41 Commits (master)

Author	SHA1	Message	Date
Herman Slatman	041b486c55	Remove usages of `Sign` without context	3 months ago
Herman Slatman	4ef093dc4b	Fix broken tests relying on `Sign` in mocks	8 months ago
Herman Slatman	4e06bdbc51	Add `SignWithContext` method to authority and mocks	8 months ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Mariano Cano	6ba20209c2	Verify CSR key fingerprint with attestation certificate key ... This commit makes sure that the attestation certificate key matches the key used on the CSR on an ACME device attestation flow.	1 year ago
Herman Slatman	64d9ad7b38	Validate Subject Common Name for Orders with Permanent Identifier	1 year ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2 years ago
Herman Slatman	a5f2f004e3	Change name of IP Common Name test for clarity	2 years ago
Herman Slatman	bc0875bd7b	Disallow email address and URLs in the CSR ... Before this commit `step` would allow email addresses and URLs in the CSR. This doesn't fit nicely with the rest of ACME, in which identifiers need to be authorized before a certificate is issued.	2 years ago
Herman Slatman	13a31fd862	Merge branch 'master' into herman/ip-sans-improvements	2 years ago
Herman Slatman	a5d33512fe	Fix test	2 years ago
Herman Slatman	a2c9b5cd7e	Allow IP identifiers in subject, including authorization enforcement ... To support IPs in the subject using `step-cli`, this PR ensures that Subject Common Names that can be parsed as an IP are also checked to have been authorized before. The PR for `step-cli` is here: github.com/smallstep/cli/pull/576.	2 years ago
Herman Slatman	2d357da99b	Add tests for ACME revocation	2 years ago
Herman Slatman	8f7e700f09	Merge branch 'master' into hs/acme-revocation	3 years ago
max furman	857a50434c	Merge branch 'master' into max/cert-mgr-crud	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Herman Slatman	16fe07d4dc	Fix mockSignAuth	3 years ago
Herman Slatman	8e4a4ecc1f	Refactor tests for sans	3 years ago
Herman Slatman	87b72afa25	Fix IP equality check and add more tests	3 years ago
Herman Slatman	a6d33b7d06	Add tests for sans()	3 years ago
Herman Slatman	64c15fde7e	Add tests for canonicalize function	3 years ago
Herman Slatman	218a2adb9f	Add tests for IP Order validations	3 years ago
Herman Slatman	6d9710c88d	Add initial support for ACME IP validation	3 years ago
max furman	bdf4c0f836	add acme order unit tests	3 years ago
max furman	c0a9f24798	add authorization and order unit tests	3 years ago
max furman	bb8d54e596	[acme db interface] unit tests compiling	3 years ago
max furman	272cce522e	Fix test and change method name	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	0c8376a7f6	Fix existing unit tests.	4 years ago
max furman	d25e7f64c2	wip	4 years ago
max furman	41a1a053d8	Always convert empty list to nil when saving orderIDs index.	4 years ago
max furman	704a510a2a	Remove non-pending orders from the acme_orders_by_account index ... ... - Each acme account has an index in this table. Before this change, the index would grow unchecked as orders accumulate. This change removes orders that have moved out of the 'PENDING' state.	4 years ago
max furman	6e69f99310	Always set nbf and naf for new ACME orders ... ... - Use the default value from the ACME provisioner if values are not defined in the request.	4 years ago
Max	ba91f4ed13	Merge pull request #260 from anxolerd/feat-force-cn-if-empty ... [Feature] Force CommonName for certificates from ACME provisioner	4 years ago
Oleksandr Kovalchuk	893a53793a	Modify existing tests to accept forceCNOption modifier ... Modify existing tests to pass with changes introduced in commit 322200b7db. This is safe to do as tests assert exact length of modifiers, which has changed.	4 years ago
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	4 years ago
Ivan Bertona	4b473732d9	Add support for TLS-ALPN-01 challenge.	4 years ago
Mariano Cano	0a890a5c16	Add the commonName as a DNSName to match RFC. ... Normalize names and remove the use of reflection.	4 years ago
Jozef Kralik	bc6074f596	Change api of functions Authority.Sign, Authority.Renew ... Returns certificate chain instead of 2 members. Implements #126	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago