Richard Körber
|
bb30ea8feb
|
[maven-release-plugin] prepare release v2.3
|
2018-09-03 22:45:26 +02:00 |
Richard Körber
|
d0d93b855a
|
Support the acme-star extension
|
2018-08-22 18:39:13 +02:00 |
Richard Körber
|
f609a797cb
|
Checkstyle fixes
|
2018-08-22 18:14:40 +02:00 |
Richard Körber
|
a8047704aa
|
Fix syntax error in test JSON
|
2018-08-22 17:48:00 +02:00 |
Richard Körber
|
bd485c23ef
|
Fix deprecated warnings
|
2018-08-22 17:47:47 +02:00 |
Richard Körber
|
95614e73c5
|
Changes for latest draft-ietf-acme-tls-alpn
|
2018-08-22 17:44:47 +02:00 |
Richard Körber
|
1cffd3428d
|
Support the acme-ip draft
|
2018-08-20 23:36:38 +02:00 |
Richard Körber
|
9e4ba4fcb1
|
Allow to pre-authorize and order Identifier objects
|
2018-08-20 23:09:41 +02:00 |
Richard Körber
|
3689ab5e5e
|
Support more identifier types
|
2018-08-20 23:07:07 +02:00 |
Richard Körber
|
57b050c868
|
Remove unused imports
|
2018-08-20 22:56:22 +02:00 |
Dmitriy Dumanskiy
|
ff57bc224d
|
IDE warnings fixes
|
2018-08-09 19:00:37 +02:00 |
Alexandr Dolgov
|
2370749e16
|
Log HEAD request and its headers
|
2018-08-01 09:56:27 +05:00 |
Dmitriy Dumanskiy
|
cbc202ea14
|
#65 Added AccountBuilder.addEmail method
|
2018-07-29 17:34:08 +03:00 |
Richard Körber
|
a0e481eedc
|
Also validate contacts on EditableAccount
|
2018-07-29 15:45:25 +02:00 |
Richard Körber
|
f0000b9824
|
Change account key roll-over as described in draft 13
|
2018-07-29 12:51:10 +02:00 |
Richard Körber
|
0de4181848
|
[maven-release-plugin] prepare for next development iteration
|
2018-07-15 15:26:38 +02:00 |
Richard Körber
|
c1dee451e7
|
[maven-release-plugin] prepare release v2.2
|
2018-07-15 15:26:38 +02:00 |
Richard Körber
|
6be3f5ef4f
|
[maven-release-plugin] prepare for next development iteration
|
2018-04-18 23:25:53 +02:00 |
Richard Körber
|
274cfc9a63
|
[maven-release-plugin] prepare release v2.1
|
2018-04-18 23:25:52 +02:00 |
Richard Körber
|
4d8d951a6b
|
Note that some lists have no specific order
|
2018-04-17 22:48:16 +02:00 |
Richard Körber
|
568438a1f3
|
Add support for tls-alpn-01 challenge
|
2018-04-17 00:35:26 +02:00 |
Richard Körber
|
cd7038a7fa
|
Send kid instead of jwk when revoking a cert (fixes issue #62)
|
2018-04-16 19:40:34 +02:00 |
Richard Körber
|
ee291da06b
|
Note that wildcard domains cannot be pre-authorized
|
2018-04-16 19:40:13 +02:00 |
Richard Körber
|
7a1136ec2a
|
Use GenericProvider without ClassLoader
|
2018-03-27 22:17:27 +02:00 |
Richard Körber
|
aa04ade9bb
|
Document a missing Authorization state
|
2018-03-27 22:12:16 +02:00 |
Richard Körber
|
efb0b9d2f8
|
Document change of terms of service
|
2018-03-21 23:14:23 +01:00 |
Richard Körber
|
3f901e9e18
|
Strip empty lines from downloaded cert chains
This fixes the "insufficient data" issue on IBMs crypto implementation.
|
2018-03-21 23:14:08 +01:00 |
Richard Körber
|
2ac4e7b7fb
|
Restore "Do not send authorization with challenge"
Also set Pebble to strict mode.
This reverts commit cdab2b8bd0 .
|
2018-03-18 13:55:59 +01:00 |
Richard Körber
|
3cd74220dd
|
Restore syntax highlighting in documentation
|
2018-03-18 13:42:51 +01:00 |
Richard Körber
|
7093fe7e92
|
Add JSR305 annotations
Also fix FindBugs errors about possible null pointer dereferences.
Null-aware languages like Kotlin can now enjoy null-checks.
|
2018-03-18 13:25:25 +01:00 |
Richard Körber
|
4de82be5f3
|
JSON getters never return null
|
2018-03-17 18:18:44 +01:00 |
Richard Körber
|
a8d3f86f85
|
[maven-release-plugin] prepare for next development iteration
|
2018-03-13 23:40:55 +01:00 |
Richard Körber
|
14484b9fc9
|
[maven-release-plugin] prepare release v2.0
|
2018-03-13 23:40:54 +01:00 |
Richard Körber
|
7cfcbc99b6
|
Handle empty JSON responses
|
2018-03-13 23:15:19 +01:00 |
Richard Körber
|
44a036a858
|
Review status documentation
|
2018-03-10 15:22:23 +01:00 |
Richard Körber
|
323788dfdb
|
SpotBugs fix
|
2018-03-10 15:21:53 +01:00 |
Richard Körber
|
49677d8dbc
|
Add support for Proxy connections
|
2018-03-06 22:11:05 +01:00 |
Richard Körber
|
b4374dbf6d
|
Add support for wildcard flag
|
2018-03-06 22:10:55 +01:00 |
Richard Körber
|
09abb23599
|
Add SpotBugs and fix reported issues
|
2018-03-06 22:10:18 +01:00 |
Richard Körber
|
69a23e7bf6
|
Avoid unnecessary de/encoding of nonces
|
2018-03-06 22:10:08 +01:00 |
Richard Körber
|
1972d52bed
|
Review documentation, update to ACME v2
|
2018-02-21 20:04:59 +01:00 |
Richard Körber
|
dadaf2493f
|
Separate Login from Session
This involves a lot of refactoring and some API changes. However, it allows to clean up some parts of the code that I always considered ugly.
|
2018-02-21 20:01:51 +01:00 |
Richard Körber
|
a111187245
|
Relax HTTP status handling
|
2018-02-21 19:59:01 +01:00 |
Richard Körber
|
0d42089318
|
Return nonce header
|
2018-02-21 19:58:50 +01:00 |
Richard Körber
|
b690e0ab45
|
Session contains account location instead of abstract key identifier
|
2018-02-21 19:56:59 +01:00 |
Richard Körber
|
431a5cf313
|
Update dependencies
|
2018-02-12 15:29:26 +01:00 |
Richard Körber
|
137c2c7dd0
|
Remove tls-sni-02 challenge
|
2018-01-23 18:03:55 +01:00 |
Richard Körber
|
472f1497db
|
Change challenge errors to error
|
2018-01-20 13:19:30 +01:00 |
Robert Kästel
|
f42e783760
|
Remove code that replaces account key kid with external account binding
kid after the external account binding process is done.
Relevant discussion on IETF ACME mailing list: https://mailarchive.ietf.org/arch/search/?email_list=acme&gbt=1&index=_j_xfYp9rlLeAtOWtSuQ-UtX3k0
|
2018-01-16 11:24:03 +01:00 |
Richard Körber
|
f37b14b55c
|
Add test for a missing branch
|
2018-01-14 14:42:09 +01:00 |
Richard Körber
|
e528cad215
|
Minor code cleanup
|
2018-01-14 14:41:44 +01:00 |
Richard Körber
|
1eb56ed8d6
|
Move generic challenge generation to AbstractAcmeProvider
|
2018-01-14 14:18:39 +01:00 |
Richard Körber
|
3f8299c004
|
Rename respond method to prepareResponse
|
2018-01-14 14:16:29 +01:00 |
Richard Körber
|
8923e35d21
|
Challenge constructor requires JSON data
|
2018-01-14 14:16:20 +01:00 |
Richard Körber
|
252d886b3f
|
Refactor ACME resource classes
A new AcmeJsonResource takes care of fetching and keeping the resource state.
A lot of boilerplate code could be removed that way.
|
2018-01-14 14:07:25 +01:00 |
Richard Körber
|
816f0825c0
|
Get a JSON Value as Optional
This enables further filtering and mapping of a JSON Value.
|
2018-01-14 13:22:49 +01:00 |
Richard Körber
|
9a483fd4d1
|
Remove authorize method from challenges
|
2018-01-14 13:15:56 +01:00 |
Richard Körber
|
70d089c94d
|
Use Pebble minica in truststore
|
2018-01-13 13:51:50 +01:00 |
Richard Körber
|
ae7e0da342
|
Bump to version 2.0, to emphasize the relation to ACMEv2
|
2018-01-07 22:49:52 +01:00 |
Richard Körber
|
92fff2379e
|
Set the LetsEncrypt ACMEv2 staging server URL
|
2018-01-05 07:40:05 +01:00 |
Richard Körber
|
a7ea703e93
|
Remove unnecessary type from challenge response
|
2017-12-28 00:07:58 +01:00 |
Richard Körber
|
22975dc844
|
Support problem title. Enhance returned problem message.
|
2017-12-22 17:33:55 +01:00 |
Richard Körber
|
8c26cf869d
|
CamelCase JSON keys
|
2017-12-16 11:43:37 +01:00 |
Richard Körber
|
2ab4038bd5
|
Support external-account-required metadata
|
2017-12-14 00:06:03 +01:00 |
Richard Körber
|
173aa14e40
|
Set default value for optional JSON keys
|
2017-12-14 00:05:59 +01:00 |
Richard Körber
|
2ceffa42e3
|
Retry on bad nonce error
|
2017-12-14 00:05:46 +01:00 |
Richard Körber
|
2b61478f13
|
Remove oob-01 challenge
It is not part of the ACME specs any more
|
2017-12-14 00:03:13 +01:00 |
Richard Körber
|
4c4cf5b5cf
|
Connect to Pebble via https
|
2017-12-06 22:55:00 +01:00 |
Richard Körber
|
827e1277ef
|
Use an OrderBuilder for collecting order parameters
|
2017-12-05 22:26:28 +01:00 |
Richard Körber
|
e0673c93bd
|
Implement new order finalization
Replaces the "CSR first" new-order flow, see ietf-wg-acme/acme#342
|
2017-12-05 22:26:27 +01:00 |
Richard Körber
|
e386994fe5
|
Fix detail key in sub-problem
|
2017-12-01 00:09:15 +01:00 |
Richard Körber
|
d6fb218a27
|
Add support for sub-problems
|
2017-11-29 01:28:14 +01:00 |
Richard Körber
|
1eedc755ea
|
Remove Authorization scope
|
2017-11-29 00:36:59 +01:00 |
Richard Körber
|
ed543bc0b7
|
Sonar fixes
|
2017-11-04 13:26:41 +01:00 |
Richard Körber
|
529eb13e3f
|
Don't fail if version.properties is unreadable
Fixes issue #42
|
2017-11-04 13:18:52 +01:00 |
Richard Körber
|
e9a330b3a2
|
Avoid URI to URL conversion
|
2017-11-04 11:40:20 +01:00 |
Richard Körber
|
42541ac299
|
Accept Content-Type header with charset parameter
|
2017-11-02 23:19:31 +01:00 |
Richard Körber
|
a32c7bac03
|
Do not accept contacts with multiple email addresses
|
2017-11-01 17:42:09 +01:00 |
Richard Körber
|
f36294eabd
|
Rename internal util package in client module
Avoids a split package in Java 9.
|
2017-10-07 18:08:16 +02:00 |
Richard Körber
|
2a5075dd5a
|
Fix unit tests for Java 9
|
2017-10-07 18:08:04 +02:00 |
Richard Körber
|
148c98d673
|
Remove local truststore for Let's Encrypt servers
|
2017-09-20 20:58:52 +02:00 |
Richard Körber
|
e15abb0ca0
|
Remove Pebble workarounds
|
2017-08-29 00:04:47 +02:00 |
Richard Körber
|
b708b2f199
|
Build json string in order of entry appearance
|
2017-08-17 22:39:30 +02:00 |
Richard Körber
|
f434fd70b4
|
Fix a style warning
|
2017-08-17 22:39:19 +02:00 |
Richard Körber
|
2eb59ef364
|
Do not use compact JWS serialization
|
2017-08-17 22:38:56 +02:00 |
Richard Körber
|
3ce832d83e
|
Review URI/URL use
|
2017-08-13 14:18:44 +02:00 |
Richard Körber
|
a30caaa664
|
Challenge.trigger can be re-invoked
|
2017-08-13 14:18:43 +02:00 |
Richard Körber
|
f3735e6ec1
|
Add a way to revoke a certificate without account key pair
|
2017-08-13 14:18:43 +02:00 |
Richard Körber
|
3881669e22
|
Fix setting the account's key identifier
|
2017-08-13 14:13:56 +02:00 |
Richard Körber
|
7c88a2cdac
|
Rename to AcmeRateLimitedException
|
2017-08-13 14:08:37 +02:00 |
Richard Körber
|
64abe3d96e
|
Do not expect a response body on existing accounts
|
2017-07-30 15:59:07 +02:00 |
Richard Körber
|
dfb40edc12
|
Challenge can have multiple errors
|
2017-07-30 15:57:58 +02:00 |
Richard Körber
|
dcdf240804
|
Add support for only-return-existing flag
|
2017-07-30 15:57:44 +02:00 |
Richard Körber
|
d43b16bb2c
|
Remove pebble workaround for kid field
|
2017-05-31 19:31:40 +02:00 |
Richard Körber
|
f852cdaecd
|
Remove pebble workaround for uri field
|
2017-05-31 19:31:08 +02:00 |
Richard Körber
|
e8790e8446
|
Rename Registration resource to Account
|
2017-05-03 13:42:38 +02:00 |
Richard Körber
|
7e58017347
|
Do not send the token on challenge response
|
2017-05-03 13:42:34 +02:00 |
Richard Körber
|
8e1563a410
|
Remove new-reg workaround
|
2017-05-03 13:42:22 +02:00 |
Richard Körber
|
cdb2362892
|
Fix challenge fields
- use "url" instead of "uri"
- add support for "error" field
|
2017-05-03 13:42:17 +02:00 |
Richard Körber
|
7b6582ad78
|
revoke-cert sends JWK header
|
2017-05-03 13:42:09 +02:00 |