190 Commits

Author SHA1 Message Date
Arjan H
37dd9184a7 Bump boulder version to v0.20251216.0 2025-12-27 16:40:48 +01:00
Arjan H
6973ebbcfb Update go dependencies to address security issues 2025-12-03 18:47:16 +01:00
Arjan H
e808b18d2a Bump boulder version to v0.20251021.0 2025-11-09 17:03:16 +01:00
Arjan H
4f6c31873e Run mysql_upgrade every time the compose stack starts 2025-09-23 20:31:51 +02:00
Arjan H
ca3a5b88c3 Fix 'error on line 239' when restoring backup (#194) 2025-09-22 20:37:47 +02:00
Arjan H
3081eae60f Also allow names in standalone DB config (#198) 2025-09-06 13:34:52 +02:00
Arjan H
d0a03e91ea Remove now unused _encrypt function 2025-08-05 21:24:55 +02:00
Arjan H
73fb58a13d Bump boulder version to v0.20250728.0 2025-08-05 19:35:09 +02:00
Arjan H
e875804af1 Remove email details from admin pages
As Let's Encrypt has removed all email sending from boulder, we no longer need
the email details in LabCA either.
2025-08-05 18:14:37 +02:00
Arjan H
6589aaa18d Update go.mod dependencies for security fixes 2025-07-20 14:53:28 +02:00
Arjan H
1a5050b3b0 Bump boulder version to v0.20250707.0 2025-07-12 20:25:18 +02:00
Arjan H
ec77c14f62 Also ignore lint check unknown_tld_in_san (#181) 2025-06-04 21:28:17 +02:00
Arjan H
0febdd24e6 Bump boulder version to release-2025-05-27 2025-05-31 12:29:07 +02:00
Arjan H
6253a01061 Tweak CA link / text on public homepage 2025-05-31 11:42:22 +02:00
Arjan H
26887b7f96 Remove old comment about keeping root key offline - not possible anymore (#160) 2025-05-29 20:19:55 +02:00
Arjan H
43d34c3cfa Fix CA links on public homepage (#166) 2025-05-29 20:17:27 +02:00
dependabot[bot]
79c6be8e08 Bump golang.org/x/net in /gui in the go_modules group across 1 directory (#177)
Bumps the go_modules group with 1 update in the /gui directory: [golang.org/x/net](https://github.com/golang/net).


Updates `golang.org/x/net` from 0.36.0 to 0.38.0
- [Commits](https://github.com/golang/net/compare/v0.36.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-21 09:08:56 +02:00
dependabot[bot]
471fc53821 Bump golang.org/x/crypto (#176)
Bumps the go_modules group with 1 update in the /gui directory: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.35.0 to 0.37.0
- [Commits](https://github.com/golang/crypto/compare/v0.35.0...v0.37.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.37.0
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-20 17:45:48 +02:00
Arjan H
f38bae5867 Fix linting issues 2025-04-20 17:27:10 +02:00
Arjan H
3ec866d1ea Add golangci-lint for GUI 2025-03-23 10:21:49 +01:00
Arjan H
7d518d7ea4 Bump boulder version to release-2025-03-18 2025-03-20 19:57:14 +01:00
Arjan H
5c1055319f GUI: update some mod versions (dependabot) 2025-03-16 15:18:07 +01:00
Arjan H
bdcdbef34d Fix root certificate link on setup page (#166) 2025-03-11 20:39:07 +01:00
Arjan H
5904cebaa5 Fix issue where ceremony tool is not compiled in time 2025-03-05 21:04:01 +01:00
Arjan H
8b7f5145a8 Fix CRL shard detection when revoking certs (#158)
Also fix admin.boulder ipki cert for older installations that only still
have admin-revoker.boulder ipki cert
2025-03-04 21:45:47 +01:00
Arjan H
6f66bc73ac Fix issuer and CRL URLs in certificates 2025-02-16 17:08:44 +01:00
Arjan H
a95028c45d Exclude hsm.go from all standalone builds (#154)
For standalone builds the HSM code is not used, so we can exclude it.
The resulting binary now no longer requires libc of a certain version to
be present.
2025-02-11 19:11:21 +01:00
Arjan H
f14a2636c5 Bump boulder version to release-2025-02-04; add redis container
Let's Encrypt has changed the rate limiter to require redis, so we can
no longer remove it from the docker compose filei completely. But at
least we can run it once instead of four instances.
2025-02-10 19:38:38 +01:00
Arjan H
2769ebb17f Update go dependencies for GUI 2025-02-03 19:07:48 +01:00
Arjan H
41ddb87e38 Remove button that doesn't work anymore 2025-02-02 20:25:38 +01:00
Arjan H
dc33d983ff Workaround for building standalone GUI for arm64 2025-02-02 19:56:37 +01:00
Arjan H
0d985d6b3f Several fixes and tweaks 2025-02-01 17:45:19 +01:00
Arjan H
de026c3086 Mount nginx data in consistent location; fix dependencies 2025-02-01 09:14:57 +01:00
Arjan H
6d72d32398 Use ceremony tool for generating keys and certs; store keys on SoftHSM
Replace openssl certificate / CRL generation with the tool as used by
Let's Encrypt, storing the keys on SoftHSMv2, a simulated HSM (Hardware
Security Module).
Include migration of old setups where key files were also stored on
disk.
2025-01-31 20:44:48 +01:00
Arjan H
3116c85c2c Bump boulder version to release-2025-01-06 2025-01-12 11:43:41 +01:00
Arjan H
6c40fc1940 Cosmetic: bump year 2025-01-12 10:17:33 +01:00
Arjan H
735b9c2f31 Dashboard: improve message parsing of JSON audit lines 2024-12-13 20:09:14 +01:00
Arjan H
4e1c361414 Bump golang.org/x/crypto from 0.21.0 to 0.31.0 2024-12-13 19:56:25 +01:00
Arjan H
120048ff30 Bump boulder version to release-2024-12-10 2024-12-13 18:00:40 +01:00
Arjan H
295cd00011 SMTP server can now use LabCA issued certificate (#139)
LabCA can optionally be configured to send emails. Until now it was only possible to send to SMTP
servers that use a certificate signed by a public root CA (e.g. gmail). Now this can also be an
internal server using a LabCA issued certificate, or you can skip TLS verification completely.
2024-09-28 16:00:21 +02:00
Arjan H
933367d31e Update certificate revoke command and reasons (#134) 2024-08-31 16:22:40 +02:00
Arjan H
cab563d1d7 Bump boulder version to release-2024-07-29 2024-08-30 16:31:07 +02:00
Arjan H
ab35a620f7 Update LabCA GUI for several recent boulder changes 2024-08-27 07:32:29 +02:00
Arjan H
18b53030a1 Bump boulder version to release-2024-06-10 2024-08-26 20:16:12 +02:00
Arjan H
ddbaa63b5b Bump boulder version to release-2024-05-20 2024-08-24 15:15:21 +02:00
Arjan H
4eb3ad877c Bump boulder version to release-2024-05-06 2024-07-02 19:47:47 +02:00
Arjan H
5d27e00fa4 Bump boulder version to release-2024-04-30 2024-05-04 21:26:13 +02:00
dependabot[bot]
dd45211df0 Bump golang.org/x/net from 0.21.0 to 0.23.0 in /gui (#128)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.21.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.21.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-19 19:48:15 +02:00
dependabot[bot]
f8a358793c Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /gui (#122)
Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-07 12:33:35 +02:00
dependabot[bot]
e737977dd5 Bump github.com/jackc/pgx/v4 from 4.18.0 to 4.18.2 in /gui (#121)
Bumps [github.com/jackc/pgx/v4](https://github.com/jackc/pgx) from 4.18.0 to 4.18.2.
- [Changelog](https://github.com/jackc/pgx/blob/v4.18.2/CHANGELOG.md)
- [Commits](https://github.com/jackc/pgx/compare/v4.18.0...v4.18.2)

---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-07 12:17:39 +02:00