4 Commits

Author	SHA1	Message	Date
Joshua Tauberer	d53332b7cf	drop the CSR_COUNTRY setting and ask within the control panel	2015-12-26 11:48:23 -05:00
Joshua Tauberer	392d33b902	change DANE TLSA record to hash the subject public key rather than the whole certificate, which means it is good for any certificate tied to the same private key ... Better for short-lived certificates. This is especially in preparation to using certificates from Let's Encrypt. see #268	2015-12-26 11:01:46 -05:00
Joshua Tauberer	be9efe0273	ensure malformed ssl certificate can't cause it to be written to an arbitrary path	2015-11-29 14:04:37 +00:00
Joshua Tauberer	766b98c4ad	refactor: move SSL-related management functions into a new module ssl_certificates.py	2015-11-29 13:59:22 +00:00