102 Commits (master)

Author	SHA1	Message	Date
verytrap	db92404342	chore: fix function names in comment ... Signed-off-by: verytrap <wangqiuyue@outlook.com>	1 month ago
Herman Slatman	e52836f0ab	Add `RS1` support for ACME `device-attest-01`	4 months ago
Herman Slatman	f2993c4c3b	Use the legacy `tpm2` package import	8 months ago
Herman Slatman	c952e9fc9d	Use `NewDetailedError` instead	9 months ago
Herman Slatman	f3c24fe875	Change how multiple identifiers are printed in errors	9 months ago
Herman Slatman	9a52675865	Return descriptive error when using unsupported format	10 months ago
Herman Slatman	0d3338ff3a	Return consistent ACME error types for specific cases	10 months ago
Herman Slatman	df22b8a303	Cleanup some leftover TODOs	10 months ago
Herman Slatman	dd9bf1e915	Add error details for the `step` format	10 months ago
Herman Slatman	9cbbd1d575	Add error details to ACME `tpm` format validation errors	10 months ago
Herman Slatman	979e0f8f51	Add error details to select error cases for `apple` format	10 months ago
Herman Slatman	e71b62e95c	Merge branch 'master' into herman/update-crypto-v0.29.4	1 year ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Herman Slatman	0c2b00f6a1	Depend on our fork of `go-attestation`	1 year ago
Herman Slatman	d9aa2c110f	Increase test coverage for AK certificate properties	1 year ago
Herman Slatman	ed1a62206e	Add additional verification of AK certificate	1 year ago
Herman Slatman	1c38e252a6	Cast `alg` to a valid `COSEAlgorithmIdentifier`	1 year ago
Herman Slatman	e25acff13c	Simplify `alg` validity check	1 year ago
Herman Slatman	9cd4b362f7	Extract the `ParseSubjectAlternativeNames` function	1 year ago
Herman Slatman	b6957358fc	Fix PR remarks ... - Root CA error message improved - Looping through intermediate certs - Change checking unhandled extensions to using `if`	1 year ago
Herman Slatman	09bd7705cd	Fix linting issues	1 year ago
Herman Slatman	f88ef6621f	Add `PermanentIdentifier` SAN parsing and tests	1 year ago
Herman Slatman	52023d6083	Add tests for `doTPMAttestationFormat`	1 year ago
Herman Slatman	ae30f6e96b	Add failing TPM simulator test	1 year ago
Herman Slatman	094f0521e2	Remove check for `PermanentIdentifier` from `tpm` format validation	1 year ago
Herman Slatman	589a62df74	Make validation of `tpm` format stricter	1 year ago
Herman Slatman	213b31bc2c	Simplify processing logic for unhandled critical extension	1 year ago
Herman Slatman	e1c7e8f00b	Return the CSR public key fingerprint for `tpm` format	1 year ago
Herman Slatman	6297bace1a	Merge branch 'master' into herman/acme-da-tpm	1 year ago
Herman Slatman	69489480ab	Add more complete `tpm` format validation	1 year ago
Mariano Cano	6ba20209c2	Verify CSR key fingerprint with attestation certificate key ... This commit makes sure that the attestation certificate key matches the key used on the CSR on an ACME device attestation flow.	1 year ago
Herman Slatman	0f9128c873	Fix linting issue and order of test SUT	1 year ago
Herman Slatman	2ab9beb7ed	Add tests for `deviceAttest01Validate`	1 year ago
Herman Slatman	ed61c5df5f	Cleanup some leftover debug statements	1 year ago
Herman Slatman	edee01c80c	Refactor debug utility	1 year ago
Herman Slatman	1c38113e44	Add ACME `Subproblem` for more detailed ACME client-side errors ... When validating an ACME challenge (`device-attest-01` in this case, but it's also true for others), and validation fails, the CA didn't return a lot of information about why the challenge had failed. By introducing the ACME `Subproblem` type, an ACME `Error` can include some additional information about what went wrong when validating the challenge. This is a WIP commit. The `Subproblem` isn't created in many code paths yet, just for the `step` format at the moment. Will probably follow up with some more improvements to how the ACME error is handled. Also need to cleanup some debug things (q.Q)	1 year ago
Herman Slatman	4cf25ede24	Merge branch 'master' into herman/acme-da-tpm	2 years ago
Mariano Cano	e27c6c529b	Add support for custom acme ports ... This change adds the flags --acme-http-port, --acme-tls-port, that combined with --insecure can be used to set custom ports for ACME http-01 and tls-alpn-01 challenges. These flags should only be used for testing purposes. Fixes #1015	2 years ago
Mariano Cano	21666ba887	Revert "Set timestamp when marking an acme challenge invalid" ... This reverts commit 5f130895f3.	2 years ago
Mariano Cano	5f130895f3	Set timestamp when marking an acme challenge invalid	2 years ago
Herman Slatman	a8125846dd	Add TPM attestation	2 years ago
max furman	f3d1863ec6	A few more linter errors	2 years ago
Mariano Cano	2b3b2c283a	Add attestation certificate validation for Apple devices	2 years ago
Brandon Weeks	5f5315260a	iOS 16 beta 1 support	2 years ago
Brandon Weeks	de5b0ef5c2	Verify key authorization is contained within the TPM quote extraData field	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	6b73a020e3	Add unit tests for apple and step attestations	2 years ago
Mariano Cano	0f651799d0	Reject not enabled attestation formats	2 years ago
Mariano Cano	08815c5e90	Reneame attestation statement error	2 years ago
Mariano Cano	3cd72ac72a	Remove debug statements	2 years ago