Improve IPv6 address handling in ocspserve #1187
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
When setting an IPv6 address to listing on via the -address command-line argument for both serve and ocspserve, the latter errors with "listen tcp: address ::1:8889: too many colons in address" unless it is escaped. However, the former uses the net library to process the address and port, which results in the enforced escaping of IPv6 addresses regardless of if the address is already enclosed in square brackets (e.g. [::1]). This changes oscpserve to use the same net library call as serve to provide consistency between the two calls when handling IPv6 addresses.
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #1187 +/- ##
==========================================
+ Coverage 54.72% 54.91% +0.19%
==========================================
Files 77 77
Lines 6668 6668
==========================================
+ Hits 3649 3662 +13
+ Misses 2561 2551 -10
+ Partials 458 455 -3 ☔ View full report in Codecov by Sentry. |
thaJeztah
approved these changes
Nov 22, 2022
|
/cc @nickysemenza (easy review) |
|
thanks! |
SsomsakTH
pushed a commit
to SsomsakTH/cfssl
that referenced
this pull request
Jun 13, 2023
commit e1165bba970713da395f6fbe7ff318ae8a63fb24
Merge: ce41e38e 21c13ab9
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon May 15 09:25:14 2023 -0700
Merge pull request #1300 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.9.0
commit ce41e38ef579f4375baff57ffc816192f3842442
Merge: b2e0b850 7479ed6d
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon May 15 09:25:04 2023 -0700
Merge pull request #1299 from cloudflare/dependabot/go_modules/github.com/stretchr/testify-1.8.2
commit 21c13ab91a1a408559bac83af8989423cc62cfce
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon May 15 03:59:39 2023 +0000
build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.8.0 to 0.9.0.
- [Commits](https://github.com/golang/crypto/compare/v0.8.0...v0.9.0)
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 7479ed6d29ba27e8e26cb4aa270d18c777d07932
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon May 15 03:59:26 2023 +0000
build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.2
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.0 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.0...v1.8.2)
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit b2e0b850df40f0e46d62258a32fcc0eece5f72d7
Merge: 9618eba9 f6cb3e8a
Author: Nicky Semenza <nicky@nickysemenza.com>
Date: Fri May 12 14:09:17 2023 -0700
Merge pull request #1290 from cloudflare/nicky/golang-cross-latest
commit 9618eba9b36427f80fa99e50c7af07a4cd4590ab
Merge: 7bcbc6d8 372ef3d8
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:28:07 2023 -0700
Merge pull request #1295 from cloudflare/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.6
build(deps): bump github.com/google/certificate-transparency-go from 1.1.4 to 1.1.6
commit 372ef3d8c256e7e423c4ddbe6b5650a36520313a
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 17:12:34 2023 +0000
build(deps): bump github.com/google/certificate-transparency-go
Bumps [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) from 1.1.4 to 1.1.6.
- [Release notes](https://github.com/google/certificate-transparency-go/releases)
- [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/certificate-transparency-go/compare/v1.1.4...v1.1.6)
---
updated-dependencies:
- dependency-name: github.com/google/certificate-transparency-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 7bcbc6d879cb8030a83bcc2ff23653ca019f172d
Merge: 0d872f60 04f6d3e0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:11:55 2023 -0700
Merge pull request #1297 from cloudflare/dependabot/go_modules/github.com/go-sql-driver/mysql-1.7.1
build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.1
commit 0d872f6073bcb65fb4c730d9f6b8c61421533c6c
Merge: 11796e14 be9f3a38
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:11:47 2023 -0700
Merge pull request #1298 from cloudflare/dependabot/go_modules/github.com/lib/pq-1.10.9
build(deps): bump github.com/lib/pq from 1.10.1 to 1.10.9
commit 11796e1478655e4f8618ea3d5875b98ed7f48526
Merge: c1cdc1bc bf9636a0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:11:20 2023 -0700
Merge pull request #1291 from ahrtr/bump_zlint_20230512
bump github.com/zmap/zlint/v3 from 3.1.0 to 3.4.1
commit bf9636a01e88945b1b2fbae19b37d37a9b6a30fe
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:34:41 2023 -0700
update lint test for bumped zlint
commit 4a5a64d7e29d14d2aa947cf377ffe166ccf57954
Author: Benjamin Wang <wachao@vmware.com>
Date: Fri May 12 12:58:29 2023 +0800
bump github.com/zmap/zlint/v3 from 3.1.0 to 3.4.1
Signed-off-by: Benjamin Wang <wachao@vmware.com>
commit be9f3a384d4cfe0f00e54431bfb534c2889bb5ad
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 16:07:32 2023 +0000
build(deps): bump github.com/lib/pq from 1.10.1 to 1.10.9
Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.1 to 1.10.9.
- [Release notes](https://github.com/lib/pq/releases)
- [Commits](https://github.com/lib/pq/compare/v1.10.1...v1.10.9)
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 04f6d3e068bdc95b0c7b60911ff6f1760e1703f6
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 16:07:05 2023 +0000
build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.1
Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.6.0 to 1.7.1.
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-sql-driver/mysql/compare/v1.6.0...v1.7.1)
---
updated-dependencies:
- dependency-name: github.com/go-sql-driver/mysql
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
commit c1cdc1bce69d276f492931ee02656c4187c569d6
Merge: 3e4a0601 03a86ea2
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:06:21 2023 -0700
Merge pull request #1296 from cloudflare/dependabot/go_modules/github.com/jmoiron/sqlx-1.3.5
build(deps): bump github.com/jmoiron/sqlx from 1.3.3 to 1.3.5
commit 3e4a06013525875ba40313220aaa0e0f571b528a
Merge: f37a685b e1d17772
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:00:23 2023 -0700
Merge pull request #1293 from cl
8000
oudflare/dependabot/github_actions/docker/build-push-action-4
build(deps): bump docker/build-push-action from 3 to 4
commit f37a685b3e172e9d4f2aa4e5f6622f33afb94375
Merge: 58b12e72 e2461488
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:00:10 2023 -0700
Merge pull request #1294 from cloudflare/dependabot/go_modules/github.com/prometheus/client_golang-1.15.1
build(deps): bump github.com/prometheus/client_golang from 1.13.0 to 1.15.1
commit 03a86ea2cddbcb84900d462c6ac6597ddd883e95
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 15:45:58 2023 +0000
build(deps): bump github.com/jmoiron/sqlx from 1.3.3 to 1.3.5
Bumps [github.com/jmoiron/sqlx](https://github.com/jmoiron/sqlx) from 1.3.3 to 1.3.5.
- [Commits](https://github.com/jmoiron/sqlx/compare/v1.3.3...v1.3.5)
---
updated-dependencies:
- dependency-name: github.com/jmoiron/sqlx
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 58b12e72ad7adc4429e26cb641eb9e9c7130e21a
Merge: 214bd576 5f34df79
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 08:45:53 2023 -0700
Merge pull request #1289 from cloudflare/nicky/docker-arch
fix architecture for docker builds
commit e2461488a140d0814d702b0a6746c962afc6ff44
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 15:45:42 2023 +0000
build(deps): bump github.com/prometheus/client_golang
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.13.0 to 1.15.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.13.0...v1.15.1)
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
commit e1d1777290871c186e482eaca1955569090c3b05
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 15:45:34 2023 +0000
build(deps): bump docker/build-push-action from 3 to 4
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3 to 4.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v3...v4)
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 214bd576c4dd15fded3e3bba8a0557fce7fac92b
Merge: 88bfcbf5 2b2dd1a7
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 08:45:11 2023 -0700
Merge pull request #1292 from ahrtr/configure_dependabot_20230512
configure dependabot
commit 2b2dd1a75a3972bc1e9b9101f6096088ff4143db
Author: Benjamin Wang <wachao@vmware.com>
Date: Fri May 12 13:03:50 2023 +0800
configure dependabot
Signed-off-by: Benjamin Wang <wachao@vmware.com>
commit f6cb3e8a12c79fd074c0ef514aba1d25e0f73436
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu May 11 12:41:54 2023 -0700
build pacakges with latest go
disabling buildvcs for now, seems to be related to https://github.com/golang/go/issues/51253
commit 88bfcbf5e0fdbb6d8ddbb89e51618b0dc40bd9f5
Merge: 415a59e1 e9d07906
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 2 09:00:41 2023 -0700
Merge pull request #1288 from kbdharun/master
CI: bump actions version, fix node 12 deprecation warning
commit 5f34df79341ba7f3aa734926f7347078a02b2907
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Apr 26 10:35:05 2023 -0700
fix architecture for docker builds
it seems that specifing the platform arg is not needed / incorrect for github actions: https://github.com/docker/build-push-action/issues/668#issuecomment-1213063705
resolves #1287
commit e9d07906f1f5cf1a26fd1ffbe02747a4d7420e3c
Author: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
Date: Fri Apr 28 11:53:13 2023 +0530
go.yml: update actions/checkout to v3, actions/setup-go to v4
commit 76629b56e45ca81359a377d22485ff8f214bf364
Author: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
Date: Fri Apr 28 11:50:46 2023 +0530
snapshot.yml: update actions/checkout to v3
commit 415a59e18b98f13c65ae51baf07df40aa281c782
Merge: 908df500 636ddf8b
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Apr 26 10:35:39 2023 -0700
Merge pull request #1282 from patrickelectric/arm
commit 636ddf8b9e5073cd3ba80897edcbe7d6b11a8838
Author: Patrick José Pereira <patrickelectric@gmail.com>
Date: Tue Apr 18 18:01:34 2023 -0300
goreleaser: Add ARMv7 binaries
Such boards are still available
Signed-off-by: Patrick José Pereira <patrickelectric@gmail.com>
commit 908df500cbbd167cf4ad0e1766e7273a7c607c7c
Merge: b4d0d877 2fab338a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Apr 19 09:07:50 2023 -0700
Merge pull request #1285 from cloudflare/nicky/goreleaser-action-snapshot
commit 2fab338a5e797b5992a8a0cd85f2fe36b58df26b
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 30 09:04:17 2022 -0800
add workflow to run goreleaser snapshot
commit b4d0d877cac528f63db39dfb62d5c96cd3a32a0b
Merge: 6b3f2331 6e8b0316
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 28 08:57:26 2023 -0700
Merge pull request #1277 from cloudflare/nicky/docker
push images to github/docker container registry
commit 6e8b03168b08906a3e39b33f6779dfa9a9dab843
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 21 16:17:15 2023 -0700
push images to github/docker container registry
relates to #1265
commit 6b3f23319ae12650ddc738ef1e4176bd068fe3b2
Merge: a8697b2e cf63dcbf
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 21 16:16:15 2023 -0700
Merge pull request #1267 from shahidhs-ibm/s390x-multiarch
Add support to multi architecture docker image using github action
commit a8697b2ed5173a3c9d9391772c05dc2379482939
Merge: 4db924a7 51a7fa85
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 21 16:11:51 2023 -0700
Merge pull request #1273 from ehershey/patch-2
Make api intro.txt references links
commit 4db924a7ae723f8ae764e6adcae1e9207f1c1727
Merge: c5e40da6 fcde786e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Mar 8 09:56:25 2023 -0800
Merge pull request #1274 from cloudflare/dependabot/go_modules/golang.org/x/net-0.7.0
build(deps): bump golang.org/x/net from 0.2.0 to 0.7.0
commit fcde786e4e604306415c347527839d9179d6ab22
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat Feb 18 03:23:06 2023 +0000
build(deps): bump golang.org/x/net from 0.2.0 to 0.7.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.2.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.2.0...v0.7.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 51a7fa85befb7cf5bf1bf5de84f06a9b44e9da4a
Author: Ernie Hershey <github@ernie.org>
Date: Thu Feb 16 00:56:34 2023 -0500
Make api intro.txt references links
commit cf63dcbff72726324f0370afa8bae0194a5681ad
Author: Shahid <shahid@us.ibm.com>
Date: Tue Feb 7 14:08:43 2023 +0530
Update Dockerfile
Incorporating review comments https://github.com/cloudflare/cfssl/pull/1267#discussion_r1083943730 and https://github.com/cloudflare/cfssl/pull/1267#discussion_r1083963991
commit 8467879cdfaede36ab545bf873deb8497d41f3e5
Author: Shahid <shahid@us.ibm.com>
Date: Tue Feb 7 14:05:24 2023 +0530
Update Makefile
Adding check before using `GOOS` and `GOARCH` variables in `go build` command. Ref. https://github.com/cloudflare/cfssl/pull/1267#discussion_r1083938333
commit b37103e9542a298ff32511a73298216a5e5c856e
Author: Shahid <shahid@us.ibm.com>
Date: Tue Jan 10 19:27:54 2023 +0530
Add support to multi architecture docker image using a github action
commit c5e40da603065e56dbb3c2c443609a855aa7d79c
Merge: 2ac5c8a1 1382f3b0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Dec 8 08:57:09 2022 -0800
Merge pull request #1262 from thaJeztah/remove_go_net
commit 1382f3b0bd966cbf881250af13845a301a97e73a
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Thu Dec 8 02:50:50 2022 +0100
remove use of obsolete golang.org/x/net/context package
This package is an alias for "context", which has been part of
stdlib since go1.7, so should no longer be needed.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 2ac5c8a1c1eadac50649678e9d638b165a61a58f
Merge: 37715e73 fa8441a9
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Dec 6 10:08:57 2022 -0800
Merge pull request #1260 from linux-on-ibm-z/s390x-binary-enablement
Binary enablement for s390x
commit fa8441a97a6f4d400230b7753b60755c256cf0e2
Author: Shahid Shaikh <shahid@us.ibm.com>
Date: Wed Nov 30 03:51:47 2022 -0800
Binary enablement for s390x
commit 37715e73dc6c71533a0c7381348239468b47dcb7
Merge: 123abe0b 39c4590c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Nov 29 08:46:16 2022 -0800
Merge pull request #1259 from sonork/master
Add linux/arm64 Build
commit 123abe0b8fdc0540b96b8f127d2ef73414491084
Merge: a4a432ba 00a28f65
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 23 09:05:34 2022 -0800
Merge pull request #1187 from jonathanio/improve-ocspserve-ipv6-handling
Improve IPv6 address handling in ocspserve
commit 39c4590c8a3a566d8ed437cdb4d118caf2fa6e38
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Wed Nov 23 09:16:30 2022 +0100
add arm64 on all linux binaries
commit a4a432ba1e23ac001fdd90f26b43e7759549441e
Merge: cfd0e9ab 0eecfe20
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Nov 22 09:12:34 2022 -0800
Merge pull request #1257 from thaJeztah/remove_goutils
transport/ca/localca: New(): return error instead of calling os.Exit(1), remove github.com/kisom/goutils/assert
commit c09440215f80f186550982193f92e3d8ff0263bb
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Tue Nov 22 12:13:28 2022 +0100
remove docker socket volume mount
commit 4dd587dbb11450ba27db56af282e14675d06df57
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Tue Nov 22 12:12:04 2022 +0100
remove privileged argument from docker runs
commit 540aeaf9efeb4e26912f87c06c8b97ac3d8fa035
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 13:20:42 2022 +0100
remove external linker in linux builds
commit c383f2add921c88a23f39d292a8336900bea5e44
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 13:16:20 2022 +0100
use cgo only in darwin builds
commit 24b3ec5c2f27d7edebf8dbea5b5955858220c5e4
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 11:13:36 2022 +0100
use gythialy/golang-cross for snapshot builds
commit 188cfa4871a6883c202d500ced4711ad434e2a7d
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 10:08:03 2022 +0100
include linux/arm64 in builds
commit 0eecfe207f46635217e1e543e5638c9e88cad3db
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:41:54 2022 +0100
transport/ca/localca: remove uses of deprecated io/ioutil
Using their replacements instead. Also making use of t.TempDir(),
to let Go's testing take care of cleaning up.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit b069c865435fd29bc93168a6832c3364b17a2147
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:34:12 2022 +0100
transport/ca/localca: remove unused testGenerateKeypair utility
This was added in 56dfed7c82597110116d549dc1c990a5e24d1db7, but never
used.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 5937a3f33738b1be432168d46b8dc818fe141724
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:27:14 2022 +0100
transport/ca/localca: remove uses of github.com/kisom/goutils/assert
This package was the only package using this assertion library. Looking
for a replacement, all packages (except for one) in this repository were
not using an assertion library, so replacing it with standard checks.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 4607acedb3dfc22ea832dcfa1bddfbb5f800d3e6
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:18:23 2022 +0100
transport/ca/localca: New(): return error instead of calling os.Exit(1)
This code was added in 56dfed7c82597110116d549dc1c990a5e24d1db7, but
now has become the only use of github.com/kisom/goutils/assert, which
previously was used in tests, and now is archived (moved to a new module).
There were a couple of issues with this code;
The `assert.NoError` appears to have a bug; it accepts optional arguments,
but those are ignored; https://github.com/kisom/goutils/blob/v1.4.3/assert/assert.go#L90-L99
In this case, it meant that the additional information to describe the
error won't be printed.
Looking at the code (https://github.com/kisom/goutils/blob/v1.4.3/assert/assert.go#L35-L45),
it defaults (`GOTRACEBACK` anything other than "crash") using `os.Exit(1)`.
While (from the description), program execution MUST be terminated, there
are some downsides to using `os.Exit` here, as it terminates execution
immediately (which is desirable), but has no way to recover. While users
should NOT use the result in this case, they still may want to catch this
error (without terminating the program as a whole, which may be problematic
if this module is used as part of a service). `os.Exit` also does not execute
pending `defer` statements, which may still be desirable to handle state cleanup.
This patch changes the function to return an error instead, allowing the
caller to handle the error.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit cfd0e9ab2afa2101e9cf7647babf7eec2c3d4829
Merge: c71f9f68 052932c1
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 21 13:44:33 2022 -0800
Merge pull request #1255 from thaJeztah/update_gomod
go.mod: update for go1.18 and update/remove obsolete dependencies
commit c71f9f68dbbb2bdb90ff95db71c05ab94a330a6d
Merge: b553d93a 68b96f84
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 21 13:41:24 2022 -0800
Merge pull request #1258 from thaJeztah/remove_ioutils
chore: remove uses of deprecated io/ioutil
commit 68b96f84a7e2891320491683ce4e28a4591c36fd
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:58:17 2022 +0100
doc: remove mention of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit f277884f6332b9f3c3a2e9b5a467856cb6b930e3
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:58:04 2022 +0100
selfsign: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit f98ae4a6790151daf96162528a07a8756023c85f
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:57:50 2022 +0100
revoke: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 9d4d8c6779a1dc71d3c1678f3420b9e01e99f888
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:57:39 2022 +0100
multiroot: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit df5893e91e4e72e08b0f824ba32b15644d134918
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:57:27 2022 +0100
initca: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 62ebbe3726683f1716a55c92363f7eef043345f9
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:56:29 2022 +0100
csr: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 31652f3d0c5cdea571d94e08123a34e69de1e7c9
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:56:10 2022 +0100
crl: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 77a52e775f073de941b01388a9e7362da5ef1218
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:55:37 2022 +0100
config: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 7c1b3588da2292c39966676b118cb72d3262fea5
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:55:24 2022 +0100
certinfo: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 7025962aaa5975891ca0ef8d317f452d79c41922
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:55:07 2022 +0100
certdb: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit c9e5b44932223adb111e354e2cc00af434228b54
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:54:25 2022 +0100
whitelist: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 052932c167809da1e64de0d7e061e425164fff43
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:33:41 2022 +0100
go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2
adds go module support
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 3eb1f2940731045ef9e94e53582f3f880d7fa3bb
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:18:26 2022 +0100
go.mod: golang.org/x/crypto v0.3.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 706ae75e7314493ef46bd278f6c4faed08f019b1
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:46:44 2022 +0100
go.mod: golang.org/x/net v0.2.0
the golang.org/x projects now tag releases.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 1ddff47e3db73d5374c9c6e822b361153a06d461
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:09:20 2022 +0100
go.mod: github.com/jmhodges/clock v1.2.0
Adds go module support. No code changes in vendored files
full diff: https://github.com/jmhodges/clock/compare/880ee4c33548...v1.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 59534b3c34eeea05e9d0ba22b3543b2312e6af91
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:04:56 2022 +0100
go.mod: github.com/cloudflare/redoctober v0.0.0-20211013234631-6a74ccc611f6
Adds go module support and drops various obsolete dependencies;
full diff: https://github.com/cloudflare/redoctober/compare/99c99a8e7544...6a74ccc611f6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 0cb76cee3fd9110af602ce9b5b930c0a7a056b29
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sat Nov 19 23:59:37 2022 +0100
go.mod: github.com/google/certificate-transparency-go v1.1.4
This version drops a great number of (indirect) dependencies
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 1c31e687d9b60adc5795aa107971584a2ecc2a7a
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:50:14 2022 +0100
remove deprecated golint (golang.org/x/lint)
CI is already using golangci-lint, which should cover whatever
golint was still covering.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit d90536d5434a63ac5e6552745848282619e4f43f
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 14:26:50 2022 +0100
all: gofmt for go1.18 (fixes missing build-tags)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit d7e9e5fab6848ab355aa01049626ea8dd03c260a
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:53:31 2022 +0100
ubiquity: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 8bd4af2b3b90449b45f798a6ffaee31fc21881bc
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:49:48 2022 +0100
transport: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 6a932bb7bf8ce68afc752af67d61804c7cedf739
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:49:30 2022 +0100
scan: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 5b8919c197a03bc3f2651f9ca11fc19c5c22bdd1
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:49:03 2022 +0100
ocsp: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit e7d48f1cd9f17db0ae4bab8e05b5b864bd0d685d
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:48:33 2022 +0100
signer: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit b27c723cccb13f14dc6b3936415bdd7759ab930b
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:47:22 2022 +0100
helpers: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit fc8619eae3f3734998c8dab9fe574dbd16ff1f50
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:47:00 2022 +0100
cmd: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 45225c2f2246b8037f39b5af192f425db9d308ec
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:46:26 2022 +0100
cli: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 6f34ba02802b99dddceccd9685cf764418b206d7
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:45:10 2022 +0100
bundler: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 2bc4f21a8c8e8e559c9969acfd7f7f9b5a2c1c72
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:44:33 2022 +0100
auth: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 941a1cde099d8ad7655d4239eb2e283c58591241
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:44:03 2022 +0100
api: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 28c127eebf13a457da4048e8fa08200aa502c4c3
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sat Nov 19 23:55:03 2022 +0100
go.mod: tidy and vendor with go1.18
go1.17 and older are deprecated and no longer tested in CI
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit b553d93abe2c9749c86b3c375be43770b7c3b17e
Merge: 079aed0a 879b1d38
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 7 10:23:10 2022 -0800
Merge pull request #1254 from thaJeztah/remove_go1.12_support
helpers/derhelpers: remove support for go1.12
commit 879b1d38a56467eccd595812bbf8b2bc71f5d0ea
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 6 02:17:31 2022 +0100
helpers/derhelpers: remove support for go1.12
go1.12 has reached EOL when go1.14 was released in 2020, so it
should be safe to remove now.
Also removing uses of golang.org/x/crypto/ed25519, which is now part of stdlib:
Beginning with Go 1.13, the functionality of this package was moved to the
standard library as crypto/ed25519. This package only acts as a compatibility
wrapper.
This partially reverts e45ead24ff2d3a16f9c662d6f3b787176096049e / 81e54732c78bc0320d4f6061b9d27b441d8ff8f7
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 079aed0a45c58d019740b4de1811e2116eae6866
Merge: d4be5f51 e0c522a3
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 4 09:00:58 2022 -0700
Merge pull request #1249 from cloudflare/nicky/new-db-accessor
add db accessor to get unexpired certs by labels, add DB tests back to CI
commit e0c522a34cb793a4beb7a092112b57a1f913c75a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Oct 3 16:02:44 2022 -0700
add test for GetUnexpiredCertificatesByLabel
commit a9a2c2e4be1a3f087451cf971a79fd76c0febbc8
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Oct 3 15:09:18 2022 -0700
add postgres and mysql tests back to CI
resolves #1238
commit d4488a84e2595902f2b0bf2eaead2d9d3bd5fa83
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Oct 3 13:54:55 2022 -0700
add DB accessor to get unexpired certs by one or more labels
commit d4be5f51fd039a532d63f2bca4c6fb2551dfed58
Merge: 4e654dd0 d9b0432a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 22 08:57:50 2022 -0700
Merge pull request #1245 from sevan/patch-2
commit 4e654dd020506d64966159d2547040c4d72c0b03
Merge: ffddf3ab 97e7ff29
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 22 08:57:42 2022 -0700
Merge pull request #1246 from sevan/patch-3
commit ffddf3ab3da7a094f546aad1a5f5d1fc431047e6
Merge: bba3a201 40209b17
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 22 08:57:32 2022 -0700
Merge pull request #1244 from sevan/patch-1
commit 97e7ff29bc08fcc75006afe5238c17e9be300a1b
Author: Sevan Janiyan <venture37@geeklan.co.uk>
Date: Fri Sep 2 00:19:34 2022 +0100
doc/api/intro.txt: there are 13 endpoints
sorte and document certinfo & revoke endpoints.
commit d9b0432a55b04f9189cd089678b41109fa07c000
Author: Sevan Janiyan <venture37@geeklan.co.uk>
Date: Thu Sep 1 22:59:56 2022 +0100
doc/cmd/multiroot.txt: Add dbconfig to example
multirootca/config was moved to the root of the source directory.
commit 40209b175f798d3e3f282a731ba16de59ee9191b
Author: Sevan Janiyan <venture37@geeklan.co.uk>
Date: Thu Sep 1 22:27:31 2022 +0100
doc/cmd/cfssl.txt: grammar
commit bba3a2015ca4ad91f5b2c61c5876f0ecbfcb39bc
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Aug 26 11:51:10 2022 -0700
update release make target to use go 1.18
commit cacf1702e49e95c402b3b041a1689965e784dadd
Merge: 81f1f19f 73645931
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:57:20 2022 -0700
Merge pull request #1241 from cloudflare/nicky/bump-crypto
chore: bump golang.org/x/crypto
commit 81f1f19fe6c83482a0f86dc87b1596f62138c246
Merge: a3eea0c1 f1e6594a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:54:57 2022 -0700
Merge pull request #1213 from akamac/patch-1
add health endpoint to docs
commit 73645931e8ffcb9234a8dadba192fa83fc69c506
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:51:19 2022 -0700
chore: bump golang.org/x/crypto
Resolves #1226
commit a3eea0c13300dd9c1d9110c208c2540325d0490b
Merge: 7614d6ca 23c92b07
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:46:18 2022 -0700
Merge pull request #1239 from cloudflare/nicky/add-gh-actions
add github Actions to replace travis
commit 23c92b07d69cac29e39c04b34ae7727759fdf1fc
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Sun Jan 24 10:06:25 2021 -0800
add github Actions to replace travis
Travis hasn't been running for ~ 1 year, this adds some basic Actions tests so that there's some form of CI running
* some certs have expired since, filed #1237 to handle fixing those
* this doesn't quite have feature parity - namely missing the tests that run against the database. (filed #1238)
commit 7614d6cad35dd6d33c8c1fc2e2db5d9ce111e56b
Merge: 04def84a 33661a29
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Aug 19 10:34:05 2022 -0700
Merge pull request #1236 from blotus/use-go-embed
Replace go.rice with go embed
commit 33661a291000b3e21419f9418760304cec018015
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:23:14 2022 +0200
min go version is now 1.16
commit 3d2d3b520937be058f1f1b217f1947555be662da
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:22:51 2022 +0200
update Dockerfiles to use go 1.16
commit 33ed56286f3847949fc3607461c8351ba6bce804
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:14:07 2022 +0200
remove go.rice dependency
commit 9ca1d0a10e7414ea22c23b7b77153a6028c51a8a
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:08:46 2022 +0200
use go:embed
commit 04def84a58a0220d5adec64406b28a8e1ec6f716
Merge: e6502bb7 547d051e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 24 10:41:16 2022 -1000
Merge pull request #1231 from boranx/readme-go1.18-install
docs: add go install
commit 547d051ee560db1e0459b9e24d48934f7fd03b63
Author: boranx <boran.seref@gmail.com>
Date: Tue May 24 12:50:06 2022 +0200
docs: add go install
commit e6502bb7ffe4ee576227c9123a101deda248884c
Merge: 503b4d7b 34ce3de5
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Jan 19 08:37:23 2022 -0800
Merge pull request #1224 from romantomjak/master
commit 34ce3de5d5868b670f5bb224dc3e33875e1d5c7e
Author: Roman Tomjak <6570684+romantomjak@users.noreply.github.com>
Date: Sun Jan 16 12:05:33 2022 +0000
add support for m1 macs
commit f1e6594a1fa8e5d1873733aa84b4d5b0dcafb427
Author: Alexey Miasoedov <alexey.miasoedov@gmail.com>
Date: Thu Dec 2 14:02:28 2021 +0300
add health endpoint to docs
commit 503b4d7bdf090b00d20d67dcc1d129163c86d5c7
Merge: 29ae05fe a8591c38
Author: Watson Ladd <watson@cloudflare.com>
Date: Wed Sep 15 14:32:28 2021 -0700
Merge pull request #1205 from cloudflare/watson/fix-delegation-support
Support for DelegationUsage extension
commit a8591c383218ee9869cbc152ebebf2502895cbdb
Author: Watson Ladd <watson@cloudflare.com>
Date: Tue Sep 14 15:51:13 2021 -0700
Support for DelegationUsage extension
This special cases the DelegationUsage extension, copying it to the
output when signing. It also adds support for a flag
delegation_enabled in certificate specifications. I have manually
confirmed this works.
commit 29ae05fe80e1a9c704ddad7002d90ade7a38cb29
Merge: f4208c64 e582ed4c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Jul 14 15:06:11 2021 -0700
Merge pull request #1189 from cloudflare/nicky/fix-coreos-mod-rename
commit f4208c6426fc943869353262c073f96a062ec0ef
Merge: 1f29b040 19c09ff6
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Jun 17 12:50:52 2021 -0700
Merge pull request #1195 from BowonY/bowon/avoid-select-all
commit 19c09ff6ad5a2a2625647dd993d4b742d8508b01
Author: Bowon Yang <bowon@cloudflare.com>
Date: Thu Jun 17 12:09:53 2021 -0700
pick columns to get revoked/unexpired certs
commit 1f29b040495c08c983351455acc957826d2e597f
Merge: 6dd12c2d 87f86f18
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Jun 7 17:25:49 2021 -0700
Merge pull request #1191 from Rutori/loglevel-multiroot-ca
commit 87f86f189b1fad65d1c08e9cee58e6983e27893f
Author: Rutori <saintmishin@gmail.com>
Date: Mon May 24 17:28:13 2021 +0300
Add loglevel flag for multiroot-ca
commit e582ed4cfff7e0875c8136fe00e790ca29b81450
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 11 15:46:31 2021 -0700
remove -u flag from re
8000
adme, link to releases
commit bea2d3db90fe13a9d4c220a9ef506a82af4b1b9f
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 11 10:32:00 2021 -0700
remove old go versions from travis
commit b2552cabdf56f79fe67618bea930916d7ad47089
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Apr 2 15:38:55 2021 -0700
fix upgrading transitive coreos dependency breakage
The root of the problem is that the latest semver release of https://github.com/google/certificate-transparency-go is from 2018, and the etcd packages have been renamed since. For some reason the readme instructs the usage of `-u` with go get, so this upgrades that to the latest version, along with some other packages that are years out of date.
more context at: https://github.com/etcd-io/etcd/issues/11749
resolves #1142,
resolves #1182
resolves #1183
resolves #1188
commit 00a28f6561cfaebeb8dd59c930137fb327088ae5
Author: Jonathan Wright <jon@than.io>
Date: Sat May 8 18:20:40 2021 +0100
Improve IPv6 address handling in ocspserve
When setting an IPv6 address to listing on via the -address command-line
argument for both serve and ocspserve, the latter errors with "listen
tcp: address ::1:8889: too many colons in address" unless it is escaped.
However, the former uses the net library to process the address and
port, which results in the enforced escaping of IPv6 addresses
regardless of if the address is already enclosed in square brackets
(e.g. [::1]).
This changes oscpserve to use the same net library call as serve to
provide consistency between the two calls when handling IPv6 addresses.
commit 6dd12c2d4cf9471540566d3758ac744a4cdfd943
Merge: 0707dc7c 57d4044c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Mar 26 10:14:02 2021 -0700
Merge pull request #1157 from mayocream/patch-1
commit 0707dc7c7679d3d9b4e53f5b3193844df64b20cc
Merge: b1512a1f ea20c62e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Mar 26 10:12:42 2021 -0700
Merge pull request #1181 from myokoyama28/fix-certadd
commit ea20c62e8f777ba0de98fdf406016c2d71a1d98e
Author: myokoyama28 <bayokoyama43@gmail.com>
Date: Tue Mar 23 15:26:37 2021 +0900
fix lint errors
commit 6b41bfc832dbb3d4a4d226109e128396be7d6e31
Author: myokoyama28 <bayokoyama43@gmail.com>
Date: Tue Mar 23 15:10:58 2021 +0900
fix serve_test.go
commit 9af920455ab53a5b95c9e1fa46f447b45cc568c7
Author: myokoyama28 <bayokoyama43@gmail.com>
Date: Tue Mar 23 13:53:47 2021 +0900
make certadd available
commit b1512a1f2b696488459832cf5ec4ec3d59f4cd1b
Merge: 2215630d 9b27d0d8
Author: Max Nystrom <maxnystrom@users.noreply.github.com>
Date: Wed Feb 24 17:57:51 2021 -0800
Merge pull request #1172 from aklyachkin/master
Support for E attribute (emailAddress) in CSR
commit 2215630d72a34603d912d2715f9c39e8a6c4328c
Merge: c6f04ed9 152fb8b0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Feb 24 12:02:09 2021 -0800
Merge pull request #1175 from chienfuchen32/patch-1
Add http response close in client post function
commit 152fb8b0d7fb5c8d1fa7c29e81d308e008c0eee9
Author: 陳傑夫 <chienfuchen32@gmail.com>
Date: Tue Feb 16 15:26:03 2021 +0800
Add http response close in client post function
commit c6f04ed940e8ab5f52f583ac07cca9849f71a226
Merge: 6eb16407 84e7ff5e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Feb 12 15:29:03 2021 -0800
Merge pull request #1174 from nickysemenza/go-metrics-prometheus
replace deprecated go-metrics with prometheus
commit 84e7ff5e1a6fc982b2627395acc520f192ec18f0
Author: Nicky Semenza <nicky@nickysemenza.com>
Date: Tue Feb 9 17:53:04 2021 -0800
chore(multirootca): replace deprecated go-metrics with prometheus
This _is_ a breaking change.
commit 6eb1640765c7330eb7a67b4556ab5f12c6b9455e
Merge: 9f7129a6 f247e5be
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Feb 8 17:31:41 2021 -0800
Merge pull request #1173 from iguanesolutions/revoke_leak
revoke: fix connection leak
commit f247e5be73a3b69ab9ba011c17c1e1b05a7b8c6a
Author: Benjamin Gustin <benjamin.gustin@iguanesolutions.com>
Date: Mon Feb 8 13:27:32 2021 +0100
revoke: fix connection leak
commit 9b27d0d80ebfdab86f3b54d64f194e726818d236
Author: aklyachkin <aklyachkin@gmail.com>
Date: Mon Feb 8 13:17:54 2021 +0100
support for E attribute in CSR
commit 9f7129a65ac028f14451258d860bf3efd3e63576
Merge: 57882e0a 5628e979
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Feb 1 08:36:33 2021 -0800
Merge pull request #1163 from akgmartin/master
commit 5628e979a3ac93446abc504656e4e15e2784bdef
Merge: 38b82406 b156a8c1
Author: akgmartin <andy@martin-robson.com>
Date: Fri Jan 29 15:31:43 2021 -0600
Merge pull request #1 from benbuzbee/benbuz/tests
Fix tests and add OID test
commit b156a8c16c79634bdd2ea6795a1d75a8526b186e
Author: Ben Buzbee <bbuzbee@cloudflare.com>
Date: Fri Jan 29 21:25:54 2021 +0000
Fix tests and add OID test
commit 38b82406acc59d214d4d282d0dcb592a40770f52
Author: Andy Martin <amartin@cloudflare.com>
Date: Thu Dec 31 10:55:56 2020 -0600
Added support for general OID names in CSRs
commit 57882e0acfd6cd873edb826bfcf0505662a56ab0
Merge: 3cc617f2 1c752601
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Sun Jan 24 09:48:42 2021 -0800
Merge pull request #1170 from qinghai5060/fixErrorCheck
fix error check when check signature
commit 1c7526010688af74c36733d69dcccebd0c23c19e
Author: root <root@DESKTOP-HI73GJM.localdomain>
Date: Sun Jan 24 20:22:24 2021 +0800
fix error check when check signature
commit 3cc617f27de99f13068b41960b52a62015616e97
Merge: 23b638f5 7a59a7db
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Jan 12 09:10:30 2021 -0800
Merge pull request #1164 from grongor/dont-use-default-http-client
Allow users to use custom HTTP client
commit 7a59a7dbae656717661d880ecdb35990334cda8a
Author: Jakub Chábek <jakub.chabek@cdn77.com>
Date: Tue Jan 5 12:17:44 2021 +0100
Allow users to use custom HTTP client
commit 23b638f5a9370a5f13fb22f9d7b909f1bc0e0205
Merge: c75db4fe c90849d7
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Dec 22 11:28:16 2020 -0800
Merge pull request #1160 from orangepizza/zlint_upgrade
commit c90849d7dc60036d73fb68f738f29eb54099c39e
Author: abnoeh <abnoeh@mail.com>
Date: Tue Dec 22 16:08:53 2020 +0000
update zlint to v3.0.0
commit c75db4fe0dff203f6291e149e1dbe253db30c18a
Merge: a538700a d103ea14
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Dec 11 13:42:20 2020 -0800
Merge pull request #1156 from mayocream/master
format json indent
commit 57d4044c66be4a8c7c22067db781352ed77644c7
Author: Han Huang <huanghan@corp-ci.com>
Date: Wed Dec 9 17:59:16 2020 +0800
trigger
commit 763faa7f5632a49d4d40eb2c282c33ad352e23a6
Author: 真夜 <35420264+mayocream@users.noreply.github.com>
Date: Wed Dec 9 13:49:43 2020 +0800
fix: cfssl provider support SAN URI
commit d103ea147140377e6179a8fd1a3d27ac3426c81c
Author: Mayo <mayocream39@yahoo.co.jp>
Date: Mon Dec 7 13:45:42 2020 +0800
format json indent
commit a538700acfbab2ae160df7c145207f0c3114e5d3
Merge: aebbc137 9f1ff979
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 23 08:25:44 2020 -0800
Merge pull request #1151 from nagesh4193/master
Add Power Support ppc64le
commit 9f1ff9797cd9d5a64b79dae69b93898365b9c7c9
Author: nagesh4193 <70690392+nagesh4193@users.noreply.github.com>
Date: Mon Nov 23 12:43:41 2020 +0530
Add Power Support ppc64le
commit aebbc137271af51055fb97ea77be67a1868a3d21
Merge: c1bf7b99 f712ad9e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 13 14:46:11 2020 -0800
Merge pull request #1143 from nickysemenza/add-go-1.15
commit c1bf7b99b33c754afc837dc43d4619de162dee5f
Merge: 9ccff9a3 a22fd94a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 13 11:06:09 2020 -0800
Merge pull request #1119 from jbampton/fix-spelling
Fix spelling
commit f712ad9e454aec2d0ec40979fb3375bd71e67a2c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 13 10:00:24 2020 -0800
copy over ca-bundle and int-bundle testdata from cloudflare/cfssl_trust
commit 9ccff9a3f5332b52a6103a3876bdc990be872163
Merge: 816bb927 7f460093
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 9 12:37:41 2020 -0800
Merge pull request #1145 from AshleyPoole/ash/add-health-api-doc
Add documentation for API health endpoint
commit 7f460093583f10da924467345a42f48af6f2438b
Author: Ashley Poole <git@ashleypoole.co.uk>
Date: Sun Nov 8 12:16:12 2020 +0000
Add documentation for API health endpoint
commit 5c037eb7f964ea31e38129ccefcc3039a65a838e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 6 15:56:45 2020 -0800
chore: add go 1.15 to travis
commit 816bb92712c79b67d5eb4bf918ab1d3c67db111b
Merge: e905e919 6152bbbf
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 4 16:19:59 2020 -0800
Merge pull request #1141 from nickysemenza/add-docker-push
add Docker Hub push to release make target
commit 6152bbbf41b60c5a7e204e48389365e5f4b3a0ad
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 4 15:01:25 2020 -0800
add Docker Hub push to release make target
commit e905e919f68e0214990a445928752ece41a86038
Merge: d6ad84ed a0fb6096
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Oct 21 10:35:54 2020 -0700
Merge pull request #1137 from hugoboos/update-zlint
Update dependency zlint to 2.2.1
commit d6ad84ed79e75c6be0dfc7a7e35fd26543df5f2c
Merge: 8fb54138 e8f9337d
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Oct 21 10:31:15 2020 -0700
Merge pull request #1136 from nickysemenza/fix-null-commonname
fix(certdb): allow reading other null columns (part 2 of #1135)
commit e8f9337d2c132653bedd6368b60a1a161a5d278c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 13 15:36:41 2020 -0700
fix(certdb): allow reading other null columns (part 2 of #1135)
This follows up #1135 to properly handle the case when columns written pre-migration have null values.
commit 8fb54138795b4030fb4e6d0183660f71aa4d764d
Merge: d1be3c20 34885de9
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Oct 15 09:42:47 2020 -0700
Merge pull request #1112 from RocketPuppy/patch-1
Document revocation parameter formats
commit a0fb609621624e0a6b41bf649935fb9b24fe1499
Author: Hugo Stijns <hugo@boosboos.net>
Date: Thu Oct 15 15:26:42 2020 +0200
update dependency zlint to 2.2.1
commit d1be3c20dd38c5e1044919090461a6cc9aad5072
Merge: 8e907d36 c7426dff
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 13 15:10:53 2020 -0700
Merge pull request #1135 from nickysemenza/fix-null-commonname
fix selecting rows created before migration introduced in #1126
commit c7426dffe46a00aaceaa0ef191ac56b9bb88df4f
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 13 14:36:51 2020 -0700
fix(certdb): use `sql.NullString` for CertificateRecord.CommonName
Rows inserted before the migration in #1126 will have the `common_name` set to NULL. This fixes selects for those rows.
commit 8e907d36f0663163058b9f9a102bdc471ce40d9a
Merge: 8090bcee 1b44b481
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Sep 25 14:46:16 2020 -0700
Merge pull request #1132 from asayyah/master
Fix race condition in revoke
commit 1b44b481724ef795de3ff08efabf8a7b29078c1d
Author: Ali Sayyah <asayyah@apple.com>
Date: Fri Sep 25 10:55:04 2020 -0700
Fix race condition in revoke
commit 8090bceefe6c9cc3b044197a8341bea2619d00a6
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Sep 25 10:25:11 2020 -0700
feat(authsign): store additional metadata/fields in `certdb` (#1126)
This is a major change in that the included DB migrations *must* be run before the new version of `cfssl` is deployed.
This allows for clients (i.e. https://github.com/cloudflare/certmgr) to send some additional optional fields to `/api/v1/cfssl/authsign` to be stored in `certdb`. It also starts saving SANs, common name, and NotBefore from the issued certificates so that they can be queried without having to parse the PEM.
commit 046b174bc41a3d0d6e5c56c6e62783c461ac5c00
Merge: ca392c0f beeced86
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 17 15:20:26 2020 -0700
Merge pull request #1129 from mitalirawat/mitali/SECENG-8092
Allowing CertificateRequest to take CRL url as input which can then be used on a cert
commit beeced861039dcb4f2f378ed9efcb8ac71e766e4
Author: Mitali Rawat <mitali@cloudflare.com>
Date: Wed Sep 16 13:37:58 2020 -0700
Allowing CSR to take CRL url as input which can then be used on a certificate
commit ca392c0f5e00b59ca8a5e1f5863c757495e7b08a
Merge: efd6a76c ff9470e2
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Sep 16 14:56:07 2020 -0700
Merge pull request #1100 from gzzchh/patch-1
typo fix of json
commit efd6a76c0b801ebf1baf1e198a986d20fa95a44b
Merge: 2916a1fa 1fb9b902
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Sep 16 09:08:16 2020 -0700
Merge pull request #1128 from huiyifyj/fix-typo
Fix typo and go fmt this file
commit 1fb9b902d2323457031618a3ba50a75139680f0f
Author: huiyifyj <jxfengyijie@gmail.com>
Date: Wed Sep 16 11:51:38 2020 +0800
Fix typo and go fmt this file
commit a22fd94ab951d23c1f84195403ad443e14e22e6a
Author: John Bampton <jbampton@users.noreply.github.com>
Date: Sat Jul 4 09:39:24 2020 +1000
Fix spelling
commit 2916a1fa6bf37b6d7a672a9be7e734871e08039c
Merge: 6b49beae d3846318
Author: Ryan Carter <eiginn@users.noreply.github.com>
Date: Wed Jun 10 16:32:06 2020 -0700
Merge pull request #1111 from cpu/cpu-temp-fix-bundle-test
bundler: temporarily remove `leafRSA3072` testcases.
commit 34885de9fe6d332f5aad675d582f3a1822a81e9d
Author: Daniel Wilson-Thomas <RocketPuppy@users.noreply.github.com>
Date: Wed May 27 12:54:31 2020 -0400
Document revocation parameter formats
commit d38463181f7363e3d4c4b046a031d0f4df4269db
Author: Daniel McCarney <daniel@binaryparadox.net>
Date: Tue May 26 18:46:56 2020 -0400
bundler: temporarily remove `leafRSA3072` testcases.
The `leafRSA3072` test file, (`bundler/testdata/cfssl-leaf-rsa3072.pem`)
expired and breaks tests. A proper fix would be to regenerate this test
file but in the meantime removing the testcases fixes CI.
commit ff9470e2fbfe5a79d00088f88e67ea0b2b2c59d2
Author: CA_GA_64 <xjdzch@126.com>
Date: Wed Apr 22 22:47:38 2020 +0800
typo fix of json
commit 6b49beae21ff90a09aea3901741ef02b1057ee65
Author: DarkEdges <nirving.darkedges@darkedges.com>
Date: Fri Mar 27 04:30:38 2020 +1100
add copy_extensions configuration to local signer to allow (#1082)
* Added ability to copy Extensions from CSR
* Added Profile to determine if the Signer should
copy the extensions provided in the CSR across.
* Added config test
Co-authored-by: Nicholas Irving <nirving@darkedges.com>
commit f30ae6a1f0bacda4972528f0c5e70141cb658344
Author: Sofía Celi <claucece@users.noreply.github.com>
Date: Thu Mar 26 11:27:25 2020 -0500
Add go 1.14 to the CI (#1092)
* Update mod
* Include go 1.14 to CI
* Update go to 1.14 in dockerfiles
commit abef926615f4d1d3afb7c3e6573158551ad7dd54
Author: Daniel McCarney <daniel@binaryparadox.net>
Date: Tue Mar 24 18:52:41 2020 -0400
local/signer: use zmap/zlint v2.0.0, add filtering. (#1080)
This updates the CFSSL local signer ZLint pre-issuance linting
integration to use v2.0.0.
The existing signing profile configuration field "ignored_lints" is
joined by a new field "ignored_lint_sources". This relies on features in
the new 2.0.0 release and is useful for CAs that know certain classes of
ZLint lints are never applicable (e.g. CABF EV guidelines, ETSI ESI,
etc).
Co-authored-by: Daniel <cpu@letsencrypt.org>
commit 7c8e5017d5eca62b5b635b5ed98daab18b0fca16
Author: Sofía Celi <claucece@users.noreply.github.com>
Date: Mon Mar 23 16:05:07 2020 -0500
Fix 'TestNewMutualTLSServer' test for go1.14 #1075 (#1091)
commit e9f28f7c74bf21d35565721a5eea349d35943398
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Mar 18 09:08:55 2020 -0700
Replace pkg.cfssl.org with 'Packages' tab (#1050)
commit 44db4a7efa5989a423b7cfe452e656706e7a985d
Author: Sven Sauleau <github@sauleau.com>
Date: Wed Mar 18 04:12:00 2020 +0000
Cloud_f_lare (#1070)
commit f1bc990b9d4c86ae0c859ddeaad355036ffeb57a
Author: Thomas <tosie@users.noreply.github.com>
Date: Wed Mar 18 05:11:12 2020 +0100
Updated github.com/lib/pq to v1.3.0 (#1086)
commit e45ead24ff2d3a16f9c662d6f3b787176096049e
Author: Daniel McCarney <daniel@binaryparadox.net>
Date: Tue Mar 17 18:15:04 2020 -0400
deps: update /x/crypto, fix Go 1.13 test breakage. (#1081)
* deps: update /x/crypto to 8b5121be2f68
* helpers/derhelpers: split Go 1.12/1.13 impls.
When using modern `golang.org/x/crypto/ed25519` on Go 1.13 the `x`
library is a small wrapper around the stdlib version. The helper
function needs to match on the stdlib type in this case.
To maintain backwards compat with Go 1.12 the helper code is split by
a build tag. The legacy code can use the `golang.org/x/crypto/ed25519`
import while the new code can use the `crypto/ed25519` import.
Co-authored-by: Daniel <cpu@letsencrypt.org>
commit 10ed8daa8bb427c5ac7d133c1b449476e76c954d
Author: Sofía Celi <claucece@users.noreply.github.com>
Date: Tue Mar 17 16:39:50 2020 -0500
Correctly check for different golang versions #1076 (#1083)
commit 87a2fe70720844802207b55cd96f7fedc5d833ed
Author: Jon Moroney <darakian@gmail.com>
Date: Tue Feb 11 10:39:10 2020 -0800
Ignore EC parameters when parsing private keys
commit 644917271238216c94866f021e2b24ce54555848
Merge: 828c23c2 4468af66
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Tue Jan 21 12:38:48 2020 -0800
Merge pull request #1073 from PeterLincsafe/master
Fix readme still referencing deleted doc file
commit 4468af6609d0b0091c4f6340cbcdde341387e73f
Author: Peter Buijs <peter@lincsafe.com>
Date: Tue Jan 21 13:18:01 2020 +0100
Fix readme still referencing deleted doc file
commit 828c23c22cbca1f7632b9ba85174aaa26e745340
Merge: ebe01990 c7e13aec
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Dec 16 20:41:24 2019 -0800
Merge pull request #1065 from linux-on-ibm-z/test-s390x-pr
Add s390x support
commit c7e13aec684d881e995107198807295de5bef239
Author: Prasanna Kelkar <Prasanna.Kelkar@ibm.com>
Date: Fri Dec 6 10:32:35 2019 +0530
Add support for s390x in travis.yml
commit ebe01990a23a309186790f4f8402eec68028f148
Merge: 358fd07c 69fa54a3
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Nov 13 02:15:33 2019 -0800
Merge pull request #1054 from dsix-work/musl-builds
Build staticly with musl for better compatibility
commit 69fa54a3e275939077528092eb8b8a504d74088e
Author: David Six <david.six@flexential.com>
Date: Mon Nov 11 13:06:08 2019 +0000
Update goreleaser tag to musl version
commit 49924c4a02e6438269a5ef550953333daad898dd
Author: David Six <david.six@flexential.com>
Date: Fri Nov 8 22:22:51 2019 +0000
Build staticly with musl for better compatibility
commit 358fd07c64357b144621d8a700d67fdfbeb80899
Merge: 67aae946 acbed0af
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Nov 6 11:14:45 2019 -0800
Merge pull request #1052 from cloudflare/cbroglie/pkg-deb-rpm
Add make targets for building .deb and .rpm packages
commit acbed0afe20f978880b83aaaaa70132d592c28fe
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Tue Nov 5 22:00:32 2019 -0800
Add make targets for building .deb and .rpm packages
commit 67aae9466f3559ce0ae1c2450336ed84c0a3bb8e
Merge: d9af611a 1bfc9462
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Thu Oct 31 10:14:18 2019 -0700
Merge pull request #966 from andrewheberle/patch-1
Add missing sqlite import
commit d9af611a7824cabde35280a6f2964672650a96e7
Merge: 2318616c ce0e2949
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Thu Oct 31 09:32:35 2019 -0700
Merge pull request #1048 from cloudflare/cbroglie/goreleaser
Support building/releasing binaries with goreleaser
commit ce0e2949afe2b929ca966d6d5010690a75a6ca85
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 19:36:54 2019 -0700
Support building/releasing binaries with goreleaser
Since this project requires cgo, the builds are performed in a
container which includes the MinGW compiler (for Windows) and an OSX
SDK.
commit 2318616c6faa8ced58522e59bb2acaab30b8478d
Merge: 40f4f514 9f1008dd
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 15:11:19 2019 -0700
Merge pull request #1047 from cloudflare/cbroglie/modules
Migrate to Go modules
commit 9f1008ddb886243a959be9c66e048ed4e13be721
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 14:14:28 2019 -0700
Drop the slow macOS build
It takes forever in Travis, and we have enough folks developing on
macOS so any regressions will be caught quickly.
commit ee731906980f0e89d124b8e56384733a1c6ed588
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 12:14:57 2019 -0700
Migrate to Go modules
commit 40f4f514ff4fd6bf6fec99f1b25ec44dd1ad1241
Merge: 1a911ca1 ac360f21
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Oct 28 13:23:25 2019 -0700
Merge pull request #1044 from cloudflare/cbroglie/selfsign
Fix bug causing selfsign to ignore the default profile
commit ac360f21638790fd6fd6cc5fa6b4b18fa79cbe45
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Mon Oct 28 11:31:33 2019 -0700
Fix bug causing selfsign to ignore the default profile
commit 1a911ca1b1d6e899bf97dcfa4a14b38db0d31134
Merge: b1ec8c58 27c56f6c
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Sep 11 15:19:28 2019 -0700
Merge pull request #1030 from ashemedai/master
Fix typo of genkey to gencsr
commit 27c56f6c15cc70d8f44ab6664f681e4b62664c66
Author: Jeroen Ruigrok van der Werven <asmodai@in-nomine.org>
Date: Tue Aug 13 16:27:23 2019 +0200
Fix typo of genkey to gencsr
commit b1ec8c586c2aa3ec3eaf4a622933f169cfa5648b
Merge: d4e85528 df5c37b0
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Aug 7 18:16:37 2019 -0700
Merge pull request #1025 from cpu/cpu-bump-zlint-dep
Gopkg: update zlint/zcrypto to latest.
commit df5c37b0aa5db6a2bed60324f65f2bfc35f8d213
Author: Daniel <cpu@letsencrypt.org>
Date: Wed Aug 7 14:23:19 2019 -0400
review: fix local signer TestLint unit test.
The upstream `zlint` project removed the `w_serial_number_low_entropy`
lint and so the `TestLint` function needed to be updated accordingly.
commit aa3425363ca8eb49da2afe0601d049d6fb2ad929
Merge: db143166 d4e85528
Author: Daniel <cpu@letsencrypt.org>
Date: Wed Aug 7 14:12:47 2019 -0400
Merge remote-tracking branch 'cf/master' into cpu-bump-zlint-dep
commit d4e85528af85aba17223fcb2caf207d57293730a
Merge: 633726f6 0338350c
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Aug 7 11:11:14 2019 -0700
Merge pull request #1027 from cpu/cpu-go-one-dot-twelve-plus
project: require Go 1.12.x
commit 0338350c7e690613d92816e7ef89e68e27171c0c
Author: Daniel <cpu@letsencrypt.org>
Date: Wed Aug 7 13:43:58 2019 -0400
project: require Go 1.12.x
Dependencies are starting to require Go 1.12.x, Go 1.13 is near ready,
and the project maintainers are comfortable dropping support for 1.11.x.
commit db1431664129eebf4d121e3889ff14445fc43701
Author: Daniel <cpu@letsencrypt.org>
Date: Tue Aug 6 13:37:18 2019 -0400
Gopkg: update zlint/zcrypto to latest.
There was a slight bug with adding a `zlint.lints.LintStatus`
field to the CFSSL signer config object: Prior to zlint commit 9971d62
this type could only be marshaled to JSON, but not unmarshaled.
As a result if you marshal a CFSSL config (with or without setting the
new `LintErrLevel` field) then unmarshaling it produces an error like:
```
Failed to create CA: {"code":5200,"message":"failed to unmarshal
configuration: json: cannot unmarshal string into Go struct field
SigningProfile.lint_error_level of type lints.LintStatus"}
```
Updating to `github.com/zmap/zlint` >= 9971d62 resolves the problem.
commit 633726f6bcb7574626ae05ae72ca3c8dbc51810f
Merge: 5fc50ce7 c4ed0e46
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Thu Jul 25 17:06:31 2019 -0700
Merge pull request #1022 from QuLogic/log-format
Fix formatted logging calls.
commit c4ed0e46dc584377df6f18daee78ad37d4993bc8
Author: Elliott Sales de Andrade <quantum.analyst@gmail.com>
Date: Thu Jul 25 19:47:42 2019 -0400
Fix formatted logging calls.
These pass format strings, but don't call the formatting version of the
function.
commit 5fc50ce768d7c06f5dd84c7b5f83252ac05602c0
Merge: 6abac05f 2185c182
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Jul 15 17:59:13 2019 -0700
Merge pull request #1018 from cloudflare/cbroglie/1.3.4
Release 1.3.4
commit 2185c182e6bad3bf99f55ca6f6af0027124c112d
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Mon Jul 15 17:42:20 2019 -0700
Release 1.3.4
commit 6abac05fccc688161be1e75d48791d31e347aa1b
Merge: 2001f384 a4b817c6
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Jul 15 17:15:03 2019 -0700
Merge pull request #1015 from cpu/cpu-add-a-lint-trap
local signer: pre-issuance linting support with zlint.
commit a4b817c681805f0131a1728e27addad3c42c6cb8
Author: Daniel <cpu@letsencrypt.org>
Date: Mon Jul 15 09:51:14 2019 -0400
review: use lints.LintStatus, not int.
commit 0434ea05422c409cd0b3ab12bdc2ae0aa3b5adeb
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 14:55:27 2019 -0400
local: lint tbs certificates with zlint.
commit 66f7d5d783cff90dd1b3b8306bd5c5e920e59ef2
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 12:42:27 2019 -0400
local: generate lintPriv key when required by profiles.
commit 787a454ef67bf11b3fb2952e0115a0dacac44bd6
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 12:28:27 2019 -0400
config: populate an ignored lints map
commit f02ee2f1150405da0c202b0c8a7c1b61762c55cc
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 11:46:13 2019 -0400
config: add linting fields to signing profile config
commit 797ea50c6819e9fc3905007e03600b9c9c131a06
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 11:03:15 2019 -0400
dep: add and vendor github.com/zmap/zlint dependency.
commit 2001f384ec4fea8e6e648cd89d07bda9bd7568c1
Merge: 21cbcb0…
SsomsakTH
pushed a commit
to SsomsakTH/cfssl
that referenced
this pull request
Jun 13, 2023
commit e1165bba970713da395f6fbe7ff318ae8a63fb24
Merge: ce41e38e 21c13ab9
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon May 15 09:25:14 2023 -0700
Merge pull request #1300 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.9.0
commit ce41e38ef579f4375baff57ffc816192f3842442
Merge: b2e0b850 7479ed6d
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon May 15 09:25:04 2023 -0700
Merge pull request #1299 from cloudflare/dependabot/go_modules/github.com/stretchr/testify-1.8.2
commit 21c13ab91a1a408559bac83af8989423cc62cfce
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon May 15 03:59:39 2023 +0000
build(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.8.0 to 0.9.0.
- [Commits](https://github.com/golang/crypto/compare/v0.8.0...v0.9.0)
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 7479ed6d29ba27e8e26cb4aa270d18c777d07932
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon May 15 03:59:26 2023 +0000
build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.2
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.0 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.0...v1.8.2)
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit b2e0b850df40f0e46d62258a32fcc0eece5f72d7
Merge: 9618eba9 f6cb3e8a
Author: Nicky Semenza <nicky@nickysemenza.com>
Date: Fri May 12 14:09:17 2023 -0700
Merge pull request #1290 from cloudflare/nicky/golang-cross-latest
commit 9618eba9b36427f80fa99e50c7af07a4cd4590ab
Merge: 7bcbc6d8 372ef3d8
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:28:07 2023 -0700
Merge pull request #1295 from cloudflare/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.6
build(deps): bump github.com/google/certificate-transparency-go from 1.1.4 to 1.1.6
commit 372ef3d8c256e7e423c4ddbe6b5650a36520313a
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 17:12:34 2023 +0000
build(deps): bump github.com/google/certificate-transparency-go
Bumps [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) from 1.1.4 to 1.1.6.
- [Release notes](https://github.com/google/certificate-transparency-go/releases)
- [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/certificate-transparency-go/compare/v1.1.4...v1.1.6)
---
updated-dependencies:
- dependency-name: github.com/google/certificate-transparency-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 7bcbc6d879cb8030a83bcc2ff23653ca019f172d
Merge: 0d872f60 04f6d3e0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:11:55 2023 -0700
Merge pull request #1297 from cloudflare/dependabot/go_modules/github.com/go-sql-driver/mysql-1.7.1
build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.1
commit 0d872f6073bcb65fb4c730d9f6b8c61421533c6c
Merge: 11796e14 be9f3a38
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:11:47 2023 -0700
Merge pull request #1298 from cloudflare/dependabot/go_modules/github.com/lib/pq-1.10.9
build(deps): bump github.com/lib/pq from 1.10.1 to 1.10.9
commit 11796e1478655e4f8618ea3d5875b98ed7f48526
Merge: c1cdc1bc bf9636a0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 10:11:20 2023 -0700
Merge pull request #1291 from ahrtr/bump_zlint_20230512
bump github.com/zmap/zlint/v3 from 3.1.0 to 3.4.1
commit bf9636a01e88945b1b2fbae19b37d37a9b6a30fe
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:34:41 2023 -0700
update lint test for bumped zlint
commit 4a5a64d7e29d14d2aa947cf377ffe166ccf57954
Author: Benjamin Wang <wachao@vmware.com>
Date: Fri May 12 12:58:29 2023 +0800
bump github.com/zmap/zlint/v3 from 3.1.0 to 3.4.1
Signed-off-by: Benjamin Wang <wachao@vmware.com>
commit be9f3a384d4cfe0f00e54431bfb534c2889bb5ad
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 16:07:32 2023 +0000
build(deps): bump github.com/lib/pq from 1.10.1 to 1.10.9
Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.1 to 1.10.9.
- [Release notes](https://github.com/lib/pq/releases)
- [Commits](https://github.com/lib/pq/compare/v1.10.1...v1.10.9)
---
updated-dependencies:
- dependency-name: github.com/lib/pq
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 04f6d3e068bdc95b0c7b60911ff6f1760e1703f6
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 16:07:05 2023 +0000
build(deps): bump github.com/go-sql-driver/mysql from 1.6.0 to 1.7.1
Bumps [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) from 1.6.0 to 1.7.1.
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-sql-driver/mysql/compare/v1.6.0...v1.7.1)
---
updated-dependencies:
- dependency-name: github.com/go-sql-driver/mysql
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
commit c1cdc1bce69d276f492931ee02656c4187c569d6
Merge: 3e4a0601 03a86ea2
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:06:21 2023 -0700
Merge pull request #1296 from cloudflare/dependabot/go_modules/github.com/jmoiron/sqlx-1.3.5
build(deps): bump github.com/jmoiron/sqlx from 1.3.3 to 1.3.5
commit 3e4a06013525875ba40313220aaa0e0f571b528a
Merge: f37a685b e1d17772
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:00:23 2023 -0700
Merge pull request #1293 from cloudflare/dependabot/github_actions/docker/build-push-action-4
build(deps): bump docker/build-push-action from 3 to 4
commit f37a685b3e172e9d4f2aa4e5f6622f33afb94375
Merge: 58b12e72 e2461488
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 09:00:10 2023 -0700
Merge pull request #1294 from cloudflare/dependabot/go_modules/github.com/prometheus/client_golang-1.15.1
build(deps): bump github.com/prometheus/client_golang from 1.13.0 to 1.15.1
commit 03a86ea2cddbcb84900d462c6ac6597ddd883e95
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 15:45:58 2023 +0000
build(deps): bump github.com/jmoiron/sqlx from 1.3.3 to 1.3.5
Bumps [github.com/jmoiron/sqlx](https://github.com/jmoiron/sqlx) from 1.3.3 to 1.3.5.
- [Commits](https://github.com/jmoiron/sqlx/compare/v1.3.3...v1.3.5)
---
updated-dependencies:
- dependency-name: github.com/jmoiron/sqlx
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 58b12e72ad7adc4429e26cb641eb9e9c7130e21a
Merge: 214bd576 5f34df79
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 08:45:53 2023 -0700
Merge pull request #1289 from cloudflare/nicky/docker-arch
fix architecture for docker builds
commit e2461488a140d0814d702b0a6746c962afc6ff44
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 15:45:42 2023 +0000
build(deps): bump github.com/prometheus/client_golang
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.13.0 to 1.15.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.13.0...v1.15.1)
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
commit e1d1777290871c186e482eaca1955569090c3b05
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri May 12 15:45:34 2023 +0000
build(deps): bump docker/build-push-action from 3 to 4
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3 to 4.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v3...v4)
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 214bd576c4dd15fded3e3bba8a0557fce7fac92b
Merge: 88bfcbf5 2b2dd1a7
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri May 12 08:45:11 2023 -0700
Merge pull request #1292 from ahrtr/configure_dependabot_20230512
configure dependabot
commit 2b2dd1a75a3972bc1e9b9101f6096088ff4143db
Author: Benjamin Wang <wachao@vmware.com>
Date: Fri May 12 13:03:50 2023 +0800
configure dependabot
Signed-off-by: Benjamin Wang <wachao@vmware.com>
commit f6cb3e8a12c79fd074c0ef514aba1d25e0f73436
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu May 11 12:41:54 2023 -0700
build pacakges with latest go
disabling buildvcs for now, seems to be related to https://github.com/golang/go/issues/51253
commit 88bfcbf5e0fdbb6d8ddbb89e51618b0dc40bd9f5
Merge: 415a59e1 e9d07906
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 2 09:00:41 2023 -0700
Merge pull request #1288 from kbdharun/master
CI: bump actions version, fix node 12 deprecation warning
commit 5f34df79341ba7f3aa734926f7347078a02b2907
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Apr 26 10:35:05 2023 -0700
fix architecture for docker builds
it seems that specifing the platform arg is not needed / incorrect for github actions: https://github.com/docker/build-push-action/issues/668#issuecomment-1213063705
resolves #1287
commit e9d07906f1f5cf1a26fd1ffbe02747a4d7420e3c
Author: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
Date: Fri Apr 28 11:53:13 2023 +0530
go.yml: update actions/checkout to v3, actions/setup-go to v4
commit 76629b56e45ca81359a377d22485ff8f214bf364
Author: K.B.Dharun Krishna <kbdharunkrishna@gmail.com>
Date: Fri Apr 28 11:50:46 2023 +0530
snapshot.yml: update actions/checkout to v3
commit 415a59e18b98f13c65ae51baf07df40aa281c782
Merge: 908df500 636ddf8b
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Apr 26 10:35:39 2023 -0700
Merge pull request #1282 from patrickelectric/arm
commit 636ddf8b9e5073cd3ba80897edcbe7d6b11a8838
Author: Patrick José Pereira <patrickelectric@gmail.com>
Date: Tue Apr 18 18:01:34 2023 -0300
goreleaser: Add ARMv7 binaries
Such boards are still available
Signed-off-by: Patrick José Pereira <patrickelectric@gmail.com>
commit 908df500cbbd167cf4ad0e1766e7273a7c607c7c
Merge: b4d0d877 2fab338a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Apr 19 09:07:50 2023 -0700
Merge pull request #1285 from cloudflare/nicky/goreleaser-action-snapshot
commit 2fab338a5e797b5992a8a0cd85f2fe36b58df26b
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 30 09:04:17 2022 -0800
add workflow to run goreleaser snapshot
commit b4d0d877cac528f63db39dfb62d5c96cd3a32a0b
Merge: 6b3f2331 6e8b0316
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 28 08:57:26 2023 -0700
Merge pull request #1277 from cloudflare/nicky/docker
push images to github/docker container registry
commit 6e8b03168b08906a3e39b33f6779dfa9a9dab843
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 21 16:17:15 2023 -0700
push images to github/docker container registry
relates to #1265
commit 6b3f23319ae12650ddc738ef1e4176bd068fe3b2
Merge: a8697b2e cf63dcbf
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 21 16:16:15 2023 -0700
Merge pull request #1267 from shahidhs-ibm/s390x-multiarch
Add support to multi architecture docker image using github action
commit a8697b2ed5173a3c9d9391772c05dc2379482939
Merge: 4db924a7 51a7fa85
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Mar 21 16:11:51 2023 -0700
Merge pull request #1273 from ehershey/patch-2
Make api intro.txt references links
commit 4db924a7ae723f8ae764e6adcae1e9207f1c1727
Merge: c5e40da6 fcde786e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Mar 8 09:56:25 2023 -0800
Merge pull request #1274 from cloudflare/dependabot/go_modules/golang.org/x/net-0.7.0
build(deps): bump golang.org/x/net from 0.2.0 to 0.7.0
commit fcde786e4e604306415c347527839d9179d6ab22
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat Feb 18 03:23:06 2023 +0000
build(deps): bump golang.org/x/net from 0.2.0 to 0.7.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.2.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.2.0...v0.7.0)
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
commit 51a7fa85befb7cf5bf1bf5de84f06a9b44e9da4a
Author: Ernie Hershey <github@ernie.org>
Date: Thu Feb 16 00:56:34 2023 -0500
Make api intro.txt references links
commit cf63dcbff72726324f0370afa8bae0194a5681ad
Author: Shahid <shahid@us.ibm.com>
Date: Tue Feb 7 14:08:43 2023 +0530
Update Dockerfile
Incorporating review comments https://github.com/cloudflare/cfssl/pull/1267#discussion_r1083943730 and https://github.com/cloudflare/cfssl/pull/1267#discussion_r1083963991
commit 8467879cdfaede36ab545bf873deb8497d41f3e5
Author: Shahid <shahid@us.ibm.com>
Date: Tue Feb 7 14:05:24 2023 +0530
Update Makefile
Adding check before using `GOOS` and `GOARCH` variables in `go build` command. Ref. https://github.com/cloudflare/cfssl/pull/1267#discussion_r1083938333
commit b37103e9542a298ff32511a73298216a5e5c856e
Author: Shahid <shahid@us.ibm.com>
Date: Tue Jan 10 19:27:54 2023 +0530
Add support to multi architecture docker image using a github action
commit c5e40da603065e56dbb3c2c443609a855aa7d79c
Merge: 2ac5c8a1 1382f3b0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Dec 8 08:57:09 2022 -0800
Merge pull request #1262 from thaJeztah/remove_go_net
commit 1382f3b0bd966cbf881250af13845a301a97e73a
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Thu Dec 8 02:50:50 2022 +0100
remove use of obsolete golang.org/x/net/context package
This package is an alias for "context", which has been part of
stdlib since go1.7, so should no longer be needed.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 2ac5c8a1c1eadac50649678e9d638b165a61a58f
Merge: 37715e73 fa8441a9
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Dec 6 10:08:57 2022 -0800
Merge pull request #1260 from linux-on-ibm-z/s390x-binary-enablement
Binary enablement for s390x
commit fa8441a97a6f4d400230b7753b60755c256cf0e2
Author: Shahid Shaikh <shahid@us.ibm.com>
Date: Wed Nov 30 03:51:47 2022 -0800
Binary enablement for s390x
commit 37715e73dc6c71533a0c7381348239468b47dcb7
Merge: 123abe0b 39c4590c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Nov 29 08:46:16 2022 -0800
Merge pull request #1259 from sonork/master
Add linux/arm64 Build
commit 123abe0b8fdc0540b96b8f127d2ef73414491084
Merge: a4a432ba 00a28f65
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 23 09:05:34 2022 -0800
Merge pull request #1187 from jonathanio/improve-ocspserve-ipv6-handling
Improve IPv6 address handling in ocspserve
commit 39c4590c8a3a566d8ed437cdb4d118caf2fa6e38
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Wed Nov 23 09:16:30 2022 +0100
add arm64 on all linux binaries
commit a4a432ba1e23ac001fdd90f26b43e7759549441e
Merge: cfd0e9ab 0eecfe20
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Nov 22 09:12:34 2022 -0800
Merge pull request #1257 from thaJeztah/remove_goutils
transport/ca/localca: New(): return error instead of calling os.Exit(1), remove github.com/kisom/goutils/assert
commit c09440215f80f186550982193f92e3d8ff0263bb
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Tue Nov 22 12:13:28 2022 +0100
remove docker socket volume mount
commit 4dd587dbb11450ba27db56af282e14675d06df57
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Tue Nov 22 12:12:04 2022 +0100
remove privileged argument from docker runs
commit 540aeaf9efeb4e26912f87c06c8b97ac3d8fa035
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 13:20:42 2022 +0100
remove external linker in linux builds
commit c383f2add921c88a23f39d292a8336900bea5e44
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 13:16:20 2022 +0100
use cgo only in darwin builds
commit 24b3ec5c2f27d7edebf8dbea5b5955858220c5e4
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 11:13:36 2022 +0100
use gythialy/golang-cross for snapshot builds
commit 188cfa4871a6883c202d500ced4711ad434e2a7d
Author: Michael Wiesenbauer <michael.wiesenbauer@ambos.io>
Date: Mon Nov 21 10:08:03 2022 +0100
include linux/arm64 in builds
commit 0eecfe207f46635217e1e543e5638c9e88cad3db
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:41:54 2022 +0100
transport/ca/localca: remove uses of deprecated io/ioutil
Using their replacements instead. Also making use of t.TempDir(),
to let Go's testing take care of cleaning up.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit b069c865435fd29bc93168a6832c3364b17a2147
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:34:12 2022 +0100
transport/ca/localca: remove unused testGenerateKeypair utility
This was added in 56dfed7c82597110116d549dc1c990a5e24d1db7, but never
used.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 5937a3f33738b1be432168d46b8dc818fe141724
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:27:14 2022 +0100
transport/ca/localca: remove uses of github.com/kisom/goutils/assert
This package was the only package using this assertion library. Looking
for a replacement, all packages (except for one) in this repository were
not using an assertion library, so replacing it with standard checks.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 4607acedb3dfc22ea832dcfa1bddfbb5f800d3e6
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 12:18:23 2022 +0100
transport/ca/localca: New(): return error instead of calling os.Exit(1)
This code was added in 56dfed7c82597110116d549dc1c990a5e24d1db7, but
now has become the only use of github.com/kisom/goutils/assert, which
previously was used in tests, and now is archived (moved to a new module).
There were a couple of issues with this code;
The `assert.NoError` appears to have a bug; it accepts optional arguments,
but those are ignored; https://github.com/kisom/goutils/blob/v1.4.3/assert/assert.go#L90-L99
In this case, it meant that the additional information to describe the
error won't be printed.
Looking at the code (https://github.com/kisom/goutils/blob/v1.4.3/assert/assert.go#L35-L45),
it defaults (`GOTRACEBACK` anything other than "crash") using `os.Exit(1)`.
While (from the description), program execution MUST be terminated, there
are some downsides to using `os.Exit` here, as it terminates execution
immediately (which is desirable), but has no way to recover. While users
should NOT use the result in this case, they still may want to catch this
error (without terminating the program as a whole, which may be problematic
if this module is used as part of a service). `os.Exit` also does not execute
pending `defer` statements, which may still be desirable to handle state cleanup.
This patch changes the function to return an error instead, allowing the
caller to handle the error.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit cfd0e9ab2afa2101e9cf7647babf7eec2c3d4829
Merge: c71f9f68 052932c1
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 21 13:44:33 2022 -0800
Merge pull request #1255 from thaJeztah/update_gomod
go.mod: update for go1.18 and update/remove obsolete dependencies
commit c71f9f68dbbb2bdb90ff95db71c05ab94a330a6d
Merge: b553d93a 68b96f84
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 21 13:41:24 2022 -0800
Merge pull request #1258 from thaJeztah/remove_ioutils
chore: remove uses of deprecated io/ioutil
commit 68b96f84a7e2891320491683ce4e28a4591c36fd
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:58:17 2022 +0100
doc: remove mention of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit f277884f6332b9f3c3a2e9b5a467856cb6b930e3
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:58:04 2022 +0100
selfsign: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit f98ae4a6790151daf96162528a07a8756023c85f
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:57:50 2022 +0100
revoke: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 9d4d8c6779a1dc71d3c1678f3420b9e01e99f888
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:57:39 2022 +0100
multiroot: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit df5893e91e4e72e08b0f824ba32b15644d134918
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:57:27 2022 +0100
initca: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 62ebbe3726683f1716a55c92363f7eef043345f9
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:56:29 2022 +0100
csr: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 31652f3d0c5cdea571d94e08123a34e69de1e7c9
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:56:10 2022 +0100
crl: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 77a52e775f073de941b01388a9e7362da5ef1218
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:55:37 2022 +0100
config: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 7c1b3588da2292c39966676b118cb72d3262fea5
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:55:24 2022 +0100
certinfo: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 7025962aaa5975891ca0ef8d317f452d79c41922
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:55:07 2022 +0100
certdb: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit c9e5b44932223adb111e354e2cc00af434228b54
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:54:25 2022 +0100
whitelist: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 052932c167809da1e64de0d7e061e425164fff43
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:33:41 2022 +0100
go.mod: github.com/matttproud/golang_protobuf_extensions v1.0.2
adds go module support
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 3eb1f2940731045ef9e94e53582f3f880d7fa3bb
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:18:26 2022 +0100
go.mod: golang.org/x/crypto v0.3.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 706ae75e7314493ef46bd278f6c4faed08f019b1
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:46:44 2022 +0100
go.mod: golang.org/x/net v0.2.0
the golang.org/x projects now tag releases.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 1ddff47e3db73d5374c9c6e822b361153a06d461
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:09:20 2022 +0100
go.mod: github.com/jmhodges/clock v1.2.0
Adds go module support. No code changes in vendored files
full diff: https://github.com/jmhodges/clock/compare/880ee4c33548...v1.2.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 59534b3c34eeea05e9d0ba22b3543b2312e6af91
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:04:56 2022 +0100
go.mod: github.com/cloudflare/redoctober v0.0.0-20211013234631-6a74ccc611f6
Adds go module support and drops various obsolete dependencies;
full diff: https://github.com/cloudflare/redoctober/compare/99c99a8e7544...6a74ccc611f6
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 0cb76cee3fd9110af602ce9b5b930c0a7a056b29
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sat Nov 19 23:59:37 2022 +0100
go.mod: github.com/google/certificate-transparency-go v1.1.4
This version drops a great number of (indirect) dependencies
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 1c31e687d9b60adc5795aa107971584a2ecc2a7a
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 00:50:14 2022 +0100
remove deprecated golint (golang.org/x/lint)
CI is already using golangci-lint, which should cover whatever
golint was still covering.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit d90536d5434a63ac5e6552745848282619e4f43f
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 14:26:50 2022 +0100
all: gofmt for go1.18 (fixes missing build-tags)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit d7e9e5fab6848ab355aa01049626ea8dd03c260a
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:53:31 2022 +0100
ubiquity: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 8bd4af2b3b90449b45f798a6ffaee31fc21881bc
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:49:48 2022 +0100
transport: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 6a932bb7bf8ce68afc752af67d61804c7cedf739
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:49:30 2022 +0100
scan: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 5b8919c197a03bc3f2651f9ca11fc19c5c22bdd1
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:49:03 2022 +0100
ocsp: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit e7d48f1cd9f17db0ae4bab8e05b5b864bd0d685d
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:48:33 2022 +0100
signer: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit b27c723cccb13f14dc6b3936415bdd7759ab930b
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:47:22 2022 +0100
helpers: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit fc8619eae3f3734998c8dab9fe574dbd16ff1f50
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:47:00 2022 +0100
cmd: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 45225c2f2246b8037f39b5af192f425db9d308ec
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:46:26 2022 +0100
cli: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 6f34ba02802b99dddceccd9685cf764418b206d7
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:45:10 2022 +0100
bundler: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 2bc4f21a8c8e8e559c9969acfd7f7f9b5a2c1c72
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:44:33 2022 +0100
auth: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 941a1cde099d8ad7655d4239eb2e283c58591241
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 20 13:44:03 2022 +0100
api: replace uses of deprecated io/ioutil
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 28c127eebf13a457da4048e8fa08200aa502c4c3
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sat Nov 19 23:55:03 2022 +0100
go.mod: tidy and vendor with go1.18
go1.17 and older are deprecated and no longer tested in CI
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit b553d93abe2c9749c86b3c375be43770b7c3b17e
Merge: 079aed0a 879b1d38
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 7 10:23:10 2022 -0800
Merge pull request #1254 from thaJeztah/remove_go1.12_support
helpers/derhelpers: remove support for go1.12
commit 879b1d38a56467eccd595812bbf8b2bc71f5d0ea
Author: Sebastiaan van Stijn <github@gone.nl>
Date: Sun Nov 6 02:17:31 2022 +0100
helpers/derhelpers: remove support for go1.12
go1.12 has reached EOL when go1.14 was released in 2020, so it
should be safe to remove now.
Also removing uses of golang.org/x/crypto/ed25519, which is now part of stdlib:
Beginning with Go 1.13, the functionality of this package was moved to the
standard library as crypto/ed25519. This package only acts as a compatibility
wrapper.
This partially reverts e45ead24ff2d3a16f9c662d6f3b787176096049e / 81e54732c78bc0320d4f6061b9d27b441d8ff8f7
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
commit 079aed0a45c58d019740b4de1811e2116eae6866
Merge: d4be5f51 e0c522a3
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 4 09:00:58 2022 -0700
Merge pull request #1249 from cloudflare/nicky/new-db-accessor
add db accessor to get unexpired certs by labels, add DB tests back to CI
commit e0c522a34cb793a4beb7a092112b57a1f913c75a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Oct 3 16:02:44 2022 -0700
add test for GetUnexpiredCertificatesByLabel
commit a9a2c2e4be1a3f087451cf971a79fd76c0febbc8
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Oct 3 15:09:18 2022 -0700
add postgres and mysql tests back to CI
resolves #1238
commit d4488a84e2595902f2b0bf2eaead2d9d3bd5fa83
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Oct 3 13:54:55 2022 -0700
add DB accessor to get unexpired certs by one or more labels
commit d4be5f51fd039a532d63f2bca4c6fb2551dfed58
Merge: 4e654dd0 d9b0432a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 22 08:57:50 2022 -0700
Merge pull request #1245 from sevan/patch-2
commit 4e654dd020506d64966159d2547040c4d72c0b03
Merge: ffddf3ab 97e7ff29
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 22 08:57:42 2022 -0700
Merge pull request #1246 from sevan/patch-3
commit ffddf3ab3da7a094f546aad1a5f5d1fc431047e6
Merge: bba3a201 40209b17
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 22 08:57:32 2022 -0700
Merge pull request #1244 from sevan/patch-1
commit 97e7ff29bc08fcc75006afe5238c17e9be300a1b
Author: Sevan Janiyan <venture37@geeklan.co.uk>
Date: Fri Sep 2 00:19:34 2022 +0100
doc/api/intro.txt: there are 13 endpoints
sorte and document certinfo & revoke endpoints.
commit d9b0432a55b04f9189cd089678b41109fa07c000
Author: Sevan Janiyan <venture37@geeklan.co.uk>
Date: Thu Sep 1 22:59:56 2022 +0100
doc/cmd/multiroot.txt: Add dbconfig to example
multirootca/config was moved to the root of the source directory.
commit 40209b175f798d3e3f282a731ba16de59ee9191b
Author: Sevan Janiyan <venture37@geeklan.co.uk>
Date: Thu Sep 1 22:27:31 2022 +0100
doc/cmd/cfssl.txt: grammar
commit bba3a2015ca4ad91f5b2c61c5876f0ecbfcb39bc
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Aug 26 11:51:10 2022 -0700
update release make target to use go 1.18
commit cacf1702e49e95c402b3b041a1689965e784dadd
Merge: 81f1f19f 73645931
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:57:20 2022 -0700
Merge pull request #1241 from cloudflare/nicky/bump-crypto
chore: bump golang.org/x/crypto
commit 81f1f19fe6c83482a0f86dc87b1596f62138c246
Merge: a3eea0c1 f1e6594a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:54:57 2022 -0700
Merge pull request #1213 from akamac/patch-1
add health endpoint to docs
commit 73645931e8ffcb9234a8dadba192fa83fc69c506
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:51:19 2022 -0700
chore: bump golang.org/x/crypto
Resolves #1226
commit a3eea0c13300dd9c1d9110c208c2540325d0490b
Merge: 7614d6ca 23c92b07
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Aug 24 10:46:18 2022 -0700
Merge pull request #1239 from cloudflare/nicky/add-gh-actions
add github Actions to replace travis
commit 23c92b07d69cac29e39c04b34ae7727759fdf1fc
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Sun Jan 24 10:06:25 2021 -0800
add github Actions to replace travis
Travis hasn't been running for ~ 1 year, this adds some basic Actions tests so that ther
6284
e's some form of CI running
* some certs have expired since, filed #1237 to handle fixing those
* this doesn't quite have feature parity - namely missing the tests that run against the database. (filed #1238)
commit 7614d6cad35dd6d33c8c1fc2e2db5d9ce111e56b
Merge: 04def84a 33661a29
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Aug 19 10:34:05 2022 -0700
Merge pull request #1236 from blotus/use-go-embed
Replace go.rice with go embed
commit 33661a291000b3e21419f9418760304cec018015
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:23:14 2022 +0200
min go version is now 1.16
commit 3d2d3b520937be058f1f1b217f1947555be662da
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:22:51 2022 +0200
update Dockerfiles to use go 1.16
commit 33ed56286f3847949fc3607461c8351ba6bce804
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:14:07 2022 +0200
remove go.rice dependency
commit 9ca1d0a10e7414ea22c23b7b77153a6028c51a8a
Author: Sebastien Blot <sebastien@crowdsec.net>
Date: Wed Aug 17 13:08:46 2022 +0200
use go:embed
commit 04def84a58a0220d5adec64406b28a8e1ec6f716
Merge: e6502bb7 547d051e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 24 10:41:16 2022 -1000
Merge pull request #1231 from boranx/readme-go1.18-install
docs: add go install
commit 547d051ee560db1e0459b9e24d48934f7fd03b63
Author: boranx <boran.seref@gmail.com>
Date: Tue May 24 12:50:06 2022 +0200
docs: add go install
commit e6502bb7ffe4ee576227c9123a101deda248884c
Merge: 503b4d7b 34ce3de5
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Jan 19 08:37:23 2022 -0800
Merge pull request #1224 from romantomjak/master
commit 34ce3de5d5868b670f5bb224dc3e33875e1d5c7e
Author: Roman Tomjak <6570684+romantomjak@users.noreply.github.com>
Date: Sun Jan 16 12:05:33 2022 +0000
add support for m1 macs
commit f1e6594a1fa8e5d1873733aa84b4d5b0dcafb427
Author: Alexey Miasoedov <alexey.miasoedov@gmail.com>
Date: Thu Dec 2 14:02:28 2021 +0300
add health endpoint to docs
commit 503b4d7bdf090b00d20d67dcc1d129163c86d5c7
Merge: 29ae05fe a8591c38
Author: Watson Ladd <watson@cloudflare.com>
Date: Wed Sep 15 14:32:28 2021 -0700
Merge pull request #1205 from cloudflare/watson/fix-delegation-support
Support for DelegationUsage extension
commit a8591c383218ee9869cbc152ebebf2502895cbdb
Author: Watson Ladd <watson@cloudflare.com>
Date: Tue Sep 14 15:51:13 2021 -0700
Support for DelegationUsage extension
This special cases the DelegationUsage extension, copying it to the
output when signing. It also adds support for a flag
delegation_enabled in certificate specifications. I have manually
confirmed this works.
commit 29ae05fe80e1a9c704ddad7002d90ade7a38cb29
Merge: f4208c64 e582ed4c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Jul 14 15:06:11 2021 -0700
Merge pull request #1189 from cloudflare/nicky/fix-coreos-mod-rename
commit f4208c6426fc943869353262c073f96a062ec0ef
Merge: 1f29b040 19c09ff6
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Jun 17 12:50:52 2021 -0700
Merge pull request #1195 from BowonY/bowon/avoid-select-all
commit 19c09ff6ad5a2a2625647dd993d4b742d8508b01
Author: Bowon Yang <bowon@cloudflare.com>
Date: Thu Jun 17 12:09:53 2021 -0700
pick columns to get revoked/unexpired certs
commit 1f29b040495c08c983351455acc957826d2e597f
Merge: 6dd12c2d 87f86f18
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Jun 7 17:25:49 2021 -0700
Merge pull request #1191 from Rutori/loglevel-multiroot-ca
commit 87f86f189b1fad65d1c08e9cee58e6983e27893f
Author: Rutori <saintmishin@gmail.com>
Date: Mon May 24 17:28:13 2021 +0300
Add loglevel flag for multiroot-ca
commit e582ed4cfff7e0875c8136fe00e790ca29b81450
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 11 15:46:31 2021 -0700
remove -u flag from readme, link to releases
commit bea2d3db90fe13a9d4c220a9ef506a82af4b1b9f
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue May 11 10:32:00 2021 -0700
remove old go versions from travis
commit b2552cabdf56f79fe67618bea930916d7ad47089
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Apr 2 15:38:55 2021 -0700
fix upgrading transitive coreos dependency breakage
The root of the problem is that the latest semver release of https://github.com/google/certificate-transparency-go is from 2018, and the etcd packages have been renamed since. For some reason the readme instructs the usage of `-u` with go get, so this upgrades that to the latest version, along with some other packages that are years out of date.
more context at: https://github.com/etcd-io/etcd/issues/11749
resolves #1142,
resolves #1182
resolves #1183
resolves #1188
commit 00a28f6561cfaebeb8dd59c930137fb327088ae5
Author: Jonathan Wright <jon@than.io>
Date: Sat May 8 18:20:40 2021 +0100
Improve IPv6 address handling in ocspserve
When setting an IPv6 address to listing on via the -address command-line
argument for both serve and ocspserve, the latter errors with "listen
tcp: address ::1:8889: too many colons in address" unless it is escaped.
However, the former uses the net library to process the address and
port, which results in the enforced escaping of IPv6 addresses
regardless of if the address is already enclosed in square brackets
(e.g. [::1]).
This changes oscpserve to use the same net library call as serve to
provide consistency between the two calls when handling IPv6 addresses.
commit 6dd12c2d4cf9471540566d3758ac744a4cdfd943
Merge: 0707dc7c 57d4044c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Mar 26 10:14:02 2021 -0700
Merge pull request #1157 from mayocream/patch-1
commit 0707dc7c7679d3d9b4e53f5b3193844df64b20cc
Merge: b1512a1f ea20c62e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Mar 26 10:12:42 2021 -0700
Merge pull request #1181 from myokoyama28/fix-certadd
commit ea20c62e8f777ba0de98fdf406016c2d71a1d98e
Author: myokoyama28 <bayokoyama43@gmail.com>
Date: Tue Mar 23 15:26:37 2021 +0900
fix lint errors
commit 6b41bfc832dbb3d4a4d226109e128396be7d6e31
Author: myokoyama28 <bayokoyama43@gmail.com>
Date: Tue Mar 23 15:10:58 2021 +0900
fix serve_test.go
commit 9af920455ab53a5b95c9e1fa46f447b45cc568c7
Author: myokoyama28 <bayokoyama43@gmail.com>
Date: Tue Mar 23 13:53:47 2021 +0900
make certadd available
commit b1512a1f2b696488459832cf5ec4ec3d59f4cd1b
Merge: 2215630d 9b27d0d8
Author: Max Nystrom <maxnystrom@users.noreply.github.com>
Date: Wed Feb 24 17:57:51 2021 -0800
Merge pull request #1172 from aklyachkin/master
Support for E attribute (emailAddress) in CSR
commit 2215630d72a34603d912d2715f9c39e8a6c4328c
Merge: c6f04ed9 152fb8b0
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Feb 24 12:02:09 2021 -0800
Merge pull request #1175 from chienfuchen32/patch-1
Add http response close in client post function
commit 152fb8b0d7fb5c8d1fa7c29e81d308e008c0eee9
Author: 陳傑夫 <chienfuchen32@gmail.com>
Date: Tue Feb 16 15:26:03 2021 +0800
Add http response close in client post function
commit c6f04ed940e8ab5f52f583ac07cca9849f71a226
Merge: 6eb16407 84e7ff5e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Feb 12 15:29:03 2021 -0800
Merge pull request #1174 from nickysemenza/go-metrics-prometheus
replace deprecated go-metrics with prometheus
commit 84e7ff5e1a6fc982b2627395acc520f192ec18f0
Author: Nicky Semenza <nicky@nickysemenza.com>
Date: Tue Feb 9 17:53:04 2021 -0800
chore(multirootca): replace deprecated go-metrics with prometheus
This _is_ a breaking change.
commit 6eb1640765c7330eb7a67b4556ab5f12c6b9455e
Merge: 9f7129a6 f247e5be
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Feb 8 17:31:41 2021 -0800
Merge pull request #1173 from iguanesolutions/revoke_leak
revoke: fix connection leak
commit f247e5be73a3b69ab9ba011c17c1e1b05a7b8c6a
Author: Benjamin Gustin <benjamin.gustin@iguanesolutions.com>
Date: Mon Feb 8 13:27:32 2021 +0100
revoke: fix connection leak
commit 9b27d0d80ebfdab86f3b54d64f194e726818d236
Author: aklyachkin <aklyachkin@gmail.com>
Date: Mon Feb 8 13:17:54 2021 +0100
support for E attribute in CSR
commit 9f7129a65ac028f14451258d860bf3efd3e63576
Merge: 57882e0a 5628e979
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Feb 1 08:36:33 2021 -0800
Merge pull request #1163 from akgmartin/master
commit 5628e979a3ac93446abc504656e4e15e2784bdef
Merge: 38b82406 b156a8c1
Author: akgmartin <andy@martin-robson.com>
Date: Fri Jan 29 15:31:43 2021 -0600
Merge pull request #1 from benbuzbee/benbuz/tests
Fix tests and add OID test
commit b156a8c16c79634bdd2ea6795a1d75a8526b186e
Author: Ben Buzbee <bbuzbee@cloudflare.com>
Date: Fri Jan 29 21:25:54 2021 +0000
Fix tests and add OID test
commit 38b82406acc59d214d4d282d0dcb592a40770f52
Author: Andy Martin <amartin@cloudflare.com>
Date: Thu Dec 31 10:55:56 2020 -0600
Added support for general OID names in CSRs
commit 57882e0acfd6cd873edb826bfcf0505662a56ab0
Merge: 3cc617f2 1c752601
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Sun Jan 24 09:48:42 2021 -0800
Merge pull request #1170 from qinghai5060/fixErrorCheck
fix error check when check signature
commit 1c7526010688af74c36733d69dcccebd0c23c19e
Author: root <root@DESKTOP-HI73GJM.localdomain>
Date: Sun Jan 24 20:22:24 2021 +0800
fix error check when check signature
commit 3cc617f27de99f13068b41960b52a62015616e97
Merge: 23b638f5 7a59a7db
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Jan 12 09:10:30 2021 -0800
Merge pull request #1164 from grongor/dont-use-default-http-client
Allow users to use custom HTTP client
commit 7a59a7dbae656717661d880ecdb35990334cda8a
Author: Jakub Chábek <jakub.chabek@cdn77.com>
Date: Tue Jan 5 12:17:44 2021 +0100
Allow users to use custom HTTP client
commit 23b638f5a9370a5f13fb22f9d7b909f1bc0e0205
Merge: c75db4fe c90849d7
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Dec 22 11:28:16 2020 -0800
Merge pull request #1160 from orangepizza/zlint_upgrade
commit c90849d7dc60036d73fb68f738f29eb54099c39e
Author: abnoeh <abnoeh@mail.com>
Date: Tue Dec 22 16:08:53 2020 +0000
update zlint to v3.0.0
commit c75db4fe0dff203f6291e149e1dbe253db30c18a
Merge: a538700a d103ea14
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Dec 11 13:42:20 2020 -0800
Merge pull request #1156 from mayocream/master
format json indent
commit 57d4044c66be4a8c7c22067db781352ed77644c7
Author: Han Huang <huanghan@corp-ci.com>
Date: Wed Dec 9 17:59:16 2020 +0800
trigger
commit 763faa7f5632a49d4d40eb2c282c33ad352e23a6
Author: 真夜 <35420264+mayocream@users.noreply.github.com>
Date: Wed Dec 9 13:49:43 2020 +0800
fix: cfssl provider support SAN URI
commit d103ea147140377e6179a8fd1a3d27ac3426c81c
Author: Mayo <mayocream39@yahoo.co.jp>
Date: Mon Dec 7 13:45:42 2020 +0800
format json indent
commit a538700acfbab2ae160df7c145207f0c3114e5d3
Merge: aebbc137 9f1ff979
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 23 08:25:44 2020 -0800
Merge pull request #1151 from nagesh4193/master
Add Power Support ppc64le
commit 9f1ff9797cd9d5a64b79dae69b93898365b9c7c9
Author: nagesh4193 <70690392+nagesh4193@users.noreply.github.com>
Date: Mon Nov 23 12:43:41 2020 +0530
Add Power Support ppc64le
commit aebbc137271af51055fb97ea77be67a1868a3d21
Merge: c1bf7b99 f712ad9e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 13 14:46:11 2020 -0800
Merge pull request #1143 from nickysemenza/add-go-1.15
commit c1bf7b99b33c754afc837dc43d4619de162dee5f
Merge: 9ccff9a3 a22fd94a
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 13 11:06:09 2020 -0800
Merge pull request #1119 from jbampton/fix-spelling
Fix spelling
commit f712ad9e454aec2d0ec40979fb3375bd71e67a2c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 13 10:00:24 2020 -0800
copy over ca-bundle and int-bundle testdata from cloudflare/cfssl_trust
commit 9ccff9a3f5332b52a6103a3876bdc990be872163
Merge: 816bb927 7f460093
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Mon Nov 9 12:37:41 2020 -0800
Merge pull request #1145 from AshleyPoole/ash/add-health-api-doc
Add documentation for API health endpoint
commit 7f460093583f10da924467345a42f48af6f2438b
Author: Ashley Poole <git@ashleypoole.co.uk>
Date: Sun Nov 8 12:16:12 2020 +0000
Add documentation for API health endpoint
commit 5c037eb7f964ea31e38129ccefcc3039a65a838e
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Nov 6 15:56:45 2020 -0800
chore: add go 1.15 to travis
commit 816bb92712c79b67d5eb4bf918ab1d3c67db111b
Merge: e905e919 6152bbbf
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 4 16:19:59 2020 -0800
Merge pull request #1141 from nickysemenza/add-docker-push
add Docker Hub push to release make target
commit 6152bbbf41b60c5a7e204e48389365e5f4b3a0ad
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Nov 4 15:01:25 2020 -0800
add Docker Hub push to release make target
commit e905e919f68e0214990a445928752ece41a86038
Merge: d6ad84ed a0fb6096
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Oct 21 10:35:54 2020 -0700
Merge pull request #1137 from hugoboos/update-zlint
Update dependency zlint to 2.2.1
commit d6ad84ed79e75c6be0dfc7a7e35fd26543df5f2c
Merge: 8fb54138 e8f9337d
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Oct 21 10:31:15 2020 -0700
Merge pull request #1136 from nickysemenza/fix-null-commonname
fix(certdb): allow reading other null columns (part 2 of #1135)
commit e8f9337d2c132653bedd6368b60a1a161a5d278c
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 13 15:36:41 2020 -0700
fix(certdb): allow reading other null columns (part 2 of #1135)
This follows up #1135 to properly handle the case when columns written pre-migration have null values.
commit 8fb54138795b4030fb4e6d0183660f71aa4d764d
Merge: d1be3c20 34885de9
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Oct 15 09:42:47 2020 -0700
Merge pull request #1112 from RocketPuppy/patch-1
Document revocation parameter formats
commit a0fb609621624e0a6b41bf649935fb9b24fe1499
Author: Hugo Stijns <hugo@boosboos.net>
Date: Thu Oct 15 15:26:42 2020 +0200
update dependency zlint to 2.2.1
commit d1be3c20dd38c5e1044919090461a6cc9aad5072
Merge: 8e907d36 c7426dff
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 13 15:10:53 2020 -0700
Merge pull request #1135 from nickysemenza/fix-null-commonname
fix selecting rows created before migration introduced in #1126
commit c7426dffe46a00aaceaa0ef191ac56b9bb88df4f
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Tue Oct 13 14:36:51 2020 -0700
fix(certdb): use `sql.NullString` for CertificateRecord.CommonName
Rows inserted before the migration in #1126 will have the `common_name` set to NULL. This fixes selects for those rows.
commit 8e907d36f0663163058b9f9a102bdc471ce40d9a
Merge: 8090bcee 1b44b481
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Sep 25 14:46:16 2020 -0700
Merge pull request #1132 from asayyah/master
Fix race condition in revoke
commit 1b44b481724ef795de3ff08efabf8a7b29078c1d
Author: Ali Sayyah <asayyah@apple.com>
Date: Fri Sep 25 10:55:04 2020 -0700
Fix race condition in revoke
commit 8090bceefe6c9cc3b044197a8341bea2619d00a6
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Fri Sep 25 10:25:11 2020 -0700
feat(authsign): store additional metadata/fields in `certdb` (#1126)
This is a major change in that the included DB migrations *must* be run before the new version of `cfssl` is deployed.
This allows for clients (i.e. https://github.com/cloudflare/certmgr) to send some additional optional fields to `/api/v1/cfssl/authsign` to be stored in `certdb`. It also starts saving SANs, common name, and NotBefore from the issued certificates so that they can be queried without having to parse the PEM.
commit 046b174bc41a3d0d6e5c56c6e62783c461ac5c00
Merge: ca392c0f beeced86
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Thu Sep 17 15:20:26 2020 -0700
Merge pull request #1129 from mitalirawat/mitali/SECENG-8092
Allowing CertificateRequest to take CRL url as input which can then be used on a cert
commit beeced861039dcb4f2f378ed9efcb8ac71e766e4
Author: Mitali Rawat <mitali@cloudflare.com>
Date: Wed Sep 16 13:37:58 2020 -0700
Allowing CSR to take CRL url as input which can then be used on a certificate
commit ca392c0f5e00b59ca8a5e1f5863c757495e7b08a
Merge: efd6a76c ff9470e2
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Sep 16 14:56:07 2020 -0700
Merge pull request #1100 from gzzchh/patch-1
typo fix of json
commit efd6a76c0b801ebf1baf1e198a986d20fa95a44b
Merge: 2916a1fa 1fb9b902
Author: Nicky Semenza <nicky@cloudflare.com>
Date: Wed Sep 16 09:08:16 2020 -0700
Merge pull request #1128 from huiyifyj/fix-typo
Fix typo and go fmt this file
commit 1fb9b902d2323457031618a3ba50a75139680f0f
Author: huiyifyj <jxfengyijie@gmail.com>
Date: Wed Sep 16 11:51:38 2020 +0800
Fix typo and go fmt this file
commit a22fd94ab951d23c1f84195403ad443e14e22e6a
Author: John Bampton <jbampton@users.noreply.github.com>
Date: Sat Jul 4 09:39:24 2020 +1000
Fix spelling
commit 2916a1fa6bf37b6d7a672a9be7e734871e08039c
Merge: 6b49beae d3846318
Author: Ryan Carter <eiginn@users.noreply.github.com>
Date: Wed Jun 10 16:32:06 2020 -0700
Merge pull request #1111 from cpu/cpu-temp-fix-bundle-test
bundler: temporarily remove `leafRSA3072` testcases.
commit 34885de9fe6d332f5aad675d582f3a1822a81e9d
Author: Daniel Wilson-Thomas <RocketPuppy@users.noreply.github.com>
Date: Wed May 27 12:54:31 2020 -0400
Document revocation parameter formats
commit d38463181f7363e3d4c4b046a031d0f4df4269db
Author: Daniel McCarney <daniel@binaryparadox.net>
Date: Tue May 26 18:46:56 2020 -0400
bundler: temporarily remove `leafRSA3072` testcases.
The `leafRSA3072` test file, (`bundler/testdata/cfssl-leaf-rsa3072.pem`)
expired and breaks tests. A proper fix would be to regenerate this test
file but in the meantime removing the testcases fixes CI.
commit ff9470e2fbfe5a79d00088f88e67ea0b2b2c59d2
Author: CA_GA_64 <xjdzch@126.com>
Date: Wed Apr 22 22:47:38 2020 +0800
typo fix of json
commit 6b49beae21ff90a09aea3901741ef02b1057ee65
Author: DarkEdges <nirving.darkedges@darkedges.com>
Date: Fri Mar 27 04:30:38 2020 +1100
add copy_extensions configuration to local signer to allow (#1082)
* Added ability to copy Extensions from CSR
* Added Profile to determine if the Signer should
copy the extensions provided in the CSR across.
* Added config test
Co-authored-by: Nicholas Irving <nirving@darkedges.com>
commit f30ae6a1f0bacda4972528f0c5e70141cb658344
Author: Sofía Celi <claucece@users.noreply.github.com>
Date: Thu Mar 26 11:27:25 2020 -0500
Add go 1.14 to the CI (#1092)
* Update mod
* Include go 1.14 to CI
* Update go to 1.14 in dockerfiles
commit abef926615f4d1d3afb7c3e6573158551ad7dd54
Author: Daniel McCarney <daniel@binaryparadox.net>
Date: Tue Mar 24 18:52:41 2020 -0400
local/signer: use zmap/zlint v2.0.0, add filtering. (#1080)
This updates the CFSSL local signer ZLint pre-issuance linting
integration to use v2.0.0.
The existing signing profile configuration field "ignored_lints" is
joined by a new field "ignored_lint_sources". This relies on features in
the new 2.0.0 release and is useful for CAs that know certain classes of
ZLint lints are never applicable (e.g. CABF EV guidelines, ETSI ESI,
etc).
Co-authored-by: Daniel <cpu@letsencrypt.org>
commit 7c8e5017d5eca62b5b635b5ed98daab18b0fca16
Author: Sofía Celi <claucece@users.noreply.github.com>
Date: Mon Mar 23 16:05:07 2020 -0500
Fix 'TestNewMutualTLSServer' test for go1.14 #1075 (#1091)
commit e9f28f7c74bf21d35565721a5eea349d35943398
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Mar 18 09:08:55 2020 -0700
Replace pkg.cfssl.org with 'Packages' tab (#1050)
commit 44db4a7efa5989a423b7cfe452e656706e7a985d
Author: Sven Sauleau <github@sauleau.com>
Date: Wed Mar 18 04:12:00 2020 +0000
Cloud_f_lare (#1070)
commit f1bc990b9d4c86ae0c859ddeaad355036ffeb57a
Author: Thomas <tosie@users.noreply.github.com>
Date: Wed Mar 18 05:11:12 2020 +0100
Updated github.com/lib/pq to v1.3.0 (#1086)
commit e45ead24ff2d3a16f9c662d6f3b787176096049e
Author: Daniel McCarney <daniel@binaryparadox.net>
Date: Tue Mar 17 18:15:04 2020 -0400
deps: update /x/crypto, fix Go 1.13 test breakage. (#1081)
* deps: update /x/crypto to 8b5121be2f68
* helpers/derhelpers: split Go 1.12/1.13 impls.
When using modern `golang.org/x/crypto/ed25519` on Go 1.13 the `x`
library is a small wrapper around the stdlib version. The helper
function needs to match on the stdlib type in this case.
To maintain backwards compat with Go 1.12 the helper code is split by
a build tag. The legacy code can use the `golang.org/x/crypto/ed25519`
import while the new code can use the `crypto/ed25519` import.
Co-authored-by: Daniel <cpu@letsencrypt.org>
commit 10ed8daa8bb427c5ac7d133c1b449476e76c954d
Author: Sofía Celi <claucece@users.noreply.github.com>
Date: Tue Mar 17 16:39:50 2020 -0500
Correctly check for different golang versions #1076 (#1083)
commit 87a2fe70720844802207b55cd96f7fedc5d833ed
Author: Jon Moroney <darakian@gmail.com>
Date: Tue Feb 11 10:39:10 2020 -0800
Ignore EC parameters when parsing private keys
commit 644917271238216c94866f021e2b24ce54555848
Merge: 828c23c2 4468af66
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Tue Jan 21 12:38:48 2020 -0800
Merge pull request #1073 from PeterLincsafe/master
Fix readme still referencing deleted doc file
commit 4468af6609d0b0091c4f6340cbcdde341387e73f
Author: Peter Buijs <peter@lincsafe.com>
Date: Tue Jan 21 13:18:01 2020 +0100
Fix readme still referencing deleted doc file
commit 828c23c22cbca1f7632b9ba85174aaa26e745340
Merge: ebe01990 c7e13aec
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Dec 16 20:41:24 2019 -0800
Merge pull request #1065 from linux-on-ibm-z/test-s390x-pr
Add s390x support
commit c7e13aec684d881e995107198807295de5bef239
Author: Prasanna Kelkar <Prasanna.Kelkar@ibm.com>
Date: Fri Dec 6 10:32:35 2019 +0530
Add support for s390x in travis.yml
commit ebe01990a23a309186790f4f8402eec68028f148
Merge: 358fd07c 69fa54a3
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Nov 13 02:15:33 2019 -0800
Merge pull request #1054 from dsix-work/musl-builds
Build staticly with musl for better compatibility
commit 69fa54a3e275939077528092eb8b8a504d74088e
Author: David Six <david.six@flexential.com>
Date: Mon Nov 11 13:06:08 2019 +0000
Update goreleaser tag to musl version
commit 49924c4a02e6438269a5ef550953333daad898dd
Author: David Six <david.six@flexential.com>
Date: Fri Nov 8 22:22:51 2019 +0000
Build staticly with musl for better compatibility
commit 358fd07c64357b144621d8a700d67fdfbeb80899
Merge: 67aae946 acbed0af
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Nov 6 11:14:45 2019 -0800
Merge pull request #1052 from cloudflare/cbroglie/pkg-deb-rpm
Add make targets for building .deb and .rpm packages
commit acbed0afe20f978880b83aaaaa70132d592c28fe
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Tue Nov 5 22:00:32 2019 -0800
Add make targets for building .deb and .rpm packages
commit 67aae9466f3559ce0ae1c2450336ed84c0a3bb8e
Merge: d9af611a 1bfc9462
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Thu Oct 31 10:14:18 2019 -0700
Merge pull request #966 from andrewheberle/patch-1
Add missing sqlite import
commit d9af611a7824cabde35280a6f2964672650a96e7
Merge: 2318616c ce0e2949
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Thu Oct 31 09:32:35 2019 -0700
Merge pull request #1048 from cloudflare/cbroglie/goreleaser
Support building/releasing binaries with goreleaser
commit ce0e2949afe2b929ca966d6d5010690a75a6ca85
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 19:36:54 2019 -0700
Support building/relea
8911
sing binaries with goreleaser
Since this project requires cgo, the builds are performed in a
container which includes the MinGW compiler (for Windows) and an OSX
SDK.
commit 2318616c6faa8ced58522e59bb2acaab30b8478d
Merge: 40f4f514 9f1008dd
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 15:11:19 2019 -0700
Merge pull request #1047 from cloudflare/cbroglie/modules
Migrate to Go modules
commit 9f1008ddb886243a959be9c66e048ed4e13be721
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 14:14:28 2019 -0700
Drop the slow macOS build
It takes forever in Travis, and we have enough folks developing on
macOS so any regressions will be caught quickly.
commit ee731906980f0e89d124b8e56384733a1c6ed588
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Wed Oct 30 12:14:57 2019 -0700
Migrate to Go modules
commit 40f4f514ff4fd6bf6fec99f1b25ec44dd1ad1241
Merge: 1a911ca1 ac360f21
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Oct 28 13:23:25 2019 -0700
Merge pull request #1044 from cloudflare/cbroglie/selfsign
Fix bug causing selfsign to ignore the default profile
commit ac360f21638790fd6fd6cc5fa6b4b18fa79cbe45
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Mon Oct 28 11:31:33 2019 -0700
Fix bug causing selfsign to ignore the default profile
commit 1a911ca1b1d6e899bf97dcfa4a14b38db0d31134
Merge: b1ec8c58 27c56f6c
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Sep 11 15:19:28 2019 -0700
Merge pull request #1030 from ashemedai/master
Fix typo of genkey to gencsr
commit 27c56f6c15cc70d8f44ab6664f681e4b62664c66
Author: Jeroen Ruigrok van der Werven <asmodai@in-nomine.org>
Date: Tue Aug 13 16:27:23 2019 +0200
Fix typo of genkey to gencsr
commit b1ec8c586c2aa3ec3eaf4a622933f169cfa5648b
Merge: d4e85528 df5c37b0
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Aug 7 18:16:37 2019 -0700
Merge pull request #1025 from cpu/cpu-bump-zlint-dep
Gopkg: update zlint/zcrypto to latest.
commit df5c37b0aa5db6a2bed60324f65f2bfc35f8d213
Author: Daniel <cpu@letsencrypt.org>
Date: Wed Aug 7 14:23:19 2019 -0400
review: fix local signer TestLint unit test.
The upstream `zlint` project removed the `w_serial_number_low_entropy`
lint and so the `TestLint` function needed to be updated accordingly.
commit aa3425363ca8eb49da2afe0601d049d6fb2ad929
Merge: db143166 d4e85528
Author: Daniel <cpu@letsencrypt.org>
Date: Wed Aug 7 14:12:47 2019 -0400
Merge remote-tracking branch 'cf/master' into cpu-bump-zlint-dep
commit d4e85528af85aba17223fcb2caf207d57293730a
Merge: 633726f6 0338350c
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Wed Aug 7 11:11:14 2019 -0700
Merge pull request #1027 from cpu/cpu-go-one-dot-twelve-plus
project: require Go 1.12.x
commit 0338350c7e690613d92816e7ef89e68e27171c0c
Author: Daniel <cpu@letsencrypt.org>
Date: Wed Aug 7 13:43:58 2019 -0400
project: require Go 1.12.x
Dependencies are starting to require Go 1.12.x, Go 1.13 is near ready,
and the project maintainers are comfortable dropping support for 1.11.x.
commit db1431664129eebf4d121e3889ff14445fc43701
Author: Daniel <cpu@letsencrypt.org>
Date: Tue Aug 6 13:37:18 2019 -0400
Gopkg: update zlint/zcrypto to latest.
There was a slight bug with adding a `zlint.lints.LintStatus`
field to the CFSSL signer config object: Prior to zlint commit 9971d62
this type could only be marshaled to JSON, but not unmarshaled.
As a result if you marshal a CFSSL config (with or without setting the
new `LintErrLevel` field) then unmarshaling it produces an error like:
```
Failed to create CA: {"code":5200,"message":"failed to unmarshal
configuration: json: cannot unmarshal string into Go struct field
SigningProfile.lint_error_level of type lints.LintStatus"}
```
Updating to `github.com/zmap/zlint` >= 9971d62 resolves the problem.
commit 633726f6bcb7574626ae05ae72ca3c8dbc51810f
Merge: 5fc50ce7 c4ed0e46
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Thu Jul 25 17:06:31 2019 -0700
Merge pull request #1022 from QuLogic/log-format
Fix formatted logging calls.
commit c4ed0e46dc584377df6f18daee78ad37d4993bc8
Author: Elliott Sales de Andrade <quantum.analyst@gmail.com>
Date: Thu Jul 25 19:47:42 2019 -0400
Fix formatted logging calls.
These pass format strings, but don't call the formatting version of the
function.
commit 5fc50ce768d7c06f5dd84c7b5f83252ac05602c0
Merge: 6abac05f 2185c182
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Jul 15 17:59:13 2019 -0700
Merge pull request #1018 from cloudflare/cbroglie/1.3.4
Release 1.3.4
commit 2185c182e6bad3bf99f55ca6f6af0027124c112d
Author: Christopher Broglie <cbroglie@cloudflare.com>
Date: Mon Jul 15 17:42:20 2019 -0700
Release 1.3.4
commit 6abac05fccc688161be1e75d48791d31e347aa1b
Merge: 2001f384 a4b817c6
Author: Chris Broglie <cbroglie@cloudflare.com>
Date: Mon Jul 15 17:15:03 2019 -0700
Merge pull request #1015 from cpu/cpu-add-a-lint-trap
local signer: pre-issuance linting support with zlint.
commit a4b817c681805f0131a1728e27addad3c42c6cb8
Author: Daniel <cpu@letsencrypt.org>
Date: Mon Jul 15 09:51:14 2019 -0400
review: use lints.LintStatus, not int.
commit 0434ea05422c409cd0b3ab12bdc2ae0aa3b5adeb
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 14:55:27 2019 -0400
local: lint tbs certificates with zlint.
commit 66f7d5d783cff90dd1b3b8306bd5c5e920e59ef2
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 12:42:27 2019 -0400
local: generate lintPriv key when required by profiles.
commit 787a454ef67bf11b3fb2952e0115a0dacac44bd6
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 12:28:27 2019 -0400
config: populate an ignored lints map
commit f02ee2f1150405da0c202b0c8a7c1b61762c55cc
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 11:46:13 2019 -0400
config: add linting fields to signing profile config
commit 797ea50c6819e9fc3905007e03600b9c9c131a06
Author: Daniel <cpu@letsencrypt.org>
Date: Fri Jun 28 11:03:15 2019 -0400
dep: add and vendor github.com/zmap/zlint dependency.
commit 2001f384ec4fea8e6e648cd89d07bda9bd7568c1
Merge: 21cbcb0…
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
When setting an IPv6 address to listing on via the
-addresscommand-line argument for bothserveandocspserve, the latter errors unless the address is escaped:However,
serveuses thenetlibrary to process the address and port, which results in the enforced escaping of IPv6 addresses regardless of if the address is already enclosed in square brackets (e.g.[::1]):This Pull Request changes
oscpserveto use the samenetlibrary call asserveto provide consistency between the two modes when handling IPv6 addresses.I'm unsure as to the level of "breaking change" this could be considered as. This does directly change the handling of an already existing command-line argument, but there is no documentation that I can see regarding
-address(other than it exists and defaults to127.0.0.1if not set). More importantly, I don't see anything specific to-addressand IPv6 addresses, or the differences in handling betweenserveandocspserve.I don't know if some more specific configuration on the handling of
-addressmay be required as part of this to clean up handling between the modes?