31b79fa7760f95059a4e2afb35e734de283cf4a0 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/4c590df607f3d2cb6921b8d8269862a4f8f2456c 4c590df607f3d2cb6921b8d8269862a4f8f2456c

2008-05-02T11:20:00-07:00

Adding xmlrpc backward compatibility to the new Mongrel code. faa9497988f4c108344472e8a41347294cf004dc Luke Kanies luke@madstop.com 7a876ed6a06bc5decb257126eb57368aeb178a81 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/31b79fa7760f95059a4e2afb35e734de283cf4a0 31b79fa7760f95059a4e2afb35e734de283cf4a0

2008-05-02T10:58:35-07:00

Adding xmlrpc support to webrick. This provides the backward compatibility for webrick, and only Mongrel is left. 5e8cf6732758e3548103d2523fccecb056c39c1d Luke Kanies luke@madstop.com 72673413c8ead5adcb321fe1ce9cfe0410e0eb54 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/7a876ed6a06bc5decb257126eb57368aeb178a81 7a876ed6a06bc5decb257126eb57368aeb178a81

2008-05-02T10:28:23-07:00

Fixing some whitespace 316594daa96b6828082d8427385930d2efed9225 Luke Kanies luke@madstop.com 8c9b04d807b34ade704da3584b72d39bb129aa75 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/72673413c8ead5adcb321fe1ce9cfe0410e0eb54 72673413c8ead5adcb321fe1ce9cfe0410e0eb54

2008-05-02T10:27:15-07:00

Adding configuration support for XMLRPC handlers. This provides the interface for configuring backward compatibility in the new-style server code. It requires a completely different configuration step, in that REST and xmlrpc handlers are configured separately, rather than using the same handler names, but this was considered less evil than having a large abstraction layer for specifying how the handlers are related. 046e8d8e07284368527359606ca2956a53d2a47d Luke Kanies luke@madstop.com 83519f4e59f68f867f8ddbe141ac8bd9a6238ae1 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/8c9b04d807b34ade704da3584b72d39bb129aa75 8c9b04d807b34ade704da3584b72d39bb129aa75

2008-04-28T15:52:02-07:00

I think I've now got the Webrick SSL support working. Now I just need to get xmlrpc working alongside REST in both mongrel and webrick. c76828f38c7c8d28f4b533d556e809d0bf3c1437 Luke Kanies luke@madstop.com 0e8a1c9f6ac45e9e6f6dcf6464ad4d2780201ce1 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/83519f4e59f68f867f8ddbe141ac8bd9a6238ae1 83519f4e59f68f867f8ddbe141ac8bd9a6238ae1

2008-04-28T10:16:16-07:00

Interim commit, since I want to work but have no network available. a8fbd0e17b70abde2646659bef25b3aff91c7d63 Luke Kanies luke@madstop.com 58fb416e9f52a9dc834b735ffa7e5c425495c982 62ca72608c8fcded624c46c6951b9381a7284a80 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/0e8a1c9f6ac45e9e6f6dcf6464ad4d2780201ce1 0e8a1c9f6ac45e9e6f6dcf6464ad4d2780201ce1

2008-04-21T21:45:53-07:00

Merge branch '0.24.x' Conflicts: bin/puppetca 0bcf46830c65667ebf85e44f8699243f8da5a5f3 Luke Kanies luke@madstop.com 79ca44404af29b2bae621f9a6cb80467d95468aa Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/58fb416e9f52a9dc834b735ffa7e5c425495c982 58fb416e9f52a9dc834b735ffa7e5c425495c982

2008-04-21T20:30:01-07:00

Changing the File certificate terminus so that it saves to the :localcacert instead of :cacert. This way the :ca terminus saves to :cacert and the :file terminus saves to :localcacert. 7cd0338ef9934a3ac567f6a1eda952da5d746960 Luke Kanies luke@madstop.com a116d10b5e4412c362a246f12b77fc2e979aedbe Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/79ca44404af29b2bae621f9a6cb80467d95468aa 79ca44404af29b2bae621f9a6cb80467d95468aa

2008-04-21T15:33:58-07:00

Renaming the 'ca_file' ssl terminus type to 'ca'. 176d472b4b4067cd5038c5e629e246d8f2d73627 Luke Kanies luke@madstop.com d87e018ab84646de94aea70c2bd0270e1721940d Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/a116d10b5e4412c362a246f12b77fc2e979aedbe a116d10b5e4412c362a246f12b77fc2e979aedbe

2008-04-19T17:37:22-07:00

Temporarily disabling the revoke/verify test in the CA. It looks like it's not taking the CRL into account, so I can't seem to actually get a cert to fail verification. 474fcf7511c910e8ef3f4807e5f2e2a5758ee405 Luke Kanies luke@madstop.com 6c539c001e26b5a344d1f6e582f2f25cf16542bc Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/d87e018ab84646de94aea70c2bd0270e1721940d d87e018ab84646de94aea70c2bd0270e1721940d

2008-04-19T17:20:25-07:00

Fixing how the CRL is used for certificate verification. The CRL was not correctly being added to the Store used for verification. It does not appear to be working, though, since revoked certificates still pass verification. 4aaeb8061e18856a1343fffe4a8ba4ab330a2e52 Luke Kanies luke@madstop.com ebdbe4880d8c20965ac21a473b2bfc1ab953b6d4 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/6c539c001e26b5a344d1f6e582f2f25cf16542bc 6c539c001e26b5a344d1f6e582f2f25cf16542bc

2008-04-19T17:13:14-07:00

Fixing puppetca so it uses the :local ca setting. This causes it to use both the :ca_file and :file terminus types. f5e13b2b0659c24713a79a63fbe9dfb8b90f207b Luke Kanies luke@madstop.com 934fbba81cb18f05e07675d79a2e830c4e95c918 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/ebdbe4880d8c20965ac21a473b2bfc1ab953b6d4 ebdbe4880d8c20965ac21a473b2bfc1ab953b6d4

2008-04-19T17:08:36-07:00

Added an Interface class to the CA to model puppetca's usage. This class provides all of the semantics from puppetca, and appears to entirely duplicate the behaviour of the existing executable, with basically all of the code in a library file, instead of the executable. As such, I've deleted the test for the executable. We should have one, but it's not nearly as important. 3ad90a8ef93313f95db4f2976bd043c4f8fe7640 Luke Kanies luke@madstop.com d4813f1e03d96551e91b104e48b028fb4074d398 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/934fbba81cb18f05e07675d79a2e830c4e95c918 934fbba81cb18f05e07675d79a2e830c4e95c918

2008-04-19T13:30:11-07:00

Making the SSL::Host's destroy method a class method, rather than an instance method. 271bc1b8f94904e24be6b4823b304ef8787f4e9e Luke Kanies luke@madstop.com 809fc77bc767fb3acabc83d55183686200b1e384 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/d4813f1e03d96551e91b104e48b028fb4074d398 d4813f1e03d96551e91b104e48b028fb4074d398

2008-04-19T12:59:11-07:00

Adding the last functionality needed for puppetca to use the Indirector. This commit adds 'list' and 'print' support to the CA. They're mostly delegator methods, but now the CA should be the sole interface for puppetca. 535b8ebeadc42be7e3d1bcc8679c1790a341ec19 Luke Kanies luke@madstop.com 16056a24c65a7c6485b65f15700ff3971781031b Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/809fc77bc767fb3acabc83d55183686200b1e384 809fc77bc767fb3acabc83d55183686200b1e384

2008-04-19T12:50:18-07:00

Finishing the interface between the CA and the CRL. Certificate revocation now works, the CA knows how to generate the CRL, and the SSL::Host class knows how to configure the CRL class for indirection. 26f0fa4954f693168f7f366c5ea8653531de3ac6 Luke Kanies luke@madstop.com 82b9f61bdc0f3141b8744b83978e2fe9cd2a710b James Turnbull james@lovedthanlost.net http://github.com/fujin/puppet/commit/62ca72608c8fcded624c46c6951b9381a7284a80 62ca72608c8fcded624c46c6951b9381a7284a80

2008-04-19T05:35:02-07:00

Fixed some tests broken by #1176 b72d405280767141130b3e96603a6a8f49fc3a4f James Turnbull james@lovedthanlost.net a35450b147c8594d5bcae4facc938fe8143218f7 James Turnbull james@lovedthanlost.net http://github.com/fujin/puppet/commit/82b9f61bdc0f3141b8744b83978e2fe9cd2a710b 82b9f61bdc0f3141b8744b83978e2fe9cd2a710b

2008-04-19T04:56:17-07:00

Added puppetlast script to ext directory c6bf370bbb60081f8156ea773ce1364febd20af3 James Turnbull james@lovedthanlost.net 57fd88be52d07cf1fc09bd213ce096100c95c502 James Turnbull james@lovedthanlost.net http://github.com/fujin/puppet/commit/a35450b147c8594d5bcae4facc938fe8143218f7 a35450b147c8594d5bcae4facc938fe8143218f7

2008-04-19T04:51:27-07:00

Pushed patch for #1176 - configtimeout fix b52270ea257688a96e5f1e39650f2d9a14539f94 James Turnbull james@lovedthanlost.net b5640a186d0e7103d5d7f5cdfd309342a1634de3 James Turnbull james@lovedthanlost.net http://github.com/fujin/puppet/commit/57fd88be52d07cf1fc09bd213ce096100c95c502 57fd88be52d07cf1fc09bd213ce096100c95c502

2008-04-19T04:33:24-07:00

Pushed patch for ticket #1191 - adding globbing support to ports provider 57af15ba47a314f1dde9d653ba1dca398756bb01 James Turnbull james@lovedthanlost.net 0a5d8a639014495388b2b6c87c295ab4877f9139 James Turnbull james@lovedthanlost.net http://github.com/fujin/puppet/commit/b5640a186d0e7103d5d7f5cdfd309342a1634de3 b5640a186d0e7103d5d7f5cdfd309342a1634de3

2008-04-19T04:13:31-07:00

Pushed patch for ticket #1187 - freebsd pkg_add support d968265f2e02a238273cfe1d02d332e123ee7063 James Turnbull james@lovedthanlost.net d498c4ac4c7b97b5f8e004b3e31d8cbeed914711 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/16056a24c65a7c6485b65f15700ff3971781031b 16056a24c65a7c6485b65f15700ff3971781031b

2008-04-18T09:57:50-07:00

Adding inventory support to the new certificate authority. The new-style CA now keeps track of all of its signed certificates in its inventory file. 7ae8f2c283a6f3ef273cc29540901518f266a64e Luke Kanies luke@madstop.com 67f9d6977a21a96bf0a2a4d1d9ebde190a58e7bc Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/d498c4ac4c7b97b5f8e004b3e31d8cbeed914711 d498c4ac4c7b97b5f8e004b3e31d8cbeed914711

2008-04-18T09:53:59-07:00

Adding support within the inventory for real certs or Puppet cert wrappers. 2906473e58932c0d1ab43ac2a4039d5a306fa6a2 Luke Kanies luke@madstop.com 7cca66985a0f84b3904702df842d461c2b6431b7 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/67f9d6977a21a96bf0a2a4d1d9ebde190a58e7bc 67f9d6977a21a96bf0a2a4d1d9ebde190a58e7bc

2008-04-18T09:47:44-07:00

Changing the Inventory class to rebuild when the first cert is added, so it's easier to test. 4e38a2282df7d4cd979634b54786c66c2cd492b0 Luke Kanies luke@madstop.com 98db9850a7ef8bde01ffae2a80d640ff1e8e92b3 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/7cca66985a0f84b3904702df842d461c2b6431b7 7cca66985a0f84b3904702df842d461c2b6431b7

2008-04-18T09:40:48-07:00

Adding a comment to the inventory class. 0584a880f837d412f8fd2ea6b71e0842123fb39d Luke Kanies luke@madstop.com 92a7d76e8a160ba1ddb684d52eab6639cf801cb7 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/98db9850a7ef8bde01ffae2a80d640ff1e8e92b3 98db9850a7ef8bde01ffae2a80d640ff1e8e92b3

2008-04-18T09:39:42-07:00

Adding an SSl::Inventory class for managing the ssl inventory. This models the existing Inventory module in the sslcertificates/ directory, but does so as an instance, rather than a module. 3948f385c0ba8aa945c9a762020956692122d5f3 Luke Kanies luke@madstop.com fb56deae3488e5d97e10e38cba98393a5a8f8414 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/92a7d76e8a160ba1ddb684d52eab6639cf801cb7 92a7d76e8a160ba1ddb684d52eab6639cf801cb7

2008-04-18T08:49:58-07:00

All SSL terminus classes now force the CA information into the right place. Without this, then you could end up duplicating your CA key into the normal directory depending on how caching was set up. Again, this design aspect isn't the most straightforward, but at least it's functional now. 0c82d00456eae10d6208c0cce93a4c2092568913 Luke Kanies luke@madstop.com f7e0990fb436ce14e5f7ed295c004438d7735f95 Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/fb56deae3488e5d97e10e38cba98393a5a8f8414 fb56deae3488e5d97e10e38cba98393a5a8f8414

2008-04-17T20:12:21-07:00

Switching the SSL::Host class to return Puppet instances. Previously, the class was returning OpenSSL instances (e.g, OpenSSL::X509::Certificate) instead of Puppet instances (e.g., Puppet::SSL::Certificate). This made some things easier, but it made them asymmetric (e.g., you assigned the key as a Puppet instance but got back an OpenSSL instance), and it also reduced your flexibility and introspectiveness. 9e6cff4304fdb8b972b2ff61a1b24e74552b3898 Luke Kanies luke@madstop.com 71db9b58349f75a54649d9b0d1fead8d01593f7a Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/f7e0990fb436ce14e5f7ed295c004438d7735f95 f7e0990fb436ce14e5f7ed295c004438d7735f95

2008-04-17T19:51:14-07:00

Setting the expiration date of certificate objects to the expiry of the actual cert. 0738121f153946f348e891ba6a879e326b8c312a Luke Kanies luke@madstop.com e5c4687593766955de09e5613c892ce82a2a989d Luke Kanies luke@madstop.com http://github.com/fujin/puppet/commit/71db9b58349f75a54649d9b0d1fead8d01593f7a 71db9b58349f75a54649d9b0d1fead8d01593f7a

2008-04-17T19:39:24-07:00

Adding integration tests for a lot of the SSL code. This flushed out some problems, and things mostly look good now, but I don't think we're quite there yet. 4e17f61f1b53863477e6917818bb1893a55693b1 Luke Kanies luke@madstop.com