lacme/tests/cert-install, branch v0.8.1 Small ACME client written with process isolation and minimal privileges in mind lacme: Add 'owner' resp. 'mode' as (prefered) alias for 'chown' resp. 'chmod'. 2021-02-24T20:32:06+00:00 Guilhem Moulin guilhem@fripost.org 2021-02-24T20:24:13+00:00 c6a4aaa6128d55ba5f7f3cd2bd75f789f69ae407 






lacme: Default mode for certificate(-chain) creation is 0644 minus umask restrictions.
2021-02-24T20:32:01+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T20:01:12+00:00

c612a7ff44995f4f9c39fa0fb68470d90c88decf

Also, always spawn the client with umask 0022 so a starting lacme(8)
with a restrictive umask doesn't impede serving challenge response
files.





Also, always spawn the client with umask 0022 so a starting lacme(8)
with a restrictive umask doesn't impede serving challenge response
files.







lacme: Don't write certificate(-chain) file on chown/chmod failure.
2021-02-24T20:09:02+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T19:03:44+00:00

cdd025133a306cd8d3e81aa832ac056119d65f3a

Otherwise we end up with files with mode 0644 owned by root:root, and
subsequent lacme(8) invocations will likely not renew them for a while.

This change also saves a chown(2) call.  And the new logic (chown resp.
chmod from root:root resp. 0600) is safe if we ever include private key
material in there too.





Otherwise we end up with files with mode 0644 owned by root:root, and
subsequent lacme(8) invocations will likely not renew them for a while.

This change also saves a chown(2) call.  And the new logic (chown resp.
chmod from root:root resp. 0600) is safe if we ever include private key
material in there too.







tests/cert-install: Include tests for failing chown(2).
2021-02-24T12:19:21+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T12:19:21+00:00

539e3a8b8a2baf6746716125e99231da14a153a9

Due to unknown user/group name.





Due to unknown user/group name.







tab damage
2021-02-24T12:18:00+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T12:18:00+00:00

c96f887e5d8a1625f7dfb76d7f646499aead8eed












typofix
2021-02-24T12:17:43+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-24T12:17:43+00:00

bb3ef24a8d97dd9b0299cf23e4815c57c5ad7fb7












Add test suite against Let's Encrypt's staging environment.
2021-02-20T19:16:29+00:00

Guilhem Moulin
guilhem@fripost.org

2021-02-19T22:22:15+00:00

11d971bc07ceb4359565e6611ae03a0c0134d153

https://letsencrypt.org/docs/staging-environment/





https://letsencrypt.org/docs/staging-environment/