1225 Commits (master)

Author	SHA1	Message	Date
Herman Slatman	113a6dd8ab	Remove reporting the CA mode from startup logs	1 week ago
Herman Slatman	6bc0a86207	Fix CA startup with Vault RA configuration	2 weeks ago
Herman Slatman	f1a2c68f43	Merge pull request #1798 from smallstep/herman/fix-instrumented-key-manager ... Add support for `kmsapi.Decrypter` to instrumented key manager	2 weeks ago
Mariano Cano	7df3ad05ed	Merge pull request #1797 from smallstep/mariano/init-scep ... Allow custom SCEP key manager	3 weeks ago
Mariano Cano	4202d6673c	Remove debug statement	3 weeks ago
Herman Slatman	d6bbe5b06b	Add support for `kmsapi.Decrypter` to instrumented key manager	3 weeks ago
verytrap	db92404342	chore: fix function names in comment ... Signed-off-by: verytrap <wangqiuyue@outlook.com>	3 weeks ago
Mariano Cano	725a913f66	Allow custom SCEP key manager ... This commit allows to inject a custom key manger for SCEP.	3 weeks ago
Mariano Cano	0ac9023590	Fix typo in error message and comment	2 months ago
Mariano Cano	10f6a901ec	Let the CA determine the RA lifetime ... When the RA mode with StepCAS is used, let the CA decide which lifetime the RA should get instead of requiring always 24h. This commit also fixes linter warnings. Related to #1094	2 months ago
Herman Slatman	b8510dd5b2	Make the `requestid` an exported middleware	2 months ago
Herman Slatman	10aa48c74a	Merge pull request #1743 from smallstep/herman/improve-request-id ... Improve end-to-end request ID propagation	2 months ago
Herman Slatman	d392c169fc	Improve functional coverage of request ID integration test	2 months ago
Herman Slatman	7e5f10927f	Decouple request ID middleware from logging middleware	2 months ago
Panagiotis Siatras	fb4cd6fe81	fix: Webhook-related instruments ... * fix: also instrument webhooks that do not reach the wire * fix: register the webhook instrumentation	2 months ago
Herman Slatman	041b486c55	Remove usages of `Sign` without context	2 months ago
Herman Slatman	c16a0b70ee	Remove `smallstep/assert` and `pkg/errors` from webhook tests	2 months ago
Herman Slatman	9689508709	Add tests for webhook request IDs	2 months ago
Herman Slatman	2a8b80a3e1	Merge branch 'master' into herman/webhook-request-id	2 months ago
Herman Slatman	bb296c9d19	Merge pull request #1708 from smallstep/herman/csr-expires-header ... Add `Expires` header to CRL endpoint	2 months ago
Mariano Cano	ac773ff44e	Merge branch 'master' into allow_external_x509_ca_service_intf	2 months ago
Remi Vichery	ee44ac104d	fixup! Add AWS ca-west-1 identity document certificate	3 months ago
Remi Vichery	283d46d9a7	Add AWS ca-west-1 identity document certificate	3 months ago
Herman Slatman	69f5f8d8ea	Use `stretchr/testify` instead of `smallstep/assert` for tests	3 months ago
Herman Slatman	d1deb7f930	Add `Expires` header to CRL response	3 months ago
Panagiotis Siatras	dd1ff9c15b	Implementation of the Prometheus endpoint (#1669) ... Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.	3 months ago
Venky Gopal	fbc1e895c2	Allow x509 Service CA implementation to be injected through ca and authority options	3 months ago
Herman Slatman	25c109e75d	Change error message for CSR validation	4 months ago
Mariano Cano	b20af51f32	Upgrade go.step.sm/crypto to use go-jose/v3	5 months ago
Max	d34f0f6a97	Fix linter warnings (#1634)	5 months ago
Herman Slatman	f082cbc421	Denormalize provisioner name in SCEP webhook	6 months ago
Herman Slatman	9ebc8779f5	Normalize SCEP provisioner name in webhook body	6 months ago
Herman Slatman	e815864ed8	Add verification of `provisionerName` in test	6 months ago
Herman Slatman	de45d66cdb	Add `provisionerName` to webhook request body	6 months ago
Mariano Cano	49045a1150	Change CommonName validator in JWK ... This commit changes the common name validator in the JWK provisioner to accept either the token subject or any of the sans in the token.	6 months ago
Max	9f84f7ce35	Allow for identity certificate signing (in sshSign) by skipping validators (#1572) ... - skip urisValidator for identity certificate signing. Implemented by building the validator with the context in a hacky way.	7 months ago
Mariano Cano	52baf52f84	Change scep password type to string ... This commit changes the type of the decrypter key password to string to be consistent with other passwords in the ca.json	7 months ago
Herman Slatman	c0fbace882	Address review remarks	7 months ago
Herman Slatman	4dc5a688fd	Set SCEP authority options once	7 months ago
Herman Slatman	15c46ebbaa	Switch logic for SCEP initialization around	7 months ago
Herman Slatman	f1da256ca4	Change SCEP authority initialization	7 months ago
Herman Slatman	4554f86f16	Make SCEP decrypter properties use `omitempty`	7 months ago
Herman Slatman	ffe079f31b	Merge branch 'master' into herman/scep-provisioner-decrypter	7 months ago
Mariano Cano	31da66c124	Fix webhooks signature ... This commit fixes the way webhooks signatures are created. Before this change, the signature of an empty body was prepended by the body itself.	7 months ago
Herman Slatman	3f3b67e05c	Merge branch 'herman/scep-provisioner-decrypter' into herman/scep-notifying-webhook	7 months ago
Herman Slatman	ba72710e2d	Address code review remarks	7 months ago
Herman Slatman	5f8e0de1c3	Fix duplicate import in SCEP provisioner	7 months ago
Herman Slatman	4fd4227b73	Use shorter SCEP decrypter property names from linkedca	7 months ago
Herman Slatman	5fd70af2c8	Make API responses aware of the new SCEP decrypter properties	7 months ago
Herman Slatman	3ade92f8d5	Support both a decrypter key URI as well as PEM	7 months ago