Commit Graph

1720 Commits

Author SHA1 Message Date
Bryan Frimin
cf186a4120 Add support for persistent ACME account keys
Allow ACME account keys to be configured via config file to maintain
the same Let's Encrypt account across deployments. Add DecodePrivateKey
function with PEM block type constants to support EC, RSA, and PKCS8
key formats. When no account key is provided, fall back to generating
a new one with a warning.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
ea525ac1a7 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
bb373d475b Replace string-based error matching with sentinel error
Introduced ErrHTTPChallengeRequired as a sentinel error and updated the
renewal flow to use errors.Is() for type-safe error checking instead of
string matching.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
c0d5095f91 Fix ECDSA signature test to use pre-hashed data
ECDSA's Sign() method expects already-hashed data when a hash function
is specified. The test was incorrectly passing unhashed data with
crypto.SHA256, causing signature operations to fail.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
359aaab1b4 Remove row level encryption for certificate
certificate is public no need to encrypt it

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
2158a910a2 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
2865b484bc Add cusotmizable cname target domain
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
a525309b61 Add custom domain graphql API
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:51 +02:00
Bryan Frimin
ae6b8a3858 Add service impl
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:48 +02:00
Bryan Frimin
f189f330b5 Start certmanager and new tls server with custom crts
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:38 +02:00
Bryan Frimin
06d64ae999 Put SSLStatus not nullable
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
332b7faa5b Add cached certificates
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
f9f30c8b02 Fix logger name
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
9ac499c01b Only use status for certificate selection
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
4e2eb90296 Fix SQL syntax missing AND
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
6ff8386818 Rename pkg in certmanager
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
fe58eb527e Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
de8778dbfe Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
20b0d639ac Rename cache table
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
e94086e1e0 Add database migration
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
eb11eb0970 Add ACME workers
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
49f4147e4a Migrate from DNS to HTTP challenge
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
acb6348d40 Fix renew require new challenge
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
5ae8699535 Add useragent helper
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
1618a99ca9 Add cache warmer worker
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
1785c00f3d Add domain and cache domain coredata
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Bryan Frimin
f0ced47fd6 Add ACME service
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Bryan Frimin
ef1cd02fc8 Add gen key crypto helper
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Bryan Frimin
c2978221d7 Add PEM encoder helper
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Sacha Al Himdani
18c751b9ad Fix vendor compliance reports migration
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-09 14:52:06 +02:00
Sacha Al Himdani
49326e559b Fix file evidence migration
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-09 13:58:24 +02:00
Sacha Al Himdani
04fc1bfa9d Remove file deletion functions
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-08 18:32:37 +02:00
Sacha Al Himdani
39ed524f4f Remove evidence file deletion and guard missing file
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-08 17:56:00 +02:00
Sacha Al Himdani
b7b684ecbc Fix file evidence migration
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-08 17:21:19 +02:00
Yannis Varni
ff7ba08fc1 File refs in one table
Added a file service
Refactored evidence and vendor compliance associated services and resolvers
Created SQL migration scripts
Updated GraphQL schema accordingly and the UI components
Removed unused methods and resolvers for evidence service

Signed-off-by: Yannis Varni <yannis@edinomis.fr>
2025-10-08 17:21:19 +02:00
Sacha Al Himdani
cf9418d487 Fix access to public documents for unauthenticated users
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-06 11:22:04 +02:00
Sacha Al Himdani
8504830c4b Add public trust center documents
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-06 11:04:47 +02:00
Sacha Al Himdani
4adefef448 Handle missing NDA
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-06 09:39:42 +02:00
Sacha Al Himdani
e2f3cd1a8d Add missing s3 metadata
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-03 15:17:54 +02:00
Sacha Al Himdani
51273d820a Fix asset owner deletion
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-03 12:30:09 +02:00
Sacha Al Himdani
9fdf927c9b Handle document mapping conflict error
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-03 11:05:15 +02:00
Sacha Al Himdani
9844d85a3e Add measure name order
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-03 10:44:34 +02:00
Sacha Al Himdani
770a795cd3 Add granular trust center access
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-01 14:54:32 +02:00
Sacha Al Himdani
ec716e587c Remove document description and footer
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-30 20:32:16 +02:00
Sacha Al Himdani
56a666b7e8 Add export document pdf options
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-30 18:00:08 +02:00
Sacha Al Himdani
f61ad48b59 Remove description
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-30 17:54:50 +02:00
Sacha Al Himdani
f3194def05 Embed trust center v2 in the go backend
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-30 17:48:54 +02:00
Sacha Al Himdani
e32927ccf6 Add nodes to trust center api
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-30 16:32:36 +02:00
Jonathan
55e85e5f67 Add trust center v2
Signed-off-by: Jonathan <contact@grafikart.fr>
2025-09-30 16:23:22 +02:00
Sacha Al Himdani
44898be9d3 Remove error for nda url in public trust center
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-09-26 19:20:09 +02:00