| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
| |
We no longer call external OpenSSL commands at all.
|
| |
|
|
| |
We no longer call an external command.
|
| | |
|
| |
|
|
|
|
| |
This initiates a connection to the server to obtain certificate information to
generate interception certificates. At the moment, the information used is the
Common Name, and the list of Subject Alternative Names.
|
| |
|
|
|
|
| |
For some reason Satan's Operating System doesn't join up the certification path
if the key identifiers are set to hash. This took a few hours of trial and
error to figure out.
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- Use templates for config files. We can re-introduce customization of the
certificate attributes when we need them.
- Split CA and cert generation into separate functions.
- Generation methods provide an error return when generation fails.
- When the user explicitly specifies a certificate, we don't generate it, but
fail if it doesn't exist.
|
| | |
|
| |
|
