Commit Graph

463 Commits

Author SHA1 Message Date
Arjan H
41ddb87e38 Remove button that doesn't work anymore 2025-02-02 20:25:38 +01:00
Arjan H
dc33d983ff Workaround for building standalone GUI for arm64 2025-02-02 19:56:37 +01:00
Arjan H
0d985d6b3f Several fixes and tweaks 2025-02-01 17:45:19 +01:00
Arjan H
de026c3086 Mount nginx data in consistent location; fix dependencies 2025-02-01 09:14:57 +01:00
Arjan H
6d72d32398 Use ceremony tool for generating keys and certs; store keys on SoftHSM
Replace openssl certificate / CRL generation with the tool as used by
Let's Encrypt, storing the keys on SoftHSMv2, a simulated HSM (Hardware
Security Module).
Include migration of old setups where key files were also stored on
disk.
2025-01-31 20:44:48 +01:00
Arjan H
8852d49425 Remove unnecessary make that causes an issue (#138) 2025-01-19 21:31:42 +01:00
Arjan H
131b8d3505 Fix new(ish) db migration and add check 2025-01-18 19:49:20 +01:00
Arjan H
3116c85c2c Bump boulder version to release-2025-01-06 2025-01-12 11:43:41 +01:00
Arjan H
2cb4d797ec Temporarily issue both ECDSA and RSA from same issuer (#138 #144 #150)
The official Let's Encrypt boulder code only issues RSA certificates
from RSA issuer certificates and only ECDSA certificates from an ECDSA
issuer CA. Many people are having issues with this in LabCA.

Until we have the option for multiple issuers per root CA and/or
multiple CA chains in the GUI of LabCA, use the single issuer CA for
both key types.
2025-01-12 10:30:36 +01:00
Arjan H
6c40fc1940 Cosmetic: bump year 2025-01-12 10:17:33 +01:00
Arjan H
7613b753d7 Revert "Add explicit labels to Dockerfile-standalone (#124)"
This reverts commit d74ec31070.
2024-12-21 15:46:17 +01:00
Arjan H
6f475fc542 Use same key type for GUI cert as Issuing CA cert (#138)
When creating the domain key for the GUI certificate, use the same key
type (RSA or ECDSA) as the Issuing CA.
2024-12-21 13:53:11 +01:00
Arjan H
d74ec31070 Add explicit labels to Dockerfile-standalone (#124) 2024-12-20 18:05:22 +01:00
Arjan H
0de59d8d6b Add action to build standalone docker images [#124]
Builds the standalone binary for both amd64 and arm64, and then builds a
multi-arch docker image and pushes it to the GitHub Container Registry.
2024-12-15 18:07:54 +01:00
Arjan H
4508468a6a Also build arm64 standalone package when releasing 2024-12-14 14:43:04 +01:00
Arjan H
e36101b3aa Fix detection of all containers being up 2024-12-14 10:22:51 +01:00
Arjan H
2898694cb2 Bump nginx from 1.27.1 to 1.27.3 2024-12-14 09:39:28 +01:00
Arjan H
735b9c2f31 Dashboard: improve message parsing of JSON audit lines 2024-12-13 20:09:14 +01:00
Arjan H
4e1c361414 Bump golang.org/x/crypto from 0.21.0 to 0.31.0 2024-12-13 19:56:25 +01:00
Arjan H
120048ff30 Bump boulder version to release-2024-12-10 2024-12-13 18:00:40 +01:00
Arjan H
7de126698f Add minica binary to control image 2024-11-03 14:49:59 +01:00
Arjan H
4c842e8977 Bump boulder version to release-2024-10-28 2024-11-01 19:09:54 +01:00
Arjan H
eed437d341 Add PRINTABLESTRING/UTF8STRING import issue to common errors section (#141) 2024-09-29 20:26:15 +02:00
Arjan H
295cd00011 SMTP server can now use LabCA issued certificate (#139)
LabCA can optionally be configured to send emails. Until now it was only possible to send to SMTP
servers that use a certificate signed by a public root CA (e.g. gmail). Now this can also be an
internal server using a LabCA issued certificate, or you can skip TLS verification completely.
2024-09-28 16:00:21 +02:00
Arjan H
514c9116dc Bump nginx from 1.26.0 to 1.27.1 2024-09-13 07:44:45 +02:00
Arjan H
5986ef4e7c Remove bsetup container completely (#138) 2024-09-13 07:41:38 +02:00
Arjan H.
3beb577044 Remove bsetup step in docker-only instructions (#138) 2024-09-07 09:37:48 +02:00
Arjan H
933367d31e Update certificate revoke command and reasons (#134) 2024-08-31 16:22:40 +02:00
Arjan H
cab022a4c8 Bump boulder version to release-2024-08-30a 2024-08-31 16:04:55 +02:00
hakwerk
eb20f7f23f [skip ci] Commit changes from build-dockers action 2024-08-30 14:33:33 +00:00
Arjan H
cab563d1d7 Bump boulder version to release-2024-07-29 2024-08-30 16:31:07 +02:00
hakwerk
1040efe373 [skip ci] Commit changes from build-dockers action 2024-08-29 16:58:09 +00:00
Arjan H
575f738443 Bump boulder version to release-2024-07-10 2024-08-29 18:54:36 +02:00
Arjan H
a0aa9e5f01 Fix check that pkilint is up after restart 2024-08-28 07:35:29 +02:00
Arjan H
ab35a620f7 Update LabCA GUI for several recent boulder changes 2024-08-27 07:32:29 +02:00
Arjan H
18b53030a1 Bump boulder version to release-2024-06-10 2024-08-26 20:16:12 +02:00
hakwerk
770db94f42 [skip ci] Commit changes from build-dockers action 2024-08-24 13:17:42 +00:00
Arjan H
ddbaa63b5b Bump boulder version to release-2024-05-20 2024-08-24 15:15:21 +02:00
Arjan Hakkesteegt
b936bb53fe Revert "Use GITHUB_TOKEN in build-dockers.yml instead of a PAT"
This reverts commit 728bcb2a33.
2024-07-09 19:03:38 +02:00
Arjan H
728bcb2a33 Use GITHUB_TOKEN in build-dockers.yml instead of a PAT 2024-07-09 18:36:21 +02:00
Arjan H
4eb3ad877c Bump boulder version to release-2024-05-06 2024-07-02 19:47:47 +02:00
dependabot[bot]
e6e69beb41 Bump docker/build-push-action from 5 to 6 (#133)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-19 20:37:02 +02:00
Arjan H
1cc836f575 Bump nginx from 1.25.4 to 1.26.0 2024-05-05 10:04:57 +02:00
Arjan H
5d27e00fa4 Bump boulder version to release-2024-04-30 2024-05-04 21:26:13 +02:00
dependabot[bot]
dd45211df0 Bump golang.org/x/net from 0.21.0 to 0.23.0 in /gui (#128)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.21.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.21.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-19 19:48:15 +02:00
Arjan H
e6da46b9af Add docker volume for docker-only setup 2024-04-10 20:28:04 +02:00
hakwerk
bd845d4f16 [skip ci] Commit changes from build-dockers action 2024-04-09 19:54:53 +00:00
Arjan H
8b116d08e2 Bump boulder version to release-2024-04-08 2024-04-09 21:00:36 +02:00
Arjan H
5c41c8eff9 Remove now obsolete version attribute from docker-compose.yml 2024-04-07 14:12:39 +02:00
Arjan H
cbe2f4089c Bump boulder version to release-2024-04-01 2024-04-07 13:47:10 +02:00