44 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	f3f484cee2	Log errors using slog.Logger ... This commit allows logging errors in a slog.Logger injected in the context. This type of logger is not currently used directly in step-ca, but this will change in the future.	5 days ago
Dominic Evans	231b5d8406	chore(deps): upgrade github.com/go-chi/chi to v5 ... Upgrade chi to the v5 module path to avoid deprecation warning about v4 and earlier on the old module path. See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4 Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>	8 months ago
Mariano Cano	fd4e96d1f4	Rename method to IsChallengeEnabled	2 years ago
Mariano Cano	59c5219a07	Use a type for acme challenges	2 years ago
Mariano Cano	bca311b05e	Add acme property to enable challenges ... Fixes #1027	2 years ago
Mariano Cano	693dc39481	Merge branch 'master' into device-attestation	2 years ago
max furman	b7c2f6c482	Check for DNS name validity	2 years ago
Mariano Cano	66356cff43	Add attestation certificate validation for Apple devices	2 years ago
Brandon Weeks	7e1b0bebd9	iOS 16 beta 1 support	2 years ago
Brandon Weeks	2ac8b69da2	Add ACME permanent-identifier identifier type	2 years ago
Herman Slatman	abfbbc8d49	Merge pull request #946 from smallstep/herman/acme-csr-padding ... Strip base64-url padding from ACME CSR	2 years ago
Herman Slatman	fd546287ac	Strip base64-url padding from ACME CSR ... This commit strips the padding from a base64-url encoded CSR submitted by a client that doesn't use raw base64-url encoding.	2 years ago
Mariano Cano	d461918eb0	Merge branch 'master' into context-authority	2 years ago
Mariano Cano	6f9d847bc6	Fix panic in acme/api tests.	2 years ago
Mariano Cano	d1f75f1720	Refactor ACME api.	2 years ago
Mariano Cano	d13537d426	Use context in the acme handlers.	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	fb81407d6f	Fix ACME policy comments	2 years ago
Herman Slatman	a9f033ece5	Fix JSON property name for ACME policy	2 years ago
Herman Slatman	256fe113f7	Improve tests for ACME account policy	2 years ago
Herman Slatman	7df52dbb76	Add ACME EAB policy	2 years ago
Herman Slatman	2fbdf7d5b0	Merge branch 'master' into herman/allow-deny	2 years ago
Panagiotis Siatras	00634fb648	api/render, api/log: initial implementation of the packages (#860) ... * api/render: initial implementation of the package * acme/api: refactored to support api/render * authority/admin: refactored to support api/render * ca: refactored to support api/render * api: refactored to support api/render * api/render: implemented Error * api: refactored to support api/render.Error * acme/api: refactored to support api/render.Error * authority/admin: refactored to support api/render.Error * ca: refactored to support api/render.Error * ca: fixed broken tests * api/render, api/log: moved error logging to this package * acme: refactored Error so that it implements render.RenderableError * authority/admin: refactored Error so that it implements render.RenderableError * api/render: implemented RenderableError * api/render: added test coverage for Error * api/render: implemented statusCodeFromError * api: refactored RootsPEM to work with render.Error * acme, authority/admin: fixed pointer receiver name for consistency * api/render, errs: moved StatusCoder & StackTracer to the render package	2 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2 years ago
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	2 years ago
Herman Slatman	3ec9a7310c	Fix ACME order identifier allow/deny check	2 years ago
Herman Slatman	6440870a80	Clean up, improve test cases and coverage	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago
Herman Slatman	523ae96749	Change identifier and challenge types to consts	3 years ago
Herman Slatman	76dcf542d4	Fix mixed DNS and IP SANs in Order	3 years ago
Herman Slatman	a0e92f8e99	Verify IP identifier contains valid IP	3 years ago
Herman Slatman	6486e6016b	Make logic for which challenge types to use clearer	3 years ago
Herman Slatman	3e36522329	Add preliminary support for TLS-ALPN-01 challenge for IP identifiers	3 years ago
Herman Slatman	6d9710c88d	Add initial support for ACME IP validation	3 years ago
max furman	b1888fd34d	Use different method for unescpaed paths for the router	3 years ago
max furman	1831920363	Finish order unit tests and remove unused mocklinker	3 years ago
max furman	b6ebc0fd25	more unit tests	3 years ago
max furman	f72b2ff2c2	[acme db interface] nosql authz unit tests	3 years ago
max furman	116869ebc5	[acme db interface] wip	3 years ago
max furman	80a6640103	[acme db interface] wip	3 years ago
max furman	1135ae04fc	[acme db interface] wip	3 years ago
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago