Commit Graph

644 Commits

Author SHA1 Message Date
Bryan Frimin
c4c4fda49f Support ID-based trust center URLs with slug fallback
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-13 23:23:08 +02:00
Bryan Frimin
0c4a7169df Add procedure document type
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-13 22:36:37 +02:00
Bryan Frimin
b2392f51c4 Remove verifiedAt field from CustomDomain
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-13 22:19:43 +02:00
Bryan Frimin
f808a90bba Remove criticity on assets
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-13 22:06:49 +02:00
Bryan Frimin
344b340d1a Allow to filter measures by state
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-13 21:21:18 +02:00
Bryan Frimin
e109cb602e Add graphql log
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-11 23:14:45 +02:00
Bryan Frimin
916485e119 Fix retry on error
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-11 10:59:15 +02:00
Sacha Al Himdani
951adbc600 Use custom domain in trust center invitation
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-10 17:44:31 +02:00
Sacha Al Himdani
db904f08db Fix evidence deletion
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-10 15:43:40 +02:00
Bryan Frimin
3856dba38c Allow custom binding for trust center
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-10 11:44:05 +02:00
Bryan Frimin
39383662d7 Fix filename content type regression
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 17:03:35 +02:00
Bryan Frimin
503ff732fc Fix cookie not set on custom domain
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:06:42 +02:00
Bryan Frimin
c4ac8a9c93 Fix path loading error
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:06:42 +02:00
Bryan Frimin
65b7d90d61 Update trust center handler
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:06:40 +02:00
Bryan Frimin
5c1531bd2b Fix SQL query syntax
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:57 +02:00
Bryan Frimin
7fb56d7859 Fix SQL syntax error
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:56 +02:00
Bryan Frimin
26c7364e27 Remove insecure acme option
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:56 +02:00
Bryan Frimin
242104bc10 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:56 +02:00
Bryan Frimin
2f505497c1 Fix error not wrapped
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
e55bbf97d7 Update service
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
a2485ec6fa Remove decrypt key by default
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
17ea259d8d Update graphql api
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
7a4046ad65 Adapt to new sql model
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:54 +02:00
Bryan Frimin
7d7acbcf14 Enforce only one domain per organization
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:54 +02:00
Bryan Frimin
cf186a4120 Add support for persistent ACME account keys
Allow ACME account keys to be configured via config file to maintain
the same Let's Encrypt account across deployments. Add DecodePrivateKey
function with PEM block type constants to support EC, RSA, and PKCS8
key formats. When no account key is provided, fall back to generating
a new one with a warning.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
ea525ac1a7 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
bb373d475b Replace string-based error matching with sentinel error
Introduced ErrHTTPChallengeRequired as a sentinel error and updated the
renewal flow to use errors.Is() for type-safe error checking instead of
string matching.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
c0d5095f91 Fix ECDSA signature test to use pre-hashed data
ECDSA's Sign() method expects already-hashed data when a hash function
is specified. The test was incorrectly passing unhashed data with
crypto.SHA256, causing signature operations to fail.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
359aaab1b4 Remove row level encryption for certificate
certificate is public no need to encrypt it

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
2158a910a2 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
2865b484bc Add cusotmizable cname target domain
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
a525309b61 Add custom domain graphql API
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:51 +02:00
Bryan Frimin
ae6b8a3858 Add service impl
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:48 +02:00
Bryan Frimin
f189f330b5 Start certmanager and new tls server with custom crts
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:38 +02:00
Bryan Frimin
06d64ae999 Put SSLStatus not nullable
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
332b7faa5b Add cached certificates
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
f9f30c8b02 Fix logger name
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
9ac499c01b Only use status for certificate selection
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
4e2eb90296 Fix SQL syntax missing AND
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
6ff8386818 Rename pkg in certmanager
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
fe58eb527e Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
de8778dbfe Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
20b0d639ac Rename cache table
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
e94086e1e0 Add database migration
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
eb11eb0970 Add ACME workers
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
49f4147e4a Migrate from DNS to HTTP challenge
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
acb6348d40 Fix renew require new challenge
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
5ae8699535 Add useragent helper
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
1618a99ca9 Add cache warmer worker
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
1785c00f3d Add domain and cache domain coredata
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00