Commit Graph

720 Commits (f5e6a57ef81f807e4986892d0997a360892a93f7)

Author SHA1 Message Date
Felix Fontein f5e6a57ef8
Make sure the ACME inspect tests run with both backends. (#758) 2024-05-25 16:44:20 -07:00
Felix Fontein 580942878a
Pass codecov token to ansible-test-gh-action. (#755) 2024-05-25 16:44:20 -07:00
Felix Fontein ef9dbda07d
Revert "Revert all non-bugfixes merged since the last release."
This reverts commit 82251c2d80.
2024-05-25 16:44:19 -07:00
Felix Fontein 0021a0b0c4
Next planned release is 2.20.0. 2024-05-25 16:44:19 -07:00
Felix Fontein 7c46bddc68
Release 2.19.1. 2024-05-25 16:44:19 -07:00
Felix Fontein f9f38d4cd5
Prepare 2.19.1 bugfix release. 2024-05-25 16:44:18 -07:00
Felix Fontein 704d3ef693
Revert all non-bugfixes merged since the last release.
Revert "Fix documentation. (#751)"
Revert "ACME modules: simplify code, refactor argspec handling code, move csr/csr_content to own docs fragment (#750)"
Revert "Refactor and extend argument spec helper, use for ACME modules (#749)"
Revert "Avoid exception if certificate has no AKI in acme_certificate. (#748)"
Revert "ACME: improve acme_certificate docs, include cert_id in acme_certificate_renewal_info return value (#747)"
Revert "Add acme_certificate_renewal_info module (#746)"
Revert "Refactor time code, add tests, fix bug when parsing absolute timestamps that omit seconds (#745)"
Revert "Add tests for acme_certificate_deactivate_authz module. (#744)"
Revert "Create acme_certificate_deactivate_authz module (#741)"
Revert "acme_certificate: allow to request renewal of a certificate according to ARI (#739)"
Revert "Implement basic acme_ari_info module. (#732)"
Revert "Add function for retrieval of ARI information. (#738)"
Revert "acme module utils: add functions for parsing Retry-After header values and computation of ARI certificate IDs (#737)"
Revert "Implement certificate information retrieval code in the ACME backends. (#736)"
Revert "Split up the default acme docs fragment to allow modules ot not need account data. (#735)"

This reverts commits 5e59c5261e, aa82575a78,
f3c9cb7a8a, f82b335916, 553ab45f46,
59606d48ad, 0a15be1017, 9501a28a93,
d906914737, 33d278ad8f, 6d4fc589ae,
9614b09f7a, af5f4b57f8, c6fbe58382,
and afe7f7522c.
2024-05-25 16:44:18 -07:00
Felix Fontein 8752b360d1
x509_certificate: fix time idempotence (#754)
* Fix time idempotence.

* Lint and add changelog fragment.

* Add tests.

* Make sure 'ignore_timestamps: false' is passed for time idempotence tests; pass right private key for OwnCA tests
2024-05-25 16:44:18 -07:00
francescolovecchio 89da98908d
ecs_certificate: allow to request renewal without csr (#740)
* renew request CSR validation

* Create 740-ecs_certificate-renewal-without-csr

* Rename 740-ecs_certificate-renewal-without-csr to 740-ecs_certificate-renewal-without-csr.yml

---------

Co-authored-by: flovecchio <flovecchio@sorint.com>
2024-05-25 16:44:17 -07:00
Felix Fontein a7f2725096
Fix documentation. (#751) 2024-05-25 16:44:17 -07:00
Felix Fontein a147b78d2b
ACME modules: simplify code, refactor argspec handling code, move csr/csr_content to own docs fragment (#750)
* Fix bug in argspec module util.

* Move csr / csr_content to new docs fragment.

* Simplify code.

* Refactor ACME argspec creation. Add with_certificate argument for new CERTIFICATE docs fragment.
2024-05-25 16:44:17 -07:00
Felix Fontein 044a3be9e0
Refactor and extend argument spec helper, use for ACME modules (#749)
* Refactor argument spec helper.

* Remove superfluous comments.
2024-05-25 16:44:17 -07:00
Felix Fontein f9f22311e4
Avoid exception if certificate has no AKI in acme_certificate. (#748)
Shouldn't happen since CA-issued certs should always have AKI,
but better be safe than sorry.
2024-05-25 16:44:16 -07:00
Felix Fontein 98c5c5293a
ACME: improve acme_certificate docs, include cert_id in acme_certificate_renewal_info return value (#747)
* Use community.dns.quote_txt filter instead of regex replace to quote TXT entry value.

* Fix documentation of acme_certificate's challenge_data return value.

* Also return cert_id from acme_certificate_renewal_info module.

* The cert ID cannot be computed if the certificate has no AKI.

This happens with older Pebble versions, which are used when
testing against older ansible-core/-base/Ansible versions.

* Fix AKI extraction for older OpenSSL versions.
2024-05-25 16:44:16 -07:00
Felix Fontein 15ed057392
Add acme_certificate_renewal_info module (#746)
* Allow to provide cert_info object to get_renewal_info().

* Add acme_certificate_renewal_info module.

* Allow to provide value for 'now'.

* Actually append msg_append.

* Fix bug in module timestamp param parsing, and add tests.
2024-05-25 16:44:16 -07:00
Felix Fontein 99521df3dc
Refactor time code, add tests, fix bug when parsing absolute timestamps that omit seconds (#745)
* Add time module utils.

* Add time helpers to ACME backend.

* Add changelog fragment.

* ACME timestamp parser: do not choke on nanoseconds.
2024-05-25 16:44:15 -07:00
Felix Fontein 6e1c1e0e70
Add tests for acme_certificate_deactivate_authz module. (#744) 2024-05-25 16:44:15 -07:00
Felix Fontein a3c23a623a
Create acme_certificate_deactivate_authz module (#741)
* Create acme_certificate_deactivate_authz module.

* Add ACME version check.
2024-05-25 16:44:15 -07:00
Austin Lucas Lake 758fdcee13
updated email in copyright statement 2024-05-13 13:32:59 -07:00
Austin Lucas Lake b711ee4f67
updated parameter name and added versioning to python-dateutil 2024-05-10 22:17:14 -07:00
Austin Lucas Lake 160b24146f
added option to automatically install python-dateutil and updated documentation 2024-05-10 21:14:12 -07:00
Austin Lucas Lake 18f1c161df
module will now fail safely if python-dateutil package is not found 2024-05-10 19:47:34 -07:00
Austin Lucas Lake 6347b8c500
added setup needed for dateutil dependency 2024-05-09 21:58:44 -07:00
Austin Lucas Lake 2d3faa1b87
changed parameter names for subkey suboptions and updated documentation 2024-05-09 20:24:35 -07:00
Austin Lucas Lake aced2d3e09
updated filenames to use full .yaml extension and updated jinja2 template vars 2024-05-09 20:20:23 -07:00
Austin Lucas Lake baaec80acd
updated documentation and module parameter names 2024-05-09 14:52:53 -07:00
Austin Lucas Lake 3bafd3f1d8
add default attributes docs fragment
Co-authored-by: Felix Fontein <felix@fontein.de>
2024-05-09 13:50:00 -07:00
Austin Lucas Lake f4e06e5482
capitalized GPG in documentation
Co-authored-by: Felix Fontein <felix@fontein.de>
2024-05-09 13:45:26 -07:00
Austin Lucas Lake 473ee13b64
added more integration tests 2024-05-09 13:42:14 -07:00
Austin Lucas Lake 2255f5e31a
fixed bad parameter matching 2024-05-09 13:41:34 -07:00
Austin Lucas Lake 540545e0be
fixed secret key regex parsing and key matching for usage parameter 2024-05-09 00:15:42 -07:00
Austin Lucas Lake 18fabaef95
updated code spacing and fixed text processing for key matching 2024-05-08 19:10:59 -07:00
Austin Lucas Lake 6edf177713
adding missing extraction of capture group from fingerprint regex 2024-05-06 15:00:11 -07:00
Austin Lucas Lake 7ce40a8610
removed no_log from fingerprints 2024-05-06 14:37:42 -07:00
Austin Lucas Lake 8e0069444f
utilize user-id to match against for key deletion 2024-05-06 13:30:17 -07:00
Austin Lucas Lake 4c32b07dd1
fixed regex parsing for fingerprint after key generation 2024-05-06 13:29:11 -07:00
Austin Lucas Lake 051b1be3c3
fixed incorrect variable name during assertion 2024-05-06 11:49:53 -07:00
Austin Lucas Lake c77ef5d18d
fixed syntax errors 2024-05-06 11:46:01 -07:00
Austin Lucas Lake 9df8799eec
updated integration test to force new key generation 2024-05-06 11:40:27 -07:00
Austin Lucas Lake d826d901e6
consolidated functions and added parameter to force new key generation 2024-05-06 11:37:34 -07:00
Austin Lucas Lake 899118fab9
added missing quotations for template expression 2024-05-06 04:16:42 -07:00
Austin Lucas Lake 3ff3d83c91
fixed incorrect variable name when parsing regex 2024-05-06 03:58:55 -07:00
Austin Lucas Lake 20fd3810d2
delete key using returned fingerprint 2024-05-06 03:44:24 -07:00
Austin Lucas Lake 4a7467a596
provide bin path for gpg executable 2024-05-06 03:42:59 -07:00
Austin Lucas Lake 90cf71281a
set defaults for all list-type parameters to empty list and ipdated regex searches 2024-05-06 02:48:38 -07:00
Austin Lucas Lake a70469ac13
fixed over-indentations 2024-05-05 21:06:16 -07:00
Austin Lucas Lake 01d6ee2b31
updated documentation for check_mode and diff_mode attributes 2024-05-05 20:20:46 -07:00
Austin Lucas Lake 4891695dc1
set subkeys parameter default to be empty list 2024-05-05 20:08:59 -07:00
Austin Lucas Lake 965b667bfc
reformated argument lists for run_module calls 2024-05-05 18:41:42 -07:00
Austin Lucas Lake 091c5d4503
removed extraneous character that was causing syntax error 2024-05-05 17:21:59 -07:00