68d8d0ae0686939d94dae8ccc70e5582187335dc Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/b161bca7b6421a206576b39abbc047753b3e763f b161bca7b6421a206576b39abbc047753b3e763f

2008-05-12T13:42:17-07:00

Transitional commit so I can continue working 0b87c6e79664e1e4f0c52ec9966904c044313ac6 Luke Kanies luke@madstop.com e936ef2426464b901638bf338c1c42590245b58f Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/68d8d0ae0686939d94dae8ccc70e5582187335dc 68d8d0ae0686939d94dae8ccc70e5582187335dc

2008-05-07T16:28:35-07:00

Adding a module for handling caching information. I keep having issues with integration tests keeping cached values around, and this module should hopefully give us a single place to invalidate all caches, thus making testing this much easier. cee56d0235229b4682ae1f95e78351a7cb83c7d4 Luke Kanies luke@madstop.com 1cfb0215a4d56af9ac1e0c672d9ae597dfde846e Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/e936ef2426464b901638bf338c1c42590245b58f e936ef2426464b901638bf338c1c42590245b58f

2008-05-07T12:45:13-07:00

Fixing some broken tests. The HttpPool module now removes its cached ssl_host instance when clearing its cache. This is really only useful for testing, but it correctly causes the pool to use new certificates when they're available. 2ba78ca3e29c0dc63a115ae0191b7c74e7829dab Luke Kanies luke@madstop.com 0365184aaec4d71f7fa93fc1534ae10f8f842bb7 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/1cfb0215a4d56af9ac1e0c672d9ae597dfde846e 1cfb0215a4d56af9ac1e0c672d9ae597dfde846e

2008-05-07T11:29:38-07:00

The CRL is now automatically used or ignored. Previously, you had to configure whether you wanted the CRL or not, which resulted in errors all the time when it was configured but unavailable. Now, Puppet will always create and try to use it, but you won't get failures if it's unavailable. 48529190b224006b12596ffafecbf9ffb49afca0 Luke Kanies luke@madstop.com 330359015602eba83077fccaa708c819d2d78b53 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/0365184aaec4d71f7fa93fc1534ae10f8f842bb7 0365184aaec4d71f7fa93fc1534ae10f8f842bb7

2008-05-07T11:28:51-07:00

Removing obsolete tests 1d180e304873ea7282e657c2e822cce849a98ab7 Luke Kanies luke@madstop.com 8fd68e388aa0b26d2dacc201086960385ff5c834 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/330359015602eba83077fccaa708c819d2d78b53 330359015602eba83077fccaa708c819d2d78b53

2008-05-07T10:29:58-07:00

The master and client now successfully speak xmlrpc using the new system. The server is actually serving REST, but the client can't use it until we resolve the format and security issues that REST hasn't yet tackled. ab124f5ae2a2493218b45b48cb3f07d9c8087f4a Luke Kanies luke@madstop.com dd4d8684fc19adcb68c681ba1c446a737498cda0 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/8fd68e388aa0b26d2dacc201086960385ff5c834 8fd68e388aa0b26d2dacc201086960385ff5c834

2008-05-07T10:25:00-07:00

Adding pidfile management and daemonization to the Server class. 226b42a0afeb32bf4708b4af7a4a6060a5469abe Luke Kanies luke@madstop.com 57c753419ac4700ab87689a3e3c3eb7302fff693 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/dd4d8684fc19adcb68c681ba1c446a737498cda0 dd4d8684fc19adcb68c681ba1c446a737498cda0

2008-05-06T17:02:45-07:00

Fixing the HttpPool module to get rid of an infinite loop. We can't have the HttpPool class use the Indirector to see if it has a cert available, because it might be being used to try to download one, which would cause it to make an http instance, which would cause it to... Well, you get the idea. Adding and fixing a few other tests I ran into on the way. 7dfd898ef167982ea905a542fed6066fb78768b7 Luke Kanies luke@madstop.com d78b4ba48a0fdf63906fb0ede2cd8c2e634ef442 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/57c753419ac4700ab87689a3e3c3eb7302fff693 57c753419ac4700ab87689a3e3c3eb7302fff693

2008-05-06T16:58:41-07:00

Adding REST terminuses for the SSL-related indirections. d452aeac08ebfc5b5247aabde507880c5d2b1934 Luke Kanies luke@madstop.com a822ef9ce5c6d603f4a98b9dda0dbf4661528128 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/d78b4ba48a0fdf63906fb0ede2cd8c2e634ef442 d78b4ba48a0fdf63906fb0ede2cd8c2e634ef442

2008-05-06T14:45:29-07:00

Adding autosigning to the new CA. Now the CSR class triggers autosigning when any CSR is saved, if it's running on a CA host. 1ec6c902ab64b7b575c0ac192ea470d9116efd17 Luke Kanies luke@madstop.com 38e2dcf35a1d9b19970d1fb253f6c09b0529e083 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/a822ef9ce5c6d603f4a98b9dda0dbf4661528128 a822ef9ce5c6d603f4a98b9dda0dbf4661528128

2008-05-06T13:39:18-07:00

Moving the CA Interface class to a separate file. d35c546f2321b49d7be7bff0a367564ed1ca350b Luke Kanies luke@madstop.com 6e0d6ddf5ef1cd6b23a672020bb657744b5a2c59 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/38e2dcf35a1d9b19970d1fb253f6c09b0529e083 38e2dcf35a1d9b19970d1fb253f6c09b0529e083

2008-05-05T20:36:59-07:00

The master is now functionally serving REST and xmlrpc. ...as far as I can tell. The client, however, is broken, since it used the old http_pool/ssl_support stuff, which no longer works. I have to port puppetd over to using the new ssl stuff, then I'll at least be able to verify that the master can still speak xmlrpc. d4e28bf2ebc43b73bfd36bfb72bf5b5da53e6ee7 Luke Kanies luke@madstop.com 51ce6746bc4c865b307af77b0967b345bf095aa8 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/6e0d6ddf5ef1cd6b23a672020bb657744b5a2c59 6e0d6ddf5ef1cd6b23a672020bb657744b5a2c59

2008-05-05T20:25:42-07:00

The REST infrastructure now correctly the SSL certificates. I don't think the whole thing is done, but at least the basic flows are in place. Now it's just a question of doing real-world tests and fleshing out the unit tests as necessary. 472d2c2b9880e214ad0057954bb499446769827a Luke Kanies luke@madstop.com 62f1f5e1514b4283750558f0019331de8e9460a4 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/51ce6746bc4c865b307af77b0967b345bf095aa8 51ce6746bc4c865b307af77b0967b345bf095aa8

2008-05-05T19:16:25-07:00

Fixing the webrick integration tests to use the newly-functional SSL code. b4c9f2ddf36d025ddb2ff728c9f6f9d3899b029c Luke Kanies luke@madstop.com e57436f1056cceb8ecdfadfa618911c5595c72e2 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/62f1f5e1514b4283750558f0019331de8e9460a4 62f1f5e1514b4283750558f0019331de8e9460a4

2008-05-05T19:15:39-07:00

The Certificate Authority now automatically creates a CRL when appropriate. This requires less setup and configuration on the part of the user. edeef80e4099cc8bbb9dc726a9c010202d2ce385 Luke Kanies luke@madstop.com 137e29ff0e33ff5cbb4032d452abc5a5aef2c941 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/e57436f1056cceb8ecdfadfa618911c5595c72e2 e57436f1056cceb8ecdfadfa618911c5595c72e2

2008-05-05T19:14:46-07:00

The Settings class now clears the 'used' sections when a value is changed. This makes is so that if you, for instance, reset the vardir, then the next time an initialization call is made, we reuse any previously used sections, thus (hopefully) correctly creating any newly needed directories. This is mostly helpful during testing. 8e4314dbc7a754ba19c07971686ee03c8c5ed68e Luke Kanies luke@madstop.com a3b88041570a35827c82993d7559d3583b31232c Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/137e29ff0e33ff5cbb4032d452abc5a5aef2c941 137e29ff0e33ff5cbb4032d452abc5a5aef2c941

2008-05-05T19:13:07-07:00

Moving some http configuration values to the main defaults section, rather than the puppetd section. 9910c985db5acbb715560d103e84b3dcfd191148 Luke Kanies luke@madstop.com e596bc5267bdbbe2e4ea0e7722047d1354f10826 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/a3b88041570a35827c82993d7559d3583b31232c a3b88041570a35827c82993d7559d3583b31232c

2008-05-05T19:12:39-07:00

The http pool manager now uses new-style certificate management. It uses an instance of SSL::Host for getting its certificate and ssl store. 5c725319a4a5f0d2e95f616769a72ebcb1c1b043 Luke Kanies luke@madstop.com 160f9d99e33b051d40f00971683cf54a0ff00c32 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/e596bc5267bdbbe2e4ea0e7722047d1354f10826 e596bc5267bdbbe2e4ea0e7722047d1354f10826

2008-05-05T19:01:33-07:00

Fixing some tests that were insufficiently mocking their configurations. These were still writing to ~. 05b099636251e8cfd6d4eb9c89baa6cf071d58e1 Luke Kanies luke@madstop.com ce6d5787aaefc4c980e51c394328c2ddc2f7cb9c Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/160f9d99e33b051d40f00971683cf54a0ff00c32 160f9d99e33b051d40f00971683cf54a0ff00c32

2008-05-05T19:00:29-07:00

Fixing a critical problem in how CRLs were saved and moving SSL Store responsibilities to the SSL::Host class. I was previously saving invalid CRLs unless they'd had a revocation done in them; this commit fixes them so that they're always valid. Also, I've added to SSL::Host the ability to generate a valid SSL Store, suitable for validation. This is now used by Webrick and can be used by the http clients, too. This should have been two commits, but I'm kind of down the rabbit hole ATM. 50f5a7e2e40482289f84175036a42874fad26dac Luke Kanies luke@madstop.com 67dc268fae0489de93f247b08fdaf7b1eec0e15d Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/ce6d5787aaefc4c980e51c394328c2ddc2f7cb9c ce6d5787aaefc4c980e51c394328c2ddc2f7cb9c

2008-05-05T15:16:03-07:00

The SSL::Host class now uses the CA to generate its certificate when appropriate. It uses the CA singleton method to determine whether it's on valid CA host, and if so, uses the CA instance to sign its generated CSR. 5bc654caf5c6da1127fb93e081b1dcf99929695a Luke Kanies luke@madstop.com 6356c043a44c771d707750f96f7660a1093be9ac Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/67dc268fae0489de93f247b08fdaf7b1eec0e15d 67dc268fae0489de93f247b08fdaf7b1eec0e15d

2008-05-05T15:10:07-07:00

The CA now initializes itself. I realized that it never made sense to have a CA that didn't know how to initialize itself, so we now have a singleton method for the CA, and it also automatically initializes itself. 727206889dcccab3d9d3292726e87a663ae539f9 Luke Kanies luke@madstop.com 4c590df607f3d2cb6921b8d8269862a4f8f2456c Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/6356c043a44c771d707750f96f7660a1093be9ac 6356c043a44c771d707750f96f7660a1093be9ac

2008-05-02T11:47:44-07:00

Switched puppetmasterd to use the new-style server plumbing. The code is much cleaner, and it seems to be mostly functional, but we have to pick a strategy for signing the host's certificate on first startup. Also, I haven't actually done end-to-end testing yet, which needs the certs working first. 509a3b2cdce0ff91ff62b960ac9c4c66de55ff2e Luke Kanies luke@madstop.com 31b79fa7760f95059a4e2afb35e734de283cf4a0 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/4c590df607f3d2cb6921b8d8269862a4f8f2456c 4c590df607f3d2cb6921b8d8269862a4f8f2456c

2008-05-02T11:20:00-07:00

Adding xmlrpc backward compatibility to the new Mongrel code. faa9497988f4c108344472e8a41347294cf004dc Luke Kanies luke@madstop.com 7a876ed6a06bc5decb257126eb57368aeb178a81 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/31b79fa7760f95059a4e2afb35e734de283cf4a0 31b79fa7760f95059a4e2afb35e734de283cf4a0

2008-05-02T10:58:35-07:00

Adding xmlrpc support to webrick. This provides the backward compatibility for webrick, and only Mongrel is left. 5e8cf6732758e3548103d2523fccecb056c39c1d Luke Kanies luke@madstop.com 72673413c8ead5adcb321fe1ce9cfe0410e0eb54 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/7a876ed6a06bc5decb257126eb57368aeb178a81 7a876ed6a06bc5decb257126eb57368aeb178a81

2008-05-02T10:28:23-07:00

Fixing some whitespace 316594daa96b6828082d8427385930d2efed9225 Luke Kanies luke@madstop.com 8c9b04d807b34ade704da3584b72d39bb129aa75 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/72673413c8ead5adcb321fe1ce9cfe0410e0eb54 72673413c8ead5adcb321fe1ce9cfe0410e0eb54

2008-05-02T10:27:15-07:00

Adding configuration support for XMLRPC handlers. This provides the interface for configuring backward compatibility in the new-style server code. It requires a completely different configuration step, in that REST and xmlrpc handlers are configured separately, rather than using the same handler names, but this was considered less evil than having a large abstraction layer for specifying how the handlers are related. 046e8d8e07284368527359606ca2956a53d2a47d Luke Kanies luke@madstop.com 83519f4e59f68f867f8ddbe141ac8bd9a6238ae1 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/8c9b04d807b34ade704da3584b72d39bb129aa75 8c9b04d807b34ade704da3584b72d39bb129aa75

2008-04-28T15:52:02-07:00

I think I've now got the Webrick SSL support working. Now I just need to get xmlrpc working alongside REST in both mongrel and webrick. c76828f38c7c8d28f4b533d556e809d0bf3c1437 Luke Kanies luke@madstop.com 0e8a1c9f6ac45e9e6f6dcf6464ad4d2780201ce1 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/83519f4e59f68f867f8ddbe141ac8bd9a6238ae1 83519f4e59f68f867f8ddbe141ac8bd9a6238ae1

2008-04-28T10:16:16-07:00

Interim commit, since I want to work but have no network available. a8fbd0e17b70abde2646659bef25b3aff91c7d63 Luke Kanies luke@madstop.com 58fb416e9f52a9dc834b735ffa7e5c425495c982 62ca72608c8fcded624c46c6951b9381a7284a80 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/0e8a1c9f6ac45e9e6f6dcf6464ad4d2780201ce1 0e8a1c9f6ac45e9e6f6dcf6464ad4d2780201ce1

2008-04-21T21:45:53-07:00

Merge branch '0.24.x' Conflicts: bin/puppetca 0bcf46830c65667ebf85e44f8699243f8da5a5f3 Luke Kanies luke@madstop.com