-07 18:08:16 +02:00
Richard Körber 2a5075dd5a Fix unit tests for Java 9 2017-10-07 18:08:04 +02:00
Richard Körber 148c98d673 Remove local truststore for Let's Encrypt servers 2017-09-20 20:58:52 +02:00
Richard Körber e15abb0ca0 Remove Pebble workarounds 2017-08-29 00:04:47 +02:00
Richard Körber b708b2f199 Build json string in order of entry appearance 2017-08-17 22:39:30 +02:00
Richard Körber f434fd70b4 Fix a style warning 2017-08-17 22:39:19 +02:00
Richard Körber 2eb59ef364 Do not use compact JWS serialization 2017-08-17 22:38:56 +02:00
Richard Körber 3ce832d83e Review URI/URL use 2017-08-13 14:18:44 +02:00
Richard Körber a30caaa664 Challenge.trigger can be re-invoked 2017-08-13 14:18:43 +02:00
Richard Körber f3735e6ec1 Add a way to revoke a certificate without account key pair 2017-08-13 14:18:43 +02:00
Richard Körber 3881669e22 Fix setting the account's key identifier 2017-08-13 14:13:56 +02:00
Richard Körber 7c88a2cdac Rename to AcmeRateLimitedException 2017-08-13 14:08:37 +02:00
Richard Körber 64abe3d96e Do not expect a response body on existing accounts 2017-07-30 15:59:07 +02:00
Richard Körber dfb40edc12 Challenge can have multiple errors 2017-07-30 15:57:58 +02:00
Richard Körber dcdf240804 Add support for only-return-existing flag 2017-07-30 15:57:44 +02:00
Richard Körber d43b16bb2c Remove pebble workaround for kid field 2017-05-31 19:31:40 +02:00
Richard Körber f852cdaecd Remove pebble workaround for uri field 2017-05-31 19:31:08 +02:00
Richard Körber e8790e8446 Rename Registration resource to Account 2017-05-03 13:42:38 +02:00
Richard Körber 7e58017347 Do not send the token on challenge response 2017-05-03 13:42:34 +02:00
Richard Körber 8e1563a410 Remove new-reg workaround 2017-05-03 13:42:22 +02:00
Richard Körber cdb2362892 Fix challenge fields
- use "url" instead of "uri"
- add support for "error" field
2017-05-03 13:42:17 +02:00
Richard Körber 7b6582ad78 revoke-cert sends JWK header 2017-05-03 13:42:09 +02:00