aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Let validator know about c2s_dhfileEvgeniy Khramtsov2017-11-161-1/+1
|
* Fix select_type race on plugin_initChristophe Romain2017-11-151-15/+15
|
* Cleanup pubsub subscriptions quering, fix pep caseChristophe Romain2017-11-155-154/+117
|
* Improve ACME descriptionEvgeniy Khramtsov2017-11-151-3/+4
|
* Improve some error log messagesEvgeniy Khramtsov2017-11-152-5/+18
|
* Fix mod_mam reloadingEvgeniy Khramtsov2017-11-151-1/+1
|
* Avoid badarg error when running get-deps before ./configure has created ↵nosnilmot2017-11-151-3/+7
| | | | src/ejabberd.app (#2103)
* Makefile.in: Fix "make clean && make"Holger Weiss2017-11-151-1/+1
|
* Merge branch 'lets_encrypt_acme_support' of ↵Evgeniy Khramtsov2017-11-159-14/+1874
|\ | | | | | | | | | | | | | | git://github.com/angelhof/ejabberd into angelhof-lets_encrypt_acme_support Conflicts: rebar.config src/ejabberd_pkix.erl
| * Explain what is needed for the acme configuration and other small changesKonstantinos Kallas2017-11-145-38/+72
| | | | | | | | | | | | | | 1. Add a request handler in ejabberd_http and explain how to configure the http listener so that the challenges can be solved. 2. Make acme configuration optional by providing defaults in ejabberd_acme. 3. Save the CA that the account has been created in so that it creates a new account when connecting to a new CA. 4. Small spec change in acme configuration.
| * Configuration file changesKonstantinos Kallas2017-11-111-10/+14
| | | | | | | | Explain the acme configuration options
| * Bug FixKonstantinos Kallas2017-11-021-1/+1
| | | | | | | | | | | | The dictionary returned after the directory call contains a meta key whose value is a JSON dictionary. This is now taken care so that only bitstring values are kept as resource URIs
| * Fix version of jose libraryKonstantinos Kallas2017-09-061-1/+1
| |
| * Solve Travis build xref problemKonstantinos Kallas2017-09-062-6/+20
| | | | | | | | | | Travis build failed on xref because some functions that I used did not exist in OTP versions 17.5, 18.3 Those functions are: ets:take/2, lists:join/2, erlang:timestamp/0.
| * Remove some unused variable warnings, replace lists:join with string joinKonstantinos Kallas2017-08-253-20/+9
| |
| * More whitespace changesKonstantinos Kallas2017-08-221-37/+37
| |
| * Whitespace changeKonstantinos Kallas2017-08-221-25/+25
| |
| * Remove debugging scriptKonstantinos Kallas2017-08-221-15/+0
| |
| * Merge remote-tracking branch 'upstream/master' into lets_encrypt_acme_supportKonstantinos Kallas2017-08-222-2/+3
| |\
| * | Show SANs in list_CertificatesKonstantinos Kallas2017-08-221-9/+37
| | |
| * | Acquire certificates for all subdomains of a host and include them in SANKonstantinos Kallas2017-08-221-10/+42
| | |
| * | List the possible ca_urls in example config fileKonstantinos Kallas2017-08-221-1/+6
| | |
| * | Clean run_acme testcaseKonstantinos Kallas2017-08-221-7/+13
| | |
| * | Remove partial RSA key supportKonstantinos Kallas2017-08-222-22/+0
| | |
| * | Add certfile when acquiredKonstantinos Kallas2017-08-221-0/+1
| | |
| * | Remove some debugging INFO_MSGsKonstantinos Kallas2017-08-192-7/+2
| | |
| * | Delete a development acme moduleKonstantinos Kallas2017-08-193-608/+2
| | |
| * | Merge remote-tracking branch 'upstream/master'Konstantinos Kallas2017-08-1965-813/+2414
| |\ \
| * \ \ Merge remove_account_option branchKonstantinos Kallas2017-08-192-26/+23
| |\ \ \
| | * | | Remove the new account option from get certificate. There is no reason for ↵Konstantinos Kallas2017-08-112-27/+24
| | | | | | | | | | | | | | | | | | | | having this
| * | | | Cleanup some comments:Konstantinos Kallas2017-08-191-5/+0
| | | | |
| * | | | Add acme certificates for all configured hosts in ejabberd_pkixKonstantinos Kallas2017-08-192-9/+39
| | | | |
| * | | | Add behaviour ejabberd_config in ejabberd_acme in order to validate the configKonstantinos Kallas2017-08-191-4/+36
| | | | |
| * | | | Change some specsKonstantinos Kallas2017-08-121-8/+8
| | | | |
| * | | | Add throws when http requests failKonstantinos Kallas2017-08-121-4/+4
| | | | | | | | | | | | | | | | | | | | This was done in order to show the unexpected code in the top level
| * | | | Add support to revoke a certificate by providing the pemKonstantinos Kallas2017-08-122-16/+50
| | | | | | | | | | | | | | | | | | | | This is important so that a user can revoke a certificate that is not acquired or logged from our acme client
| * | | | Move the ca_url to the config fileKonstantinos Kallas2017-08-123-15/+29
| |/ / /
| * | | Format expired certificates differently in list_certificatesKonstantinos Kallas2017-08-111-10/+23
| | | |
| * | | Renew certificate now renews all saved certificates that are close to expireKonstantinos Kallas2017-08-101-32/+15
| | | | | | | | | | | | | | | | Before this commit renew_certificate only checked the hosts in the config file and renewd the certificates for those. However the user can request certificates apart from the hosts in the config file so he should be able to also renew them.
| * | | Revoke Certificate: Jose Private KeyKonstantinos Kallas2017-08-101-6/+39
| | | | | | | | | | | | | | | | Instead of signing the jose object with the account private key, it now signs the object using the certificate private key. This is useful in case the user wants to revoke a old certificate whose account key doesn't exist anymore.
| * | | Support getting certificates for domains not specified in the configuration fileKonstantinos Kallas2017-08-103-28/+52
| | | |
| * | | Remove some debugging functionsKonstantinos Kallas2017-08-081-211/+1
| | | |
| * | | Implement renew_certificate commandKonstantinos Kallas2017-08-082-42/+153
| | | | | | | | | | | | | | | | This command renews the certificates for all domains that already have a certificate that has expired or is close to expiring. It is meant to be run automatically more often than the renewal process because if the certificates are valid nothing happens
| * | | Try catch when formatting certificatesKonstantinos Kallas2017-08-081-21/+40
| | | |
| * | | Change certificate notAfter to 90 daysKonstantinos Kallas2017-08-081-5/+2
| | | | | | | | | | | | | | | | As stated in Let's Encrypt FAQ: https://letsencrypt.org/docs/faq/
| * | | Improve return format of get_certificates commandKonstantinos Kallas2017-08-022-8/+42
| | | |
| * | | Implement verbose list_certificates optionKonstantinos Kallas2017-08-021-11/+20
| | | |
| * | | Finish revoke_certificate and add specsKonstantinos Kallas2017-07-292-143/+219
| | | | | | | | | | | | | | | | | | | | 1. Add a try catch in the final revoke_certificate function 2. Also delete the certificate from persistent memory when it is done revoked
| * | | Support certificate revocationKonstantinos Kallas2017-07-273-7/+80
| | | |
| * | | Sync fork with upstreamKonstantinos Kallas2017-07-2646-1401/+1157
| |\ \ \