Will Rouesnel
0969cd76be
Augment parseX509Output to also work with libressl
...
LibreSSL uses a different output separated and semantics, which broke
the X509 parser. With some slight modifications both can be supported.
2023-06-01 00:27:43 +10:00
Will Rouesnel
c664e864ce
Add storing for Client CA certificates in the database
...
Add initial support for managing Client Certificate Authority public
certificates as certificate objects in the database. The new provider
type 'clientca' is defined to implement this.
2023-05-25 00:21:32 +10:00
Will Rouesnel
b19a272403
Fix OpenSSL data parsing
...
OpenSSL data parsing could be confused when parsing certificates which
have Country/Org and other parameters in the subject line.
This is fixed by writing a more robust parser of the output lines, and
using that to do parsing which now correctly handles this case.
2023-05-24 23:59:38 +10:00
Jamie Curnow
124cb18e17
Fix renewing certs because of permission errors
2023-03-22 13:40:36 +10:00
Jamie Curnow
77eb618758
Fix pip installs running as non-root user
2023-03-22 09:41:59 +10:00
Jamie Curnow
2a07445005
Refactor configuration
...
- No longer use config npm package
- Prefer config from env vars, though still has support for config file
- No longer writes a config file for database config
- Writes keys to a new file in /data folder
- Removes a lot of cruft and improves config understanding
2023-03-21 16:53:39 +10:00
Jamie Curnow
dad3e1da7c
Adds support to run processes as a user/group, defined
...
with PUID and PGID environment variables
- Detects if image is run with a user in docker command and fails if so
- Adds s6 prepare scripts for adding a 'npmuser'
- Split up and refactor the s6 prepare scripts
- Runs nginx and backend node as 'npmuser'
- Changes ownership of files required at startup
2023-03-20 16:56:52 +10:00
Jamie Curnow
fec36834f7
- Updated objection, knex, liquidjs, signale and sqlite3 packages
...
- Changes for objection migration
- Moved common access template code to an include
- Fixed access rules configuration generation
2023-03-17 14:18:51 +10:00
plantysnake
8dee139810
Fix linter issues
2022-11-21 01:46:42 +03:00
plantysnake
6349cb6094
Fix cerbot plugin installation issues
2022-11-18 15:06:19 +03:00
Jamie Curnow
fd30cfe98b
Fix linting
2022-11-15 07:54:48 +10:00
Jamie Curnow
6f281fef42
Workaround for cloudflare plugin install ( #2381 )
2022-11-15 07:48:57 +10:00
Ivan Kristianto
366fcf0bed
Fix nginx/certificates search query
2022-02-12 12:46:06 +07:00
jc21
d7e0ae0fa0
Merge pull request #1701 from jc21/escape-credential-backslashes
...
Correctly escape backslashes in dns plugin credentials
2022-01-02 15:29:31 +10:00
chaptergy
c803ec7e26
Adds delay after reloading nginx before requesting ssl certificate using http challenge
2021-12-30 13:21:21 +01:00
chaptergy
9dd5644183
Correctly escape backslashes in dns plugin credentials
2021-12-29 16:30:49 +01:00
jc21
d45f39aae3
Merge pull request #1538 from jc21/adds-http-challenge-test
...
Adds buttons to test availability of server from public internet
2021-11-10 09:15:26 +10:00
jc21
a517e80236
Merge pull request #1567 from jc21/removes-renew-delay
...
Removes random delay when renewing certificates with the renew now button
2021-11-08 12:26:34 +10:00
Julian Reinhardt
cf4d1f73fa
Uses letsencrypt config file everywhere
2021-11-06 22:31:13 +01:00
Julian Reinhardt
5f29f6b039
Removes random delay when renewing certificates with the renew now button
2021-11-05 14:20:12 +01:00
Julian Reinhardt
38ec0f9f95
Adds logs to backend when testing http challenge
2021-11-04 11:16:23 +01:00
Julian Reinhardt
9efe6cfb39
Minor fixes
2021-10-31 13:41:29 +01:00
Julian Reinhardt
c86a1a50bd
Fixes formatting
2021-10-31 00:28:43 +02:00
Julian Reinhardt
c55476b196
Adds buttons to test availability of server from public internet
2021-10-31 00:19:18 +02:00
chaptergy
4e3c7749af
Removes sorting of domain names when creating a certificate
2021-10-12 16:18:11 +02:00
chaptergy
6d8c4218f1
Replaces fixed certbot plugin version with optional version requirements
2021-10-07 17:13:48 +02:00
Rahul Somasundaram
ca6561bf6c
updated debug statement
2021-09-01 11:50:51 +05:30
Rahul Somasundaram
273a81471d
Revert "updated debug statement"
...
This reverts commit 8b07a67133
2021-09-01 11:47:47 +05:30
Rahul Somasundaram
8b07a67133
updated debug statement
2021-09-01 11:46:10 +05:30
Rahul Somasundaram
32089ea272
deferenced symlinks and downloaded the certs from live directory
2021-09-01 11:41:27 +05:30
Rahul Somasundaram
658acd147c
updated certificate path
2021-09-01 07:38:11 +05:30
Rahul Somasundaram
f302ff71c9
corrected message
2021-08-30 16:36:13 +05:30
Rahul Somasundaram
8944609b63
fixed linting
2021-08-24 07:28:17 +05:30
Rahul Somasundaram
be87c45f27
thrown exception for non LE certificates
2021-08-24 06:01:08 +05:30
Rahul Somasundaram
7b67ef3015
fixed linting
2021-08-23 09:17:42 +05:30
Rahul Somasundaram
e5a3b5ee2f
added endpoint to download certificates
2021-08-23 09:03:24 +05:30
chaptergy
83c5c55f32
Fixes creation of certificates using the http challenge
2021-08-06 10:56:06 +02:00
Jamie Curnow
842cff130b
Re-add missing certbot force renewal flag
...
and cleaned up this horrible file a bit
2021-07-01 09:57:26 +10:00
chaptergy
3f1415dad1
Use the certbot command from the PATH variable
2021-06-18 09:22:42 +02:00
chaptergy
41ef35f0d0
Fixes duckdns certbot
2021-06-07 08:27:01 +02:00
Jamie Curnow
717105f243
Revert installing certbot. This is handled by base image jc21/nginx-full now
...
Update path of certbot, and use the pip instead
2021-05-07 13:49:31 +10:00
Héctor Pelayo
d636502eaa
Add DuckDNS certbot plugin
...
Uses https://github.com/infinityofspace/certbot_dns_duckdns certbot plugin to implement DuckDNS DNS challenge in order to obtain Wildcard certificates.
Requires that the user inserts his duckDNS token in "Credentials File Content" input box.
2021-04-26 20:25:24 +02:00
chaptergy
6af13d4f40
Removes explicit privkeytype check and adds passphrase error
2020-12-14 12:08:39 +01:00
chaptergy
1518ecd1e9
Adds autoremove of failed certificate creations in DB
2020-11-06 12:29:38 +01:00
chaptergy
cb014027bb
Makes sure credentials folder exist every time before saving credentials
2020-11-04 19:31:40 +01:00
chaptergy
60a40197f1
Always install additional dependencies for dns plugins
2020-11-03 21:59:18 +01:00
jc21
96f401cba6
Merge pull request #664 from chaptergy/fixes-expiring-hosts-renewal
...
Adds certbot plugin installation check on startup
2020-10-19 08:50:44 +10:00
MarceloLagos
190cd2d6bb
Update certificate.js
2020-10-17 23:46:18 -06:00
MarceloLagos
7ba58bdbd3
Update certificate.js
2020-10-17 23:27:12 -06:00
chaptergy
08ab62108f
Fixes eslint errors
2020-10-17 12:54:38 +02:00
