Arjan H
8be46cda73
Bump boulder version to release-2023-07-11
2023-07-12 20:20:38 +02:00
Arjan H
5eefbf2ea8
Fix restart of control container in docker-only mode
2023-07-02 16:53:51 +02:00
Arjan H
012a7a5d53
Switch from docker-compose to docker compose plugin ( #73 )
...
The standalone docker-compose has been deprecated in favor of a plugin
for the compose binary.
2023-07-02 16:10:38 +02:00
Arjan H
e3e0767303
Remove fqdn restriction from wfe2 DirectoryCAAIdentity config ( #76 )
...
Let's Encrypt added validation on this field in their b2224eb4b commit
from 2023-03-21, but this seems unnecessarily strict when looking at the
CAA rfc. It's a problem for LabCA users only using one top level domain,
e.g. 'home'.
2023-07-01 14:24:15 +02:00
Arjan H
2a518ae03a
It is now possible to upload backup files on the manage page ( #75 )
2023-07-01 11:03:47 +02:00
Arjan H
cae7dfc5bb
Log name of pre-update database backup file
2023-07-01 11:01:09 +02:00
Arjan H
768806b1dd
Use host part of fqdn in backup names instead of docker container name
2023-07-01 10:00:22 +02:00
hakwerk
017d8da041
[skip ci] Commit changes from build-dockers action
2023-06-29 18:51:53 +00:00
Arjan H
cfb9476d40
Fix migration of database schema to preserve data ( #75 )
2023-06-29 20:28:27 +02:00
Arjan H
8aef5dd949
Fix restart of control container (also after restoring backup)
2023-06-29 20:06:03 +02:00
Arjan H
7598c8ad6d
Do not generate new web certificate if the one from a restored backup is still valid
2023-06-28 21:08:44 +02:00
Arjan H
0745c10d12
Restore MySQL data after renaming containers ( #75 )
...
When we changed the docker-compose project name from boulder to labca, we should
have also taken care of moving existing DB data from the old docker volume to the
new one. Now we do this in case anyone else upgrades from a pre-v23.05 release.
Also, clean up gorp_migrations table so the in-place upgrades will actually work.
2023-06-28 20:15:51 +02:00
Arjan H
7cc703b855
Cosmetic: add more mouseover hints for audit log messages
2023-06-25 08:09:42 +02:00
Arjan H
77335e1a3e
Use OCSP live signing when not using Redis
2023-06-22 19:49:29 +02:00
Arjan H
94464a6ca9
Fix placeholder substitution in setup
2023-06-18 13:24:13 +02:00
Arjan H
c40fa515e0
Update nginx image to 1.25.1 which only accepts TLS v1.2 and v1.3 ( #72 )
...
The previous image 1.21.6 did not accept TLS v1.3 and still accepted 1.0 and 1.1
2023-06-18 11:54:28 +02:00
Arjan H
e32b692599
Restart boulder after updating CRL generation interval
2023-06-16 19:26:52 +02:00
Arjan H
514ede49c8
Fix bconsul container working_dir and restart always
2023-06-16 18:37:27 +02:00
Arjan H
3781027664
Make Issuer CRL generation interval configurable (default 24h)
2023-06-15 18:36:18 +02:00
hakwerk
b340974488
[skip ci] Commit changes from build-dockers action
2023-06-13 17:08:35 +00:00
Arjan H
d7f4c10fd9
Bump boulder version to release-2023-06-12
2023-06-13 18:46:42 +02:00
Arjan H
66b51217df
Prevent posting empty data from manage CRL ( #53 )
2023-06-11 15:59:57 +02:00
Arjan H
f0601ff668
Fix MySQL container name; fix workdir for apply script in install
2023-06-11 12:19:00 +02:00
Arjan H
2b81d2d3dd
Add options to trigger CRL generation and upload a Root CRL ( #53 )
2023-06-11 12:09:14 +02:00
Arjan H
9f77d1a308
Add ability to keep private Root CA key offline ( #53 )
...
When generating a new Root CA certificate, show the key in the GUI and ask the user to
store it offline. When importing an existing CA make the root key optional.
When the private key is needed but we don't have it, ask the user to provide it. You
can now also create a CSR for the Issuer CA that can be signed by the offline Root CA.
2023-06-08 20:24:41 +02:00
Arjan H
7b13c6eb3a
Remove sha labels when building docker images
2023-06-06 20:36:39 +02:00
Arjan H
c03f13ae0c
Keep version number in config file when restoring
2023-05-29 15:18:07 +02:00
hakwerk
8491545d39
[skip ci] Commit changes from build-dockers action
2023-05-25 17:35:54 +00:00
Arjan H
1397085935
Bump boulder version to release-2023-05-22
2023-05-25 19:32:51 +02:00
Arjan H
eb3b0eea8e
Install zip for exporting certificates
2023-05-23 19:32:05 +02:00
Arjan H
0d15cbb3f6
Use optional environment variable for labca image version
2023-05-23 19:14:16 +02:00
Arjan H
9a6553ba10
Declare docker-only setup as beta ( #41 )
...
Internal testing has not uncoverd any surprises yet...
2023-05-02 19:01:03 +02:00
Arjan H
f59601fde9
Fix connMaxIdleTime after spaces were changed to tabs
2023-04-29 19:17:56 +02:00
Arjan H
0fde1be025
Bump boulder version to release-2023-04-24
2023-04-25 20:03:25 +02:00
Arjan H
0501f2fa4a
Fix some remnants of renaming docker containers
2023-04-23 15:28:04 +02:00
Arjan H
6353767d3c
Reduce akamai purger interval to save CPU cycles
2023-04-23 14:52:49 +02:00
Arjan H
d211ec9b1f
Fix cache key in docker build action
2023-04-22 13:51:42 +02:00
Arjan H
abc9f503f2
Include tags in docker build action for proper versioning
2023-04-22 11:34:21 +02:00
Arjan H
2653308333
Use go 1.20 in gui go.mod
2023-04-22 11:07:03 +02:00
Arjan H
861af46a6f
Add instructions for docker-only setup ( #41 )
2023-04-20 20:20:23 +02:00
hakwerk
55ec8fe4e7
[skip ci] Commit changes from build-dockers action
2023-04-20 17:06:18 +00:00
Arjan H
877e8b9b60
Bump boulder version to release-2023-04-17
2023-04-19 20:53:17 +02:00
Arjan H
a9eb2d5ae6
Use edge label for default branch, branch name for the other branches
2023-04-17 20:50:30 +02:00
Arjan H
6120dff7a4
Use edge label for default branch, branch name for the other branches
2023-04-17 19:55:00 +02:00
Arjan H
9251064a0c
Use edge label for default branch, branch name for the other branches
2023-04-17 19:48:17 +02:00
Arjan H
4418bc5c13
Use edge label for docker builds from master branch
2023-04-17 18:55:38 +02:00
hakwerk
e4242076e2
[skip ci] Commit changes from build-dockers action
2023-04-16 10:43:22 +00:00
Arjan H
61d3ddb4dc
Create action for building docker images ( #41 )
2023-04-16 12:39:05 +02:00
Arjan H
0ed9d8eac2
Build and use local docker images for docker-only setup ( #41 )
...
For now, the images are still built on the target machine for testing,
in the end they need to be built in a GitHub action.
2023-04-15 09:19:17 +02:00
Arjan H
b5db9b857d
File config/ocsp-updater.json was removed from boulder
2023-04-08 10:50:45 +02:00