ansible

Commit Graph

Author	SHA1	Message	Date
Felix Fontein	eeb6ec1097	acme_certficate: allow to write files to CWD (#54754 ) * Allow to write files to CWD. * Add changelog. (cherry picked from commit `e422f18898`)	7 years ago
Felix Fontein	d8a75faa53	Reference RFC 8555 instead of latest draft. (#53674 ) (#53836 ) (cherry picked from commit `a043570579`)	7 years ago
Felix Fontein	0ae615de98	ACME: fix bug introduced in #49266 , work around problem with Pebble (#49407 ) (cherry picked from commit `34c57b4c42`)	7 years ago
Felix Fontein	1deb2300a4	ACME: improve error handling (#49266 ) * Improve error handling: when parse_json_result is False, still return the error message. * Remove content body from info dict. * Add changelog. (cherry picked from commit `b842b1b97e`)	7 years ago
Felix Fontein	080aa35c5b	ACME: add support for POST-as-GET if GET fails with 405. (#44988 ) * Add support for POST-as-GET if GET fails with 405. * Bumping ACME test container version to 1.4. This includes letsencrypt/pebble#162 and letsencrypt/pebble#168. * Also use POST-as-GET for account data retrival. This is not yet supported by any ACME server (see letsencrypt/pebble#171), so we fall back to a regular empty update if a 'malformedRequest' error is returned. * Using newest ACME test container image. Includes letsencrypt/pebble#171 and letsencrypt/pebble#172, which make Pebble behave closer to the current specs. * Remove workaround for old Pebble version. * Add changelog entry. * First try POST-as-GET, then fall back to unauthenticated GET. (cherry picked from commit `92d9569bc9`)	7 years ago
Felix Fontein	e8a6bdc17a	Refactoring GET request handling. (#45051 ) (cherry picked from commit `26edeb7cce`)	7 years ago
Felix Fontein	fadf8a2d09	ACME: improve documentation (#44691 ) * Override description for account_key_src and account_key_content to also mention private_key_. Convert generic OpenSSL/cryptography remark from description to note. This avoids the whole description list to be sorted alphabetically, which will be done by plugin_docs.py in case description is mentioned in both module fragment and module itself. * Moving more notes to the notes: section. * Uniformization of first paragraph. Mainly mention ACME supporting CAs, and only then mention Let's Encrypt as one of them. * Adjusting to current drafts. * Adjusting to updated drafts. * Harmonizing short module descriptions. * Referencing helper modules. * Move general Let's Encrypt remark to doc fragment. * Changing some Let's Encrypt references to more generic statements.	7 years ago
Felix Fontein	a99cfc1814	New acme_account_facts module. (#44301 )	7 years ago
Felix Fontein	cfba02bc3b	Allowing to force account URI. (#44282 )	7 years ago
Felix Fontein	aef16ee195	ACME: use Cryptography (if a new enough version is available) instead of OpenSSL (#42170 ) * Collecting PEM -> DER conversions. * Using cryptography instead of OpenSSL binary in some situations. * Moving key-to-disk writing for key content to parse_account_key. * Rename parse_account_key -> parse_key. * Move OpenSSL specific code for key parsing and request signing into global functions. * Also using cryptography for key parsing and request signing. * Remove assert statements. * Fixing handling of key contents for cryptography code path. * Allow to disable the use of cryptography. * Updating documentation. * 1.5 seems to work as well (earlier versions don't have EC sign function). Making Python 2.x adjustments. * Changing option to select_crypto_backend. * Python 2.6 compatibility. * Trying to test both backends separately for acme_account. * Also testing both backends separately for acme_certificate and acme_certificate_revoke. * Adding changelog entry which informs about select_crypto_backend option in case autodetect fails. * Fixing YAML.	7 years ago
Felix Fontein	6b6c017dd1	ACME modules: documentation improvements (#42165 ) * Always using current draft when referring to ACME v2. * Adding URL for ACME v1 protocol. * Improve cross-referencing of acme_* modules. * General improvements. * Fixing syntax error.	8 years ago
Felix Fontein	348f87d3f4	New module: acme_certificate_revoke (#40995 ) * First version (without revocation checking). * Adding check mode and OCSP revocation verification. * Fixing ACME v1 behavior. * Fixed superfluous space. * Fixing links. * Working around linter complaints. * Added docstring. * More defensive. * Disabling check mode for now. * Simplifying module by no longer checking OCSP, and removing check mode vestiges.	8 years ago
Felix Fontein	e294426b07	Rename letsencrypt module utils / document fragment to acme. (#40697 )	8 years ago

13 Commits (eeb6ec109710937789cd668e98eef2ec540c9f6c)