ansible

Commit Graph

Author	SHA1	Message	Date
Felix Fontein	4551965af1	ACME modules: bump test container version (#61192 ) * Fix root cert path. * Bump testing container version. * Improve check (needed due to letsencrypt/pebble#257).	5 years ago
Felix Fontein	8b68feb67e	acme_certificate: allow to download alternate certificate chains (#56334 ) * Improve link handling. * Also fetch alternate certificate chains. * Add retrieve_all_alternates option. * Simplify code. * Forgot when condition. * Add tests for retrieve_all_alternates. * Fixes. * Moved utility function for link parsing to module_utils. * Fix grammar.	5 years ago
Felix Fontein	c50a75a41e	acme_: new test container, tests for IP certificates (#57530 ) Bump container version. * Use new URLs. * Add IP certificate tests. * Disable IPv6 IP from IP certificate. Background: in CI, the ACME test container apparently has no IPv6 support. Without IPv6 support, Pebble can't connect to validate, and thus validation fails.	6 years ago
Felix Fontein	960d99a785	ACME: new helper module for ACME challenges which need TLS certs (#43756 ) * Added helper module for generating ACME challenge certificates. * Soft-fail on missing cryptography. Also check version. * Adding integration test. * Move acme_challenge_cert_helper from web_infrastructure to crypto/acme. * Adjusting to draft-05. * The cryptography branch has already been merged.	6 years ago
Felix Fontein	cfba02bc3b	Allowing to force account URI. (#44282 )	6 years ago
Felix Fontein	d8d366ef37	ACME: using new acme-test-container (#44095 ) * Using new acme-test-container image. * Add test for cleaning account contacts.	6 years ago
Felix Fontein	aef16ee195	ACME: use Cryptography (if a new enough version is available) instead of OpenSSL (#42170 ) * Collecting PEM -> DER conversions. * Using cryptography instead of OpenSSL binary in some situations. * Moving key-to-disk writing for key content to parse_account_key. * Rename parse_account_key -> parse_key. * Move OpenSSL specific code for key parsing and request signing into global functions. * Also using cryptography for key parsing and request signing. * Remove assert statements. * Fixing handling of key contents for cryptography code path. * Allow to disable the use of cryptography. * Updating documentation. * 1.5 seems to work as well (earlier versions don't have EC sign function). Making Python 2.x adjustments. * Changing option to select_crypto_backend. * Python 2.6 compatibility. * Trying to test both backends separately for acme_account. * Also testing both backends separately for acme_certificate and acme_certificate_revoke. * Adding changelog entry which informs about select_crypto_backend option in case autodetect fails. * Fixing YAML.	6 years ago
Felix Fontein	7b7709ae75	ACME: support for TLS-ALPN-01 (#42158 ) * Added support for TLS-ALPN-01 verification. * Unrelated commit to re-trigger tests. * Added test for TLS-ALPN-01. * Try to remove to_bytes in the hope that binary data survives in Python 2. * Using Base64 encoding for TLS-ALPN-01 value.	6 years ago
Felix Fontein	d4c16f51be	New acme_* integration test using ACME test docker container (#41626 ) * Using ACME test container for acme_account integration test. * Removing dependency on setup_openssl. Waiting for controller and Pebble. * More tinkering. * Reducing number of tries. * One more try. * Another try. * Added acme_certificate tests. * Removed double key. * Added tests for acme_certificate_revoke. * Making task names more meaningful (during certificate generation). * Using newer test container which integrates letsencrypt/pebble#137. Adding test for revoking certificate by its private key. * Using new version of Pebble which limits the random auth delay. * Simplifying certificates for revocation tests. * Reworking acme_certificate tests (there are now more, but they are faster). * Test whether account_key_content works. * Preparing TLS-ALPN-01 support. * Using official Ansible image of testing container on quay.io. * Bumping version. * Bumping version of test container to 1.1.0. * Adjusting to new CI group names. * Pass ACME simulator IP as playbook variable. * Let test plugin wait for controller and CA endpoints to become active. * Refactor common setup parts of tests to setup_acme. * _ -> dummy * Moving common obtain-cert.yml to setup_acme.	6 years ago

9 Commits (54906a68fe9a6c7369ccc018e49f8a9c4a248484)