Commit Graph

2732 Commits

Author SHA1 Message Date
Bryan Frimin
c4ac8a9c93 Fix path loading error
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:06:42 +02:00
Bryan Frimin
65b7d90d61 Update trust center handler
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:06:40 +02:00
Bryan Frimin
5c1531bd2b Fix SQL query syntax
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:57 +02:00
Bryan Frimin
7fb56d7859 Fix SQL syntax error
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:56 +02:00
Bryan Frimin
26c7364e27 Remove insecure acme option
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:56 +02:00
Bryan Frimin
242104bc10 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:56 +02:00
Bryan Frimin
2f505497c1 Fix error not wrapped
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
e55bbf97d7 Update service
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
a2485ec6fa Remove decrypt key by default
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
17ea259d8d Update graphql api
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:55 +02:00
Bryan Frimin
7a4046ad65 Adapt to new sql model
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:54 +02:00
Bryan Frimin
7d7acbcf14 Enforce only one domain per organization
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:54 +02:00
Bryan Frimin
cf186a4120 Add support for persistent ACME account keys
Allow ACME account keys to be configured via config file to maintain
the same Let's Encrypt account across deployments. Add DecodePrivateKey
function with PEM block type constants to support EC, RSA, and PKCS8
key formats. When no account key is provided, fall back to generating
a new one with a warning.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
ea525ac1a7 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
bb373d475b Replace string-based error matching with sentinel error
Introduced ErrHTTPChallengeRequired as a sentinel error and updated the
renewal flow to use errors.Is() for type-safe error checking instead of
string matching.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
c0d5095f91 Fix ECDSA signature test to use pre-hashed data
ECDSA's Sign() method expects already-hashed data when a hash function
is specified. The test was incorrectly passing unhashed data with
crypto.SHA256, causing signature operations to fail.

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:53 +02:00
Bryan Frimin
359aaab1b4 Remove row level encryption for certificate
certificate is public no need to encrypt it

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
2158a910a2 Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
2865b484bc Add cusotmizable cname target domain
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:52 +02:00
Bryan Frimin
a525309b61 Add custom domain graphql API
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:51 +02:00
Bryan Frimin
ae6b8a3858 Add service impl
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:04:48 +02:00
Bryan Frimin
f189f330b5 Start certmanager and new tls server with custom crts
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:38 +02:00
Bryan Frimin
06d64ae999 Put SSLStatus not nullable
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
332b7faa5b Add cached certificates
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
f9f30c8b02 Fix logger name
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
9ac499c01b Only use status for certificate selection
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:37 +02:00
Bryan Frimin
4e2eb90296 Fix SQL syntax missing AND
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
6ff8386818 Rename pkg in certmanager
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
fe58eb527e Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:36 +02:00
Bryan Frimin
de8778dbfe Style
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
20b0d639ac Rename cache table
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
e94086e1e0 Add database migration
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:35 +02:00
Bryan Frimin
eb11eb0970 Add ACME workers
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
49f4147e4a Migrate from DNS to HTTP challenge
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
acb6348d40 Fix renew require new challenge
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
5ae8699535 Add useragent helper
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
1618a99ca9 Add cache warmer worker
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:34 +02:00
Bryan Frimin
1785c00f3d Add domain and cache domain coredata
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Bryan Frimin
f0ced47fd6 Add ACME service
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Bryan Frimin
ef1cd02fc8 Add gen key crypto helper
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Bryan Frimin
c2978221d7 Add PEM encoder helper
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-10-09 15:03:33 +02:00
Sacha Al Himdani
18c751b9ad Fix vendor compliance reports migration
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-09 14:52:06 +02:00
Sacha Al Himdani
49326e559b Fix file evidence migration
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-09 13:58:24 +02:00
Sacha Al Himdani
04fc1bfa9d Remove file deletion functions
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-08 18:32:37 +02:00
Sacha Al Himdani
39ed524f4f Remove evidence file deletion and guard missing file
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-08 17:56:00 +02:00
Sacha Al Himdani
b7b684ecbc Fix file evidence migration
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-08 17:21:19 +02:00
Yannis Varni
ff7ba08fc1 File refs in one table
Added a file service
Refactored evidence and vendor compliance associated services and resolvers
Created SQL migration scripts
Updated GraphQL schema accordingly and the UI components
Removed unused methods and resolvers for evidence service

Signed-off-by: Yannis Varni <yannis@edinomis.fr>
2025-10-08 17:21:19 +02:00
Sacha Al Himdani
cf9418d487 Fix access to public documents for unauthenticated users
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-06 11:22:04 +02:00
Sacha Al Himdani
8504830c4b Add public trust center documents
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-06 11:04:47 +02:00
Sacha Al Himdani
4adefef448 Handle missing NDA
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-10-06 09:39:42 +02:00