Commit Graph

371 Commits

Author SHA1 Message Date
Arjan H
c04e4ffdbc Bump boulder version to release-2023-09-19 2023-09-24 12:54:50 +02:00
dependabot[bot]
690b8e0fef Bump docker/login-action from 2 to 3 (#94)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-23 13:51:19 +02:00
dependabot[bot]
43676e07f5 Bump docker/setup-buildx-action from 2 to 3 (#93)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-22 20:00:46 +02:00
dependabot[bot]
3833689eca Bump crazy-max/ghaction-import-gpg from 5 to 6 (#92)
Bumps [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) from 5 to 6.
- [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases)
- [Commits](https://github.com/crazy-max/ghaction-import-gpg/compare/v5...v6)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-import-gpg
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-21 19:51:19 +02:00
ka2er
b0a299ca46 fix missing lab-release dep in some lxc debian 12 container (#91) 2023-09-21 19:00:33 +02:00
Arjan H
736b361228 Bump boulder version to release-2023-09-11 2023-09-20 19:26:33 +02:00
dependabot[bot]
675245625c Bump docker/build-push-action from 4 to 5 (#90)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4 to 5.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 19:07:00 +02:00
dependabot[bot]
88c8231913 Bump actions/checkout from 3 to 4 (#89)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 20:30:39 +02:00
Arjan H
a1ed502f03 Bump nginx from 1.25.1 to 1.25.2 2023-08-17 21:44:15 +02:00
Arjan H
0cc6fb6b93 Bump boulder version to release-2023-08-14 2023-08-17 19:35:56 +02:00
Arjan H
a8a91a36a7 Force recreating containers after docker-compose-plugin downgrade (#76) 2023-07-18 19:26:27 +02:00
Arjan H
7fbfa08e9e Fix docker-compose-plugin downgrade copy/paste issue 2023-07-16 17:23:09 +02:00
Arjan H
e982da2696 Bump go version and nginx image to latest versions 2023-07-16 12:24:43 +02:00
Arjan H
217e8bb5be Update dependabot.yml 2023-07-15 19:31:00 +02:00
Arjan H
7dba946e9a Downgrade docker-compose-plugin v2.19.x to v2.18 (#76) 2023-07-15 18:57:23 +02:00
Arjan H
5fecf57d62 Include optional custom nginx config files (#72)
If you want to control e.g. the ssl_protocols or ssl_ciphers settings,
create a file named 'custom-ssl.inc' in the /home/labca/nginx_data/conf.d/
directory (or when using the docker-only setup, either add a volume mount
or edit the labca_nginx_conf volume to include the file). Similarly,
'custom-base.inc' can be created to e.g. define a custom log format, and
'custom.inc' could be created for any settings on the plain HTTP server
context.
2023-07-15 16:46:49 +02:00
Arjan H
dd831cb2cd Unmark docker-only setup as beta as it seems stable now 2023-07-15 08:38:49 +02:00
dependabot[bot]
bd3ec5ccab Bump actions/setup-go from 2 to 4 (#79)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2 to 4.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-14 20:20:36 +02:00
Arjan H
33c5fdfee1 Update go.mod dependencies of gui 2023-07-14 19:33:18 +02:00
Arjan H
09582bff02 Fix pull_request target branches in build-dockers workflow 2023-07-13 20:21:25 +02:00
Arjan H
293de7e4be Configure dependabot for several ecosystems 2023-07-13 19:38:18 +02:00
Arjan H
56041d9cc9 Fix boulder-tools donor image for pre-built boulder container 2023-07-13 19:33:43 +02:00
Arjan H
c8afcad3c7 Fix issue with version number on fresh installation 2023-07-12 21:38:47 +02:00
Arjan H
8be46cda73 Bump boulder version to release-2023-07-11 2023-07-12 20:20:38 +02:00
Arjan H
5eefbf2ea8 Fix restart of control container in docker-only mode 2023-07-02 16:53:51 +02:00
Arjan H
012a7a5d53 Switch from docker-compose to docker compose plugin (#73)
The standalone docker-compose has been deprecated in favor of a plugin
for the compose binary.
2023-07-02 16:10:38 +02:00
Arjan H
e3e0767303 Remove fqdn restriction from wfe2 DirectoryCAAIdentity config (#76)
Let's Encrypt added validation on this field in their b2224eb4b commit
from 2023-03-21, but this seems unnecessarily strict when looking at the
CAA rfc. It's a problem for LabCA users only using one top level domain,
e.g. 'home'.
2023-07-01 14:24:15 +02:00
Arjan H
2a518ae03a It is now possible to upload backup files on the manage page (#75) 2023-07-01 11:03:47 +02:00
Arjan H
cae7dfc5bb Log name of pre-update database backup file 2023-07-01 11:01:09 +02:00
Arjan H
768806b1dd Use host part of fqdn in backup names instead of docker container name 2023-07-01 10:00:22 +02:00
hakwerk
017d8da041 [skip ci] Commit changes from build-dockers action 2023-06-29 18:51:53 +00:00
Arjan H
cfb9476d40 Fix migration of database schema to preserve data (#75) 2023-06-29 20:28:27 +02:00
Arjan H
8aef5dd949 Fix restart of control container (also after restoring backup) 2023-06-29 20:06:03 +02:00
Arjan H
7598c8ad6d Do not generate new web certificate if the one from a restored backup is still valid 2023-06-28 21:08:44 +02:00
Arjan H
0745c10d12 Restore MySQL data after renaming containers (#75)
When we changed the docker-compose project name from boulder to labca, we should
have also taken care of moving existing DB data from the old docker volume to the
new one. Now we do this in case anyone else upgrades from a pre-v23.05 release.

Also, clean up gorp_migrations table so the in-place upgrades will actually work.
2023-06-28 20:15:51 +02:00
Arjan H
7cc703b855 Cosmetic: add more mouseover hints for audit log messages 2023-06-25 08:09:42 +02:00
Arjan H
77335e1a3e Use OCSP live signing when not using Redis 2023-06-22 19:49:29 +02:00
Arjan H
94464a6ca9 Fix placeholder substitution in setup 2023-06-18 13:24:13 +02:00
Arjan H
c40fa515e0 Update nginx image to 1.25.1 which only accepts TLS v1.2 and v1.3 (#72)
The previous image 1.21.6 did not accept TLS v1.3 and still accepted 1.0 and 1.1
2023-06-18 11:54:28 +02:00
Arjan H
e32b692599 Restart boulder after updating CRL generation interval 2023-06-16 19:26:52 +02:00
Arjan H
514ede49c8 Fix bconsul container working_dir and restart always 2023-06-16 18:37:27 +02:00
Arjan H
3781027664 Make Issuer CRL generation interval configurable (default 24h) 2023-06-15 18:36:18 +02:00
hakwerk
b340974488 [skip ci] Commit changes from build-dockers action 2023-06-13 17:08:35 +00:00
Arjan H
d7f4c10fd9 Bump boulder version to release-2023-06-12 2023-06-13 18:46:42 +02:00
Arjan H
66b51217df Prevent posting empty data from manage CRL (#53) 2023-06-11 15:59:57 +02:00
Arjan H
f0601ff668 Fix MySQL container name; fix workdir for apply script in install 2023-06-11 12:19:00 +02:00
Arjan H
2b81d2d3dd Add options to trigger CRL generation and upload a Root CRL (#53) 2023-06-11 12:09:14 +02:00
Arjan H
9f77d1a308 Add ability to keep private Root CA key offline (#53)
When generating a new Root CA certificate, show the key in the GUI and ask the user to
store it offline. When importing an existing CA make the root key optional.
When the private key is needed but we don't have it, ask the user to provide it. You
can now also create a CSR for the Issuer CA that can be signed by the offline Root CA.
2023-06-08 20:24:41 +02:00
Arjan H
7b13c6eb3a Remove sha labels when building docker images 2023-06-06 20:36:39 +02:00
Arjan H
c03f13ae0c Keep version number in config file when restoring 2023-05-29 15:18:07 +02:00