summaryrefslogtreecommitdiffstats
path: root/usr.sbin/acme-client/chngproc.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Do not exit with error if the challenge file already exists, instead truncate it andbenno2019-08-121-2/+2
| | | | | | write the challenge again. We can get asked to supply the same challenge multiple times. bug found and patch tested by jmc@ patch discussed with, mangled and okayed by florian@
* Trade unveil(2) for chroot(2).florian2019-06-161-13/+15
| | | | | | | | | | | This uses less code and unveil(2) seems to be the better tool here. The directory one chroots into needs to be carefully setup (they are not) and comon wisedom is that root can break out of chroots. There is probably nothing wrong with the chroot code because of pledge but it still makes me feel uneasy. input & OK on previous version mestre OK on previous version deraadt bug found, input & OK benno
* repair confusing "} if"; from florian@naddy2019-04-011-3/+5
|
* Make returns consistent and remove parentheses per style(9).jsing2017-01-241-2/+2
| | | | | | Transformed with coccinelle. Requested by and ok tb@
* Complete jsing's coccinelle cleanup... by handderaadt2017-01-241-4/+4
| | | | ok jsing
* Replace comparisons between a constant or enum and an expression, withjsing2017-01-241-13/+13
| | | | | | | | | a comparison between the expression and the constant or enum. This significantly improves readability. Transformed with coccinelle. Requested by deraadt@
* kill remote with fire, we need to handle this differentlyflorian2017-01-211-31/+15
| | | | OK benno
* acme-client use configuration file [1 of 5]benno2017-01-211-2/+3
| | | | | | | | | | | | | | | | | | | | | | start using the configuration file and delete command line arguments: -a agreement -> agreement url ... -c certdir -> domain certificate "path" -f accountkey -> account key "path" -k domainkey -> domain key "path" -s authority -> sign with "name" new argument: -f configfile the changes needed to use the new configuration are local to main.c for now. While the configuration could be passed directly to netproc(), keyproc() etc, the diff is smaller this way. This also removes the multidir (-m) mode for now - specify different paths in each domain {} block instead. ok florian
* A small amount more KNF to make this easier on our eyes. Not going furtherderaadt2016-09-131-4/+3
| | | | | than this. ok florian
* hoist local variable initialization directly into the definitions,deraadt2016-09-131-12/+4
| | | | | rather than doing it right afterwards. ok florian
* use reallocarray()deraadt2016-09-131-2/+2
|
* we don't have config.hflorian2016-09-011-4/+1
|
* Collapse krazy abstractions for other sandbox models, using chroot andderaadt2016-09-011-6/+10
| | | | | pledge directly as needed. ok florian
* whitespacebenno2016-08-311-10/+10
|
* Import Kristaps' letskencrypt and call it acme-client in tree.florian2016-08-311-0/+174
OK to get it in deraadt@ (and probably beck@) At least deraadt@, beck@ and otto@ are fine with the name and the disagreements stopped.
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.