178 Commits (master)

Author	SHA1	Message	Date
max furman	df05340521	fixing broken unit tests	3 years ago
max furman	f72b2ff2c2	[acme db interface] nosql authz unit tests	3 years ago
max furman	074ab7b221	[acme db interface] add linker tests	3 years ago
max furman	8d2ebcfd49	[acme db interface] more unit tests	3 years ago
max furman	20b9785d20	[acme db interface] continuing unit test work	3 years ago
max furman	291fd5d45a	[acme db interface] more unit tests	3 years ago
max furman	f71e27e787	[acme db interface] unit test progress	3 years ago
max furman	bb8d54e596	[acme db interface] unit tests compiling	3 years ago
max furman	f20fcae80e	[acme db interface] wip unit test fixing	3 years ago
max furman	fc395f4d69	[acme db interface] compiles!	3 years ago
max furman	116869ebc5	[acme db interface] wip	3 years ago
max furman	80a6640103	[acme db interface] wip	3 years ago
max furman	1135ae04fc	[acme db interface] wip	3 years ago
max furman	2ae43ef2dc	[acme db interface] wip errors	3 years ago
Mariano Cano	c94a1c51be	Merge branch 'master' into ssh-cert-templates	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
max furman	55bf5a4526	Add cert logging for acme/certificate api	4 years ago
David Cowden	a26b5f322d	acme/api: Brush up documentation on key-change ... Add more specific wording describing what a 501 means and add more color explaining how official vs unofficial error types should be handled.	4 years ago
David Cowden	b26e6e42b3	acme: Return 501 for the key-change route ... RFC 8555 § 7.3.5 is not listed as optional but we do not currently support it. Rather than 404, return a 501 to inform clients that this functionality is not yet implemented. The notImplmented error type is not an official error registered in the ietf:params:acme:error namespace, so prefix if with step:acme:error. An ACME server is allowed to return other errors and clients should display the message detail to users. Fixes: https://github.com/smallstep/certificates/issues/209	4 years ago
max furman	6e69f99310	Always set nbf and naf for new ACME orders ... ... - Use the default value from the ACME provisioner if values are not defined in the request.	4 years ago
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	4 years ago
Clive Jevons	639993bd09	Read host and protocol information from request for links ... When constructing links we want to read the required host and protocol information in a dynamic manner from the request for constructing ACME links such as the directory information. This way, if the server is running behind a proxy, and we don't know what the exposed URL should be at runtime, we can construct the required information from the host, tls and X-Forwarded-Proto fields in the HTTP request. Inspired by the LetsEncrypt Boulder project (web/relative.go).	4 years ago
max furman	4cb777bdc1	ACME accountUpdate ignore fields not recognized by the server.	4 years ago
max furman	c255274572	Should be returning status code 400 for ACME Account Not Found. ... Issue #173	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
max furman	7aec7c2612	Create ACME database tables when initializing ACME autority.	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago