Add a simple rest api wrapping CLI commands for OCSP signing etc #12

rambo · 2023-11-14T23:24:50Z

No description provided.

…web server

…pper for ocspsign

…equested via REST

…rwise Nginx etc cannot know if the intermediate was revoked

…own REST API does not actually do the right way

rambo added 7 commits November 15, 2023 00:04

add composition for testing/documentation

1a70f91

start a python REST api wrapper for the OCSP signing CLI commands

f87c4bc

cli entrypoint stubs etc

52d1378

add route to call ocsprefresh and serve cli command for starting the …

de3bf97

…web server

add docker targets for the python api

420d7c8

add ocsprest to composition

25834f4

fix missing command in refresh, return outputs from call_cmd, add wra…

a6f6f28

…pper for ocspsign

rambo marked this pull request as draft November 14, 2023 23:24

This was referenced Nov 14, 2023

DRAFT: Add support for the OCSP/CRL refresh wrapper REST API pvarki/python-rasenmaeher-api#84

Closed

DRAFT: Add OCSP support pvarki/docker-rasenmaeher-integration#58

Closed

rambo added 2 commits November 15, 2023 21:57

we have to be in the correct working dir for -db to work

a22cc70

dump CRL on start and periodically during server lifetime (and when r…

0eeb61e

…equested via REST

rambo mentioned this pull request Nov 26, 2023

Add OCSP/CRL support pvarki/docker-rasenmaeher-integration#61

Merged

rambo added 2 commits January 27, 2024 21:06

we need to merge the root CAs CRL with the intermediates because othe…

6f9e1dc

…rwise Nginx etc cannot know if the intermediate was revoked

use the enum names for cert file names

8acd4f9

rambo force-pushed the oscp_rest_workaround branch from 6d8b122 to 5539f70 Compare January 28, 2024 19:51

make CI run unit tests for the REST wrapper

7db2f4d

rambo force-pushed the oscp_rest_workaround branch from 5539f70 to 7db2f4d Compare January 28, 2024 19:52

rambo added 11 commits January 28, 2024 22:29

report writing of the merged files too

29652fb

Add reminder to switch a helper to libpvarki

13eedc2

bump deps

c846651

this is going to be used for real soon:tm:

606330d

periodically refresh OCSP as well

3e387d8

add filename to the CRL url

04d20b5

bump deps, add gunicorn

38cd8b5

refactor for use with gunicorn

0fda492

refactor for multiple workers

0122b4a

handle logging under gunicorn

bb56251

use uvicorn as worker due to aio-libs/aiohttp#7038

0d99a68

rambo force-pushed the oscp_rest_workaround branch from e4053d4 to b1d6d05 Compare February 10, 2024 09:44

rambo added 3 commits February 10, 2024 11:58

refactor to FastAPI since aiohttp.web does not support ASGI

2dfaf90

compose wants code 1, not any nonzero for unhealthy

90dbbc4

adjust healthcheck timeouts

0d424e8

rambo force-pushed the oscp_rest_workaround branch from b1d6d05 to 0d424e8 Compare February 10, 2024 09:59

implement wrapper for signing certs via CLI since even *that* CFSSLs …

67f3d35

…own REST API does not actually do the right way

rambo force-pushed the oscp_rest_workaround branch from 0207d57 to 67f3d35 Compare February 10, 2024 13:33

rambo added 2 commits February 10, 2024 15:49

for merged type the resolve returns wrong result

bcae192

Document why we are not passing the config to cfssl serve

60142f5

rambo force-pushed the oscp_rest_workaround branch from 624e5b6 to 60142f5 Compare February 11, 2024 06:50

use new libadvian to use taskmaster to handle fire-ang-forget tasks

0ad552c

rambo mentioned this pull request Feb 23, 2024

integrate OCSP helpers pvarki/python-rasenmaeher-api#95

Merged

add first test, drop coverage requirements

c4b7e7e

rambo changed the title ~~DRAFT: Add a simple rest api wrapping CLI commands for OCSP signing etc~~ Add a simple rest api wrapping CLI commands for OCSP signing etc Feb 26, 2024

rambo marked this pull request as ready for review February 26, 2024 17:29

karppo approved these changes Feb 26, 2024

View reviewed changes

rambo merged commit 55358b6 into main Feb 26, 2024
3 checks passed

rambo deleted the oscp_rest_workaround branch February 26, 2024 20:20

rambo mentioned this pull request Mar 11, 2024

Enable OCSP responder #9

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add a simple rest api wrapping CLI commands for OCSP signing etc #12

Add a simple rest api wrapping CLI commands for OCSP signing etc #12

rambo commented Nov 14, 2023

Add a simple rest api wrapping CLI commands for OCSP signing etc #12

Add a simple rest api wrapping CLI commands for OCSP signing etc #12

Conversation

rambo commented Nov 14, 2023