6 Commits (351f60b0e176d03893a8309260b0c48794c7e4b7)

Author	SHA1	Message	Date
Felix Fontein	16d4d2dba9	acme_certificate: add select_chain option (#60710) ... * Add select_alternate_chain option. * Fix docs. * Allow to match via subject key identifier and authority key identifier. * Simplify test. * Add comments. * Add tests. * Fix bugs. * Also consider main chain when searching for alternatives. * Bump version_added. * Rename select_alternate_chain -> select_chain.	5 years ago
Felix Fontein	039123ec6b	acme_account_info: retrieve orders (#59697) ... * Add retrieve_orders option. * Run acme_certificate tests also for acme_account_info; use acme_account_info to get list of orders. * Doing some quoting. * Improve returned description.	5 years ago
Felix Fontein	8b68feb67e	acme_certificate: allow to download alternate certificate chains (#56334) ... * Improve link handling. * Also fetch alternate certificate chains. * Add retrieve_all_alternates option. * Simplify code. * Forgot when condition. * Add tests for retrieve_all_alternates. * Fixes. * Moved utility function for link parsing to module_utils. * Fix grammar.	5 years ago
Felix Fontein	c50a75a41e	acme_*: new test container, tests for IP certificates (#57530) ... * Bump container version. * Use new URLs. * Add IP certificate tests. * Disable IPv6 IP from IP certificate. Background: in CI, the ACME test container apparently has no IPv6 support. Without IPv6 support, Pebble can't connect to validate, and thus validation fails.	5 years ago
Felix Fontein	d8d366ef37	ACME: using new acme-test-container (#44095) ... * Using new acme-test-container image. * Add test for cleaning account contacts.	6 years ago
Felix Fontein	aef16ee195	ACME: use Cryptography (if a new enough version is available) instead of OpenSSL (#42170) ... * Collecting PEM -> DER conversions. * Using cryptography instead of OpenSSL binary in some situations. * Moving key-to-disk writing for key content to parse_account_key. * Rename parse_account_key -> parse_key. * Move OpenSSL specific code for key parsing and request signing into global functions. * Also using cryptography for key parsing and request signing. * Remove assert statements. * Fixing handling of key contents for cryptography code path. * Allow to disable the use of cryptography. * Updating documentation. * 1.5 seems to work as well (earlier versions don't have EC sign function). Making Python 2.x adjustments. * Changing option to select_crypto_backend. * Python 2.6 compatibility. * Trying to test both backends separately for acme_account. * Also testing both backends separately for acme_certificate and acme_certificate_revoke. * Adding changelog entry which informs about select_crypto_backend option in case autodetect fails. * Fixing YAML.	6 years ago