1. 11 Feb, 2016 3 commits
    • Matthew Holt's avatar
    • Matthew Holt's avatar
      Merge branch 'master' into getcertificate · d25a3e95
      Matthew Holt authored
      d25a3e95
    • Matthew Holt's avatar
      Major refactor of all HTTPS/TLS/ACME code · 11103bd8
      Matthew Holt authored
      Biggest change is no longer using standard library's tls.Config.getCertificate function to get a certificate during TLS handshake. Implemented our own cache which can be changed dynamically at runtime, even during TLS handshakes. As such, restarts are no longer required after certificate renewals or OCSP updates.
      
      We also allow loading multiple certificates and keys per host, even by specifying a directory (tls got a new 'load' command for that).
      
      Renamed the letsencrypt package to https in a gradual effort to become more generic; and https is more fitting for what the package does now.
      
      There are still some known bugs, e.g. reloading where a new certificate is required but port 80 isn't currently listening, will cause the challenge to fail. There's still plenty of cleanup to do and tests to write. It is especially confusing right now how we enable "on-demand" TLS during setup and keep track of that. But this change should basically work so far.
      11103bd8
  2. 10 Feb, 2016 4 commits
  3. 05 Feb, 2016 2 commits
  4. 04 Feb, 2016 7 commits
  5. 01 Feb, 2016 5 commits
  6. 31 Jan, 2016 1 commit
  7. 30 Jan, 2016 1 commit
  8. 29 Jan, 2016 1 commit
  9. 28 Jan, 2016 3 commits
  10. 27 Jan, 2016 2 commits
  11. 26 Jan, 2016 2 commits
  12. 25 Jan, 2016 5 commits
  13. 23 Jan, 2016 3 commits
  14. 16 Jan, 2016 1 commit