Michael Kaufmann (d00p)
f2a79d4d96
add new security.limit_extensions setting to fpm-daemon settings
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2018-01-10 15:20:19 +01:00
Michael Kaufmann (d00p)
9312e4967e
fix access to idle-timeout setting which moved from global settings to per-fpm-daemon setting, thx to gunnyst for pointing this out
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2018-01-10 08:45:20 +01:00
Michael Kaufmann (d00p)
9aaadb1f8b
implement lets-encrypt api-v02 (testing only currently; not activated in froxlor, test with 'php froxlor_master_cronjob.php --letsencrypt_v2 --debug' but set api endpoint to staging); no chain is returned currently, seems to be a known bug
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2018-01-09 14:40:36 +01:00
Michael Kaufmann (d00p)
d8abe30c44
create dummy pool-config whenever a fpm-daemons configdir is empty so it still restarts
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2018-01-09 09:25:56 +01:00
Michael Kaufmann (d00p)
07caf55f79
fixes to multi-fpm in cron
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2018-01-08 09:16:00 +01:00
Michael Kaufmann (d00p)
73868b7947
soften the file cleaning to reduce risk
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2018-01-07 23:31:39 +01:00
Michael Kaufmann (d00p)
af55fe5b82
add possibility to add multiple php-fpm instances
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2018-01-07 14:55:25 +01:00
Michael Kaufmann (d00p)
66a4309fe5
add setting to disable LE self-check; set version to 0.9.38.8 for maintenance/bugfix release
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-12-31 11:18:59 +01:00
Michael Kaufmann (d00p)
5540b02e35
do not remove Let's Encrypt token when self-check fails but rather give out the information as warning. The self-check fails for many users due to different local configurations and might not always be correct; fixes #480
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-11-27 07:54:41 +01:00
Michael Kaufmann (d00p)
1e03946df7
set sql_mode to disable STRICT_MODE usage for froxlor, thx to albech for the hint
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-11-08 07:49:40 +01:00
Michael Kaufmann (d00p)
15b62aae04
add inserttask for config regeneration and fix aliasdomain NULL value if empty, fixes #478
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-10-06 09:29:49 +02:00
Michael Kaufmann (d00p)
b263b211a5
generate multiline txt-record if content is too long, fixes #472
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-08-28 15:35:07 +02:00
Michael Kaufmann (d00p)
64ebb0ca38
also add http2 flag to domain-import
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-08-24 15:27:47 +02:00
Pascal Querner
82c719d786
dont send uri to challenge, if no valid token could be fetched
2017-07-07 22:50:39 +02:00
Michael Kaufmann (d00p)
9db7434876
add letsencrypt, HSTS settings, oscp-stapling and phpenabled-flag to Domain-import; fixes #416
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-04-18 16:55:55 +02:00
Max Khon
95b7b57fc6
Skip views when altering table charsets.
2017-04-15 16:12:29 +07:00
Daniel Reichelt
ec1bd6e19a
add OCSP stapling support for apache2 and nginx
2017-04-11 17:09:34 +02:00
Michael Kaufmann (d00p)
c0fddbce81
use correct pagination in admin-log/customer-log, fixes #1726
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-03-08 14:04:40 +01:00
Michael Kaufmann (d00p)
338cf161d2
fix undefined index if let's encrypt is used for the froxlor-vhost
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2017-01-14 18:06:04 +01:00
Michael Kaufmann (d00p)
437446c49d
update phpMailer to 5.2.21
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-12-29 10:54:25 +01:00
Michael Kaufmann (d00p)
4502f7ddf5
fix Settings::Flush(), thx to Ithariel
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-12-16 10:17:48 +01:00
Michael Kaufmann
602c38dbeb
Merge branch 'master' into feature/letsencrypt-verbesserungen
2016-12-11 08:23:46 +01:00
Michael Kaufmann
3d4b56b233
Merge branch 'master' into master
2016-12-11 08:19:16 +01:00
Michael Kaufmann (d00p)
001786dd97
fix incorrect User-Agent header in let's encrypt class, fixes #1683
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-12-09 13:33:57 +01:00
micw
7b6bbcec48
Fixed default LE license URL
...
(removed testing stuff)
2016-11-27 12:45:06 +01:00
Michael Wyraz
18b45c749d
Better handling for letsencrypt errors after failed registration or changed license
2016-11-25 09:54:47 +01:00
Dominic Schallert
e5053bad15
Introduced phpenabled_customer and phpenabled_vhost, updated cron scripts, updated dbversion
2016-11-13 15:15:43 +01:00
Michael Kaufmann (d00p)
7e4164da26
do not double validate openbasedir-values, as appendOpenbasedirPath() already takes care of that; also fix /dev/urandom as openbasedir-path-value to be treated as file correctly, fixes #1669
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-11-10 10:07:00 +01:00
Michael Kaufmann (d00p)
4a3e02c1f0
add HSTS for domains (admin-side) and froxlor-vhost; fixes #1660
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-10-07 11:01:45 +02:00
Michael Kaufmann (d00p)
9799e05ce4
idna convert the whole URI for uri's in docroot as redirect, fixes #1654
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-22 07:46:50 +02:00
Michael Kaufmann (d00p)
6a85c37b48
do not replace multiple quotes with just one, as it leads to possible syntax-errors in php.ini, thx to hp7007
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-19 12:17:56 +02:00
Michael Kaufmann (d00p)
b8c2047379
try to implement ssl-redirect for froxlor-vhost; combine various settings that are froxlor-vhost related into its own category, fixes #1480
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-11 17:48:08 +02:00
Jens A. Koch
c51840e760
bugfix for error, when trying to call function logAction() on undefined var $cronlog
2016-09-11 12:00:26 +02:00
Michael Kaufmann (d00p)
e4887362ec
added let's encrypt for froxlor vhost - untested for now, testers are welcome
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-09-05 17:01:10 +02:00
Oliver Rahner
9260319ac1
Letsencrypt: only update registration when necessary
...
if no Terms of Service are presented by the ACME server when registering, don't update registration
2016-09-04 21:27:23 +02:00
Oliver Rahner
34767a14d5
Remove dependency on hard coded agreement URL for Let's Encrypt
...
Change the process to first create a new registration, which delivers the current TOS url in the response's header, then modify the newly created registration to accept the agreement.
2016-08-31 16:35:59 +02:00
Oliver Rahner
7f56e98009
do not die after token self check
...
We have to finish the challenge request so that the auth does not linger in state "pending", but goes to "invalid". See https://forum.froxlor.org/index.php/topic/13463-lets-encrypt-zertifikate-werden-nicht-erneuert/#entry32895
2016-08-29 10:46:21 +02:00
Michael Kaufmann (d00p)
a840905166
set version specific user-agent in lescript like we do in ajax stuff
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-28 14:07:13 +02:00
w6g23
d31589ba99
Set a User Agent in the HTTP request fetching the LE challenge URI for self check
...
A rule (e.g. Wordpress plugin iThemes) might block requests with empty
User Agents.
2016-08-28 12:59:09 +02:00
Michael Wyraz
dd4cfebe75
append wildcards to search if user did not enter any
2016-08-22 15:55:13 +02:00
Michael Kaufmann (d00p)
468d20ee57
really reuse old csr if given + code formatting
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-06 09:32:03 +02:00
Michael Kaufmann (d00p)
cd806b19f7
update let's encrypt subscriber agreement to v1.1.1
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-06 07:40:14 +02:00
Michael Kaufmann (d00p)
b2f815617c
Update Let's Encrypt subscriber agreement, fixes #1644
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-04 07:40:08 +02:00
Michael Kaufmann (d00p)
ceaa0fcf5c
Update phpMailer to version 5.2.16
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-02 08:50:22 +02:00
Michael Kaufmann (d00p)
aa76ae4ddc
check for uid/gid or username/groupname correctly in config-xml files, fixes #1642
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-08-01 08:47:45 +02:00
Michael Wyraz
54e2f83b17
function Settings::IsInList that tests if an option of a multi-select setting is set
2016-07-22 10:30:13 +02:00
Daniel Reichelt
7d2c64ce63
generic html form handling: don't remove leading tabs
...
(+remove commented out code in the vicinity, probably debugging remnants)
2016-06-24 08:43:02 +02:00
Michael Kaufmann (d00p)
6f8aa1cbc0
update another idnaconvert related class
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-19 20:22:00 +02:00
Michael Kaufmann (d00p)
b22e70804b
update new IdnaConvert class with needed fixes in them
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-19 20:15:33 +02:00
Michael Kaufmann (d00p)
5789e9a8a4
re-add old IDNA class so we do not have to force the php-5.6 requirement for froxlor
...
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org >
2016-06-19 18:59:44 +02:00