Commit Graph

3015 Commits (herman/acme-da-roots)
 

Author SHA1 Message Date
Mariano Cano 400b1ece0b Remove scep handler after merge. 2 years ago
Mariano Cano 898ca41268 Merge branch 'master' into context-authority 2 years ago
Herman Slatman ea084d71fb
Merge pull request #933 from smallstep/herman/allow-deny
Fix check for admin not belonging to provisioner that policy applies to
2 years ago
Herman Slatman c695b23e24
Fix check for admin not belonging to policy 2 years ago
max furman 25b8d196d8 Couple changes in response to PR
- add skipInit option to skip authority initialization
- check admin API status when removing provisioners - no need to check
  admins when not using Admin API
2 years ago
Mariano Cano d0c0733691
Merge pull request #924 from vijayjt/vijayt/helmchart-kms
Allow KMS type to be specified in the helm chart values YAML
2 years ago
Herman Slatman 7030dbb7a1
Use github.com/smallstep/pkcs7 fork with patches applied 2 years ago
Herman Slatman d51913f62a
Merge pull request #917 from smallstep/herman/scep-get
Add SCEP GET requests
2 years ago
Mariano Cano 8942422973 Add GetID() and add authority to initial context 2 years ago
Herman Slatman 688ae837a4
Add some tests for SCEP request decoding 2 years ago
Herman Slatman c9a89d13ee
Merge branch 'master' into herman/scep-get 2 years ago
Mariano Cano 1e03bbb1af Change types in the ACMEAdminResponder 2 years ago
Mariano Cano f639bfc53b Use contexts on the new PolicyAdminResponder 2 years ago
Mariano Cano d461918eb0 Merge branch 'master' into context-authority 2 years ago
Herman Slatman 65090daac3
Merge pull request #788 from smallstep/herman/allow-deny
Add allow/deny policy for x509 SANs and SSH Principals
2 years ago
Herman Slatman cc26a0b394
Explicitly disable wildcard Common Name constraint 2 years ago
Herman Slatman 0f4ffa504a
Fix linting issues 2 years ago
Herman Slatman 7104299119
Add full policy validation in API 2 years ago
Mariano Cano 2ea0c70344 Move acme context middleware to deprecated handler 2 years ago
Herman Slatman ed231d29e2
Update to go.step.sm/linkedca@v0.16.1 2 years ago
Herman Slatman 105211392c
Don't rely on linkedca model stability in API response bodies 2 years ago
Herman Slatman 5e9bce508d
Unexport GetPolicy() 2 years ago
Herman Slatman f0272dc717
Fix import replacement of linkedca 2 years ago
Herman Slatman 60d8b22d89
Change context retrievers to MustTFromContext 2 years ago
Mariano Cano d51c6b7d83 Make step handler backward compatible 2 years ago
Mariano Cano 43ddcf2efe Do not use deprecated AuthorizeSign 2 years ago
vijayjt 02c0ae81ac Allow KMS type to be specified in the helm chart template if specified on the command line. 2 years ago
Mariano Cano 62d93a644e Apply base context to test of the ca package 2 years ago
Mariano Cano 9147356d8a Fix linter errors 2 years ago
Mariano Cano a8a4261980 Fix authority/admin/api tests 2 years ago
Mariano Cano 2ab7dc6f9d Fix acme tests. 2 years ago
Mariano Cano ba499eeb2a Fix acme/api tests. 2 years ago
Mariano Cano 6f9d847bc6 Fix panic in acme/api tests. 2 years ago
Herman Slatman 723c4c14c0
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 77893ea55c
Change authority policy to use dbPolicy model 2 years ago
Herman Slatman 13173ec8a2
Fix SCEP GET requests 2 years ago
max furman 4cb74e7d8b fix linter warnings 2 years ago
Herman Slatman d82e51b748
Update AllowWildcardNames configuration name 2 years ago
Mariano Cano d1f75f1720 Refactor ACME api. 2 years ago
Mariano Cano fddd6f7d95 Move linker to the acme package. 2 years ago
Mariano Cano 55b0f72821 Add context methods for the acme linker. 2 years ago
Herman Slatman 2b7f6931f3
Change Subject Common Name verification
Subject Common Names can now also be configured to be allowed or
denied, similar to SANs. When a Subject Common Name is not explicitly
allowed or denied, its type will be determined and its value will be
validated according to the constraints for that type of name (i.e. URI).
2 years ago
Mariano Cano bb8d85a201 Fix unit tests - work in progress 2 years ago
Mariano Cano 42435ace64 Use scep authority from context
This commit also converts all the methods from the handler to
functions.
2 years ago
Mariano Cano 688f9ceb56 Add scep authority to context. 2 years ago
Mariano Cano 216d8f0efb Handle acme requests with the new api 2 years ago
Mariano Cano d13537d426 Use context in the acme handlers. 2 years ago
Mariano Cano 439cb81b13 Use admin Route function 2 years ago
Mariano Cano 8bd4e1d73e Inject the acme database in the context 2 years ago
Mariano Cano bd412c9f42 Add context methods for the acme database 2 years ago