Commit Graph

3154 Commits (herman/acme-cname-txt)
 

Author SHA1 Message Date
Mariano Cano 34c6c65671 Pass attestation information to the Sign method
Attestation information might be useful in authorizing webhooks
2 years ago
Mariano Cano b0d24fb801 Fix test with gcloud local credentialss 2 years ago
Mariano Cano baeb053eca
Merge pull request #1053 from smallstep/acme-roots
Acme roots
2 years ago
Mariano Cano 498549c95c Extract common function used in tests 2 years ago
Mariano Cano 829530ae90 Fix linter errors 2 years ago
Mariano Cano 6b73a020e3 Add unit tests for apple and step attestations 2 years ago
Mariano Cano 42102d88d5 Fix merge and add unit tests 2 years ago
Mariano Cano ee7307bd41 Cherry-pick acme.go from acdfdf3 2 years ago
Mariano Cano 2505a68f69
Merge pull request #1052 from smallstep/fix-nil-pointer
Fix nil pointer exception
2 years ago
Mariano Cano 8fc4a58242 Fix nil pointer exception, missing error 2 years ago
max furman 25f0bf31f4
Update build status svg and link to github actions 2 years ago
Mariano Cano df975122a0 Upgrade linkedca and add entry to changelog 2 years ago
Mariano Cano 666f695616
Merge pull request #1048 from smallstep/attest-platform
Attestation Formats
2 years ago
Mariano Cano bb0210e875 Fix typo in linkedca variable 2 years ago
Mariano Cano 1e098aef5b Fixes ACMEAttestationFormat comment 2 years ago
Mariano Cano 66407139e5 Add methods to convert attestation formats 2 years ago
Mariano Cano 0f651799d0 Reject not enabled attestation formats 2 years ago
Mariano Cano 53ad3a9dbe Add go workspaces files to gitignore 2 years ago
Mariano Cano ba42aaf865 Add attestationFormat property in the ACME provisioner 2 years ago
Mariano Cano b2119e9f2c
Merge pull request #977 from smallstep/device-attestation
Device attestation
2 years ago
Mariano Cano fd4e96d1f4 Rename method to IsChallengeEnabled 2 years ago
Mariano Cano c77b4ff9c5 Fix linter errors 2 years ago
Mariano Cano 59c5219a07 Use a type for acme challenges 2 years ago
Mariano Cano a89bea701d Format comment 2 years ago
Mariano Cano 5df9434286 Fix old comment, device-attest-01 uses the acme payload 2 years ago
Mariano Cano c5d3714a63 Fix acme error map 2 years ago
Mariano Cano 08815c5e90 Reneame attestation statement error 2 years ago
Mariano Cano 3cd72ac72a Remove debug statements 2 years ago
Mariano Cano 55318efe13
Merge pull request #1043 from unreality/oidc-missing-email
Allow missing Email claim in OIDC tokens
2 years ago
Mariano Cano 1b68a9f961
Merge pull request #1045 from smallstep/deprecation-notice
Add deprecation notices to step-x-init binaries
2 years ago
Mariano Cano bc61b23d91 Add deprecation notices to step-x-init binaries
Fixes #1044
2 years ago
Raal Goff b89f210469 remove fail-email test and add ok-empty-email test 2 years ago
Mariano Cano a2749ca8ed Merge branch 'master' into device-attestation 2 years ago
Raal Goff 7a03c43fe2 allow missing Email claim in OIDC tokens, use subject when its missing 2 years ago
Mariano Cano e75e7e7cd6 Fix linter warnings 2 years ago
Mariano Cano 54d92095ac Validate proof of possession signature
On the step format, validate proof of possession of the private
key validating the signature in the attestation statement.
2 years ago
Mariano Cano 45af68b244 Upgrade go.step.sm/crypto 2 years ago
Mariano Cano d718c69ad3 Prepare changelog for release 2 years ago
Mariano Cano b8162d5954
Merge pull request #1034 from smallstep/fix-1033
Fixes signature algorithm
2 years ago
Mariano Cano a7fcfe0e4e Verify with roots and intermediates 2 years ago
Mariano Cano 30c54a555d Add entry in changelog 2 years ago
Mariano Cano ea8579f3df Fix bad signature algorithm on EC+RSA PKI
When the root certificate has an EC key and he intermediate has an
RSA key, the signature algorithm of the leafs should be the default
one, SHA256WithRSA, instead of the one that the intermediate has.

Fixes #1033
2 years ago
Mariano Cano 59b7603d1e Use a clientAuth only cert for device-attest-01 2 years ago
Mariano Cano 6db631df51 Upgrade go.step.sm/crypto@attest 2 years ago
Mariano Cano ca412e77cc Return error on attestation validation
The method storeError returns a nil error
2 years ago
Mariano Cano ab5f916bd3 Define ErrorBadAttestationStatement 2 years ago
Mariano Cano 735c9d49b0 Add support for yubikey attestation 2 years ago
Mariano Cano ebce40e9b6 Add new method ACMEClient.ValidateWithPayload
This new method will be used to validate to validate the device
attestation payload.
2 years ago
Mariano Cano a893d6e7f7 Upgrade go.step.sm/cli-utils
Fixes issue with step path
2 years ago
Mariano Cano 432477aa91
Merge pull request #1030 from smallstep/herman/fix-template-validation
Add provisioner template validation
2 years ago