47 Commits

Author SHA1 Message Date
Arjan H
e875804af1 Remove email details from admin pages
As Let's Encrypt has removed all email sending from boulder, we no longer need
the email details in LabCA either.
2025-08-05 18:14:37 +02:00
Arjan H
1a5050b3b0 Bump boulder version to v0.20250707.0 2025-07-12 20:25:18 +02:00
Arjan H
273b2b83ff Replace acme_tiny.py with certbot as ACME client 2025-05-31 11:21:08 +02:00
Arjan H
cd2084b9b8 Fix missing labca-gui from control container 2025-03-25 20:40:06 +01:00
Arjan H
7d518d7ea4 Bump boulder version to release-2025-03-18 2025-03-20 19:57:14 +01:00
Arjan H
99bba73978 Fix certificate revoke command (#158) 2025-02-25 21:05:58 +01:00
Arjan H
f14a2636c5 Bump boulder version to release-2025-02-04; add redis container
Let's Encrypt has changed the rate limiter to require redis, so we can
no longer remove it from the docker compose filei completely. But at
least we can run it once instead of four instances.
2025-02-10 19:38:38 +01:00
Arjan H
0d985d6b3f Several fixes and tweaks 2025-02-01 17:45:19 +01:00
Arjan H
6d72d32398 Use ceremony tool for generating keys and certs; store keys on SoftHSM
Replace openssl certificate / CRL generation with the tool as used by
Let's Encrypt, storing the keys on SoftHSMv2, a simulated HSM (Hardware
Security Module).
Include migration of old setups where key files were also stored on
disk.
2025-01-31 20:44:48 +01:00
Arjan H
3116c85c2c Bump boulder version to release-2025-01-06 2025-01-12 11:43:41 +01:00
Arjan H
6f475fc542 Use same key type for GUI cert as Issuing CA cert (#138)
When creating the domain key for the GUI certificate, use the same key
type (RSA or ECDSA) as the Issuing CA.
2024-12-21 13:53:11 +01:00
Arjan H
933367d31e Update certificate revoke command and reasons (#134) 2024-08-31 16:22:40 +02:00
Arjan H
a0aa9e5f01 Fix check that pkilint is up after restart 2024-08-28 07:35:29 +02:00
Arjan H
18b53030a1 Bump boulder version to release-2024-06-10 2024-08-26 20:16:12 +02:00
Arjan H
012a7a5d53 Switch from docker-compose to docker compose plugin (#73)
The standalone docker-compose has been deprecated in favor of a plugin
for the compose binary.
2023-07-02 16:10:38 +02:00
Arjan H
8aef5dd949 Fix restart of control container (also after restoring backup) 2023-06-29 20:06:03 +02:00
Arjan H
7598c8ad6d Do not generate new web certificate if the one from a restored backup is still valid 2023-06-28 21:08:44 +02:00
Arjan H
2b81d2d3dd Add options to trigger CRL generation and upload a Root CRL (#53) 2023-06-11 12:09:14 +02:00
Arjan H
0ed9d8eac2 Build and use local docker images for docker-only setup (#41)
For now, the images are still built on the target machine for testing,
in the end they need to be built in a GitHub action.
2023-04-15 09:19:17 +02:00
Arjan H
584accf056 Include the status/stats for consul container 2022-10-23 14:41:33 +02:00
Arjan H
40da9493d4 Bump boulder version to release-2022-10-17 2022-10-23 13:10:17 +02:00
Arjan H
9935b056c3 Update stats display on dashboard to docker-only situation 2022-08-06 15:15:54 +02:00
Arjan H
c9b9c158f5 Bump docker-compose to v2.5.0 2022-05-01 12:03:49 +02:00
Arjan H
6a67044372 Option to import backup instead of setting up from scratch on new install (#44) 2022-04-29 19:24:34 +02:00
Arjan H
c174a546dd Make memory stats collection language independent (#43) 2022-04-25 20:11:14 +02:00
Arjan H
960bd72567 Update troubleshooting log locations (#43) 2022-04-23 11:26:15 +02:00
Arjan H
9e411e03b5 Improve cronjob logging; expose cron log in web gui 2022-04-23 11:11:30 +02:00
Arjan H
e64c5e4c1f More docker-only refactoring and fixes (#37) 2022-04-19 19:08:30 +02:00
Arjan H
091e532308 Move commander service from host to docker container (#37 #38) 2022-04-17 19:36:46 +02:00
Arjan H
99d8bbe6be Generate new cert when changing fqdn 2022-04-16 19:14:10 +02:00
Arjan H
69fc88c689 Make update from gui more robust 2022-04-14 20:43:13 +02:00
Arjan H
cf0531e82b Fix handling of special characters in organization name (#40)
E.g. a-umlaut
2022-04-12 21:26:10 +02:00
Arjan H
4edcb64084 No longer map ports externally (#36) 2022-04-02 17:15:12 +02:00
Arjan H
954d9bb014 Run nginx as docker container instead of on the host system (#36) 2022-04-02 13:01:52 +02:00
Arjan H
1ab27caa77 Extend docker-compose timeout to 120s 2022-02-11 08:25:31 +01:00
Arjan H
d7c1cbe118 Make initial setup process a bit more clear 2021-12-04 19:08:52 +01:00
Arjan H
9bb689143d Make initial setup phase more robust 2021-08-29 17:19:24 +02:00
Arjan H
bf8526202f Show more information on page to diagnose initial problems 2021-08-24 19:25:25 +02:00
Arjan H
64f7f23ec5 Show more information on page to diagnose initial problems 2021-08-22 17:22:06 +02:00
Arjan H
62280b2938 Stay on non-master branches when updating via gui 2021-06-18 20:07:50 +02:00
Arjan H
1e76b3a3d8 Cosmetic: don't report application as down when it is not 2021-05-22 17:22:08 +02:00
Arjan H
81073c76a6 Wait longer for server to be ready before requesting first certificate 2021-03-03 17:27:28 +01:00
Arjan H
6856989e4d Hold off on starting boulder until setup wizzard is completed
#15
2021-02-28 20:27:46 +01:00
Arjan H
f8b823337d Don't show error when there are no backups yet 2021-02-13 15:26:19 +01:00
Arjan H
0e57fd6f4a Bump boulder version to release-2020-06-08 2020-08-23 20:11:20 +02:00
Arjan H
5d23559849 Check for new versions and upgrade from webgui. closes #1 2020-04-13 13:50:08 +02:00
Arjan H
f8ead94450 Initial commit to GitHub 2018-11-10 15:13:43 +01:00