github
/
acme4j
mirror of https://github.com/shred/acme4j
1
0
Fork 0
Code Issues Releases Wiki Activity
888 Commits
4 Branches
43 Tags
3.9 MiB
Commit Graph

888 Commits (1dc3c7ad64d453a8ed2002aff9cb982db8f36de1)

Author SHA1 Message Date
Richard Körber c83df44eed Expire resource directory cache. 
A long term AcmeClient instance could miss changes to the directory,
so the cache is invalidated after 1 hour.
 2016-01-09 17:23:05 +01:00
Richard Körber 06ccd6f2e1 Add a rate limit exception 2015-12-26 18:20:57 +01:00
Richard Körber fa31a1cf94 Parse dates, use Date instead of String 2015-12-26 18:15:05 +01:00
Richard Körber 74750a9f88 Add a RFC3339 parser 2015-12-26 18:00:07 +01:00
Richard Körber 78ccec7d1d Make the challenge selectable 2015-12-26 16:21:10 +01:00
Richard Körber 7b6af21cd1 Make CertificateUtils.createTlsSniCertificate more useful for TLS-SNI challenge 2015-12-26 12:40:37 +01:00
Richard Körber 5e699df6c1 [maven-release-plugin] prepare for next development iteration 2015-12-25 14:51:27 +01:00
Richard Körber 4414abb1d2 [maven-release-plugin] prepare release v0.1 2015-12-25 14:51:27 +01:00
Richard Körber 0f6c1a8abd Prepare first release at Maven Central 2015-12-25 14:50:10 +01:00
Richard Körber a5eb3263fe Prepare first beta release 2015-12-24 16:31:37 +01:00
Richard Körber fefc71b21f Use GenericTokenChallenge for unknown challenge types with token 2015-12-24 16:30:51 +01:00
Richard Körber 9b458fb2b6 Add a GenericTokenChallenge. Remove boilerplate code. 2015-12-24 16:29:35 +01:00
Richard Körber ade0207d6d Clean out challenge API 2015-12-24 16:28:57 +01:00
Richard Körber 0f56583c18 Add ProofOfPossession challenge 2015-12-24 16:24:34 +01:00
Richard Körber 8ada797df3 Use 'Terms of Service' 2015-12-24 16:14:26 +01:00
Richard Körber 34c7950c75 Use PublicJsonWebKey instead of JsonWebKey 2015-12-24 16:13:16 +01:00
Richard Körber f87dba266f ClaimBuilder also returns a Map representation 2015-12-24 16:12:35 +01:00
Richard Körber 7f69a14e2a Remove MAC-based recovery. 
It is going to be removed from spec.
https://github.com/letsencrypt/boulder/issues/433
 2015-12-22 23:34:21 +01:00
Richard Körber 0e7da2a1d0 Add TLS-SNI challenge 2015-12-22 23:34:16 +01:00
Richard Körber 37dcb1f64b Fix copy&paste error 2015-12-22 23:30:22 +01:00
Richard Körber 381f4a6e46 Postpone MAC based recovery 
Currently, Let's Encrypt does not support either of the account recovery mechanisms anyways.
 2015-12-22 00:15:24 +01:00
Richard Körber 2898642ebf Do not remove location data from Registration on modify 2015-12-21 23:34:17 +01:00
Richard Körber 26c81e3890 Changes to README 2015-12-21 23:34:04 +01:00
Richard Körber b00114ad88 Add contact-based recovery 2015-12-21 01:32:30 +01:00
Richard Körber 8168e6efc7 Extract Status enum. Make Authorization use it. 2015-12-21 00:28:39 +01:00
Richard Körber 41dabd0cfd Add updateAuthorization() method to get the current authorization state 2015-12-21 00:10:03 +01:00
Richard Körber 8b0f266455 Rename updateAccount to modifyAccount 
Reserve the term "update" for updating DTOs to the current server state
 2015-12-20 23:24:45 +01:00
Richard Körber 7d9d851046 Make DTOs and Challenges serializable 2015-12-20 22:46:50 +01:00
Richard Körber 5b5500d373 Show challenge type value in javadoc 2015-12-20 22:46:34 +01:00
Richard Körber 46daaa8cfd Check parameters and types 
Test for null pointers and invalid parameters.
Check if json content matches challenge type.
Enforce PublicKey when no private key instance should be used.
 2015-12-20 22:46:34 +01:00
Richard Körber 06a600fec1 Registration contact is an URI now 2015-12-20 22:46:34 +01:00
Richard Körber 3d49f8d094 Review AcmeExceptions 2015-12-20 22:46:34 +01:00
Richard Körber ac2af16950 Check connection state 2015-12-20 22:46:34 +01:00
Richard Körber 90f5476d13 Improved dialogs. Automatic handling of agreement document. 
There is no need for a hardcoded agreement URI any more, as the link provided by the server is used.
There is a dialog for accepting the agreement now. It (should) also handle errors due to updated T&C.
The challenge dialog is more specific now.
 2015-12-20 22:46:34 +01:00
Richard Körber 1d34b07b6d Add a special exception type for 'unauthorized' errors 2015-12-20 22:46:34 +01:00
Richard Körber 19ce2328ea Add a method to read a X509Certificate 2015-12-20 22:45:58 +01:00
Richard Körber 9e93327818 Add support for certificate revocation 2015-12-20 13:09:10 +01:00
Richard Körber 6b1797c453 Remove account parameter where not used 2015-12-20 12:39:44 +01:00
Richard Körber f4cd15da65 Constructor for creating a Registration with a location URI 2015-12-20 12:21:20 +01:00
Richard Körber db927300e9 Add method to restore a Challenge 2015-12-20 12:18:24 +01:00
Richard Körber c97392236d Use Replay-Nonce header from directory request 
If there is a Replay-Nonce on the first GET request on the directory resource,
use it. It saves us a HEAD request before the first POST request.
 2015-12-19 17:35:53 +01:00
Richard Körber 1fe04c69ef Point out current beta state of Lets Encrypt 2015-12-19 16:50:44 +01:00
Richard Körber 1e1056d692 DnsChallenge: return digest for TXT record 2015-12-19 16:38:32 +01:00
Richard Körber becab450d8 Fix connection error 2015-12-19 14:46:50 +01:00
Richard Körber 9bcd5a2dd4 Add full documentation 2015-12-19 14:06:09 +01:00
Richard Körber afaf286a49 Lets Encrypt SSLSocketFactory is a singleton 2015-12-18 00:34:19 +01:00
Richard Körber dba96d0531 Fix broken javadocs, again... 2015-12-18 00:32:09 +01:00
Richard Körber 251e5af317 Add unit tests for AbstractAcmeClient 2015-12-18 00:31:55 +01:00
Richard Körber 4c02421114 Some minor ACME compliance fixes 2015-12-18 00:29:59 +01:00
Richard Körber 97d0856a04 Log HTTP headers in debug mode 2015-12-18 00:29:33 +01:00