Commit Graph

2776 Commits (backports)
 

Author SHA1 Message Date
Mariano Cano 51c6d6a4f2 Backport some changes from v0.20.0 to a new branch 2 years ago
Herman Slatman ea084d71fb
Merge pull request #933 from smallstep/herman/allow-deny
Fix check for admin not belonging to provisioner that policy applies to
2 years ago
Herman Slatman c695b23e24
Fix check for admin not belonging to policy 2 years ago
Mariano Cano d0c0733691
Merge pull request #924 from vijayjt/vijayt/helmchart-kms
Allow KMS type to be specified in the helm chart values YAML
2 years ago
Herman Slatman d51913f62a
Merge pull request #917 from smallstep/herman/scep-get
Add SCEP GET requests
2 years ago
Herman Slatman 688ae837a4
Add some tests for SCEP request decoding 2 years ago
Herman Slatman c9a89d13ee
Merge branch 'master' into herman/scep-get 2 years ago
Herman Slatman 65090daac3
Merge pull request #788 from smallstep/herman/allow-deny
Add allow/deny policy for x509 SANs and SSH Principals
2 years ago
Herman Slatman cc26a0b394
Explicitly disable wildcard Common Name constraint 2 years ago
Herman Slatman 0f4ffa504a
Fix linting issues 2 years ago
Herman Slatman 7104299119
Add full policy validation in API 2 years ago
Herman Slatman ed231d29e2
Update to go.step.sm/linkedca@v0.16.1 2 years ago
Herman Slatman 105211392c
Don't rely on linkedca model stability in API response bodies 2 years ago
Herman Slatman 5e9bce508d
Unexport GetPolicy() 2 years ago
Herman Slatman f0272dc717
Fix import replacement of linkedca 2 years ago
Herman Slatman 60d8b22d89
Change context retrievers to MustTFromContext 2 years ago
vijayjt 02c0ae81ac Allow KMS type to be specified in the helm chart template if specified on the command line. 2 years ago
Herman Slatman 723c4c14c0
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 77893ea55c
Change authority policy to use dbPolicy model 2 years ago
Herman Slatman 13173ec8a2
Fix SCEP GET requests 2 years ago
Herman Slatman d82e51b748
Update AllowWildcardNames configuration name 2 years ago
Herman Slatman 2b7f6931f3
Change Subject Common Name verification
Subject Common Names can now also be configured to be allowed or
denied, similar to SANs. When a Subject Common Name is not explicitly
allowed or denied, its type will be determined and its value will be
validated according to the constraints for that type of name (i.e. URI).
2 years ago
max furman 88a1bf17cf Update to pull request template 2 years ago
Carl Tashian c82296b7cd
Merge pull request #910 from jschlyter/docker_hsm
Dockerfile for HSM-enabled Step CA
2 years ago
Herman Slatman 74a6e59b1f
Add tests for ProtoJSON and bad proto messages 2 years ago
Herman Slatman bddd08d4b0
Remove "proto:" prefix from bad proto JSON messages 2 years ago
Herman Slatman 6e1f8dd7ab
Refactor policy engines into container 2 years ago
Herman Slatman 2a7620641f
Fix more PR comments 2 years ago
Herman Slatman 76112c2da1
Improve error creation and testing for core policy engine 2 years ago
Jakob Schlyter c1425422dd include support for GCP and AWS KMS by default 2 years ago
Jakob Schlyter df8eca2c19 space 2 years ago
Herman Slatman 20f5d12b99
Improve test rigour for reloadPolicyEngines 2 years ago
Herman Slatman 6264e8495c
Improve policy error handling code coverage 2 years ago
Herman Slatman 3fa96ebf13
Improve policy errors returned to client 2 years ago
Jakob Schlyter 66ba6048a4 start pcscd if installed 2 years ago
Jakob Schlyter 6ee48ca631 add pcsc-lite 2 years ago
Jakob Schlyter 221ced5c51 add Dockerfile for building with HSM support 2 years ago
Herman Slatman a3c51881c7
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman c40a4d2694
Contain policy engines inside provisioner Controller 2 years ago
Herman Slatman ef110a94df
Change pointer booleans to regular boolean configuration 2 years ago
Herman Slatman e9f5a1eb98
Improve policy bad request handling 2 years ago
Herman Slatman b72430f4ea
Block all APIs when using linked deployment mode 2 years ago
Herman Slatman fb81407d6f
Fix ACME policy comments 2 years ago
Herman Slatman a2cfbe3d54
Fix (part of) PR comments 2 years ago
Carl Tashian 3424442c50
Merge pull request #906 from smallstep/install-step-ra-arm5
We now have an armv5 step-ca build; remove guard clause from RA installer
2 years ago
Carl Tashian a16facecc9
Merge pull request #905 from smallstep/carl/startup-msg-tweak
Cosmetic fix for consistency in the startup messages
2 years ago
Carl Tashian 340aa3206c We now have an armv5 step-ca build; remove guard clause from RA install script 2 years ago
Carl Tashian 97b64aa851 Cosmetic fix for consistency in the startup messages 2 years ago
max furman 605a959029 [action] attempt to pin goreleaser version 2 years ago
max furman 27b3d82f1d [action] goamd64 another attempt at fix 2 years ago