37 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	10f6a901ec	Let the CA determine the RA lifetime ... When the RA mode with StepCAS is used, let the CA decide which lifetime the RA should get instead of requiring always 24h. This commit also fixes linter warnings. Related to #1094	3 months ago
Max	9f84f7ce35	Allow for identity certificate signing (in sshSign) by skipping validators (#1572) ... - skip urisValidator for identity certificate signing. Implemented by building the validator with the context in a hacky way.	8 months ago
Josh Drake	ff424fa944	Fix tests.	10 months ago
Mariano Cano	5bfe96d8c7	Send X5C leaf certificate to webhooks ... This commit adds a new property that will be sent to authorizing and enriching webhooks when signing certificates using the X5C provisioner.	11 months ago
Mariano Cano	ac35f3489c	Remove unused certificate validators and modifiers ... With the introduction of certificate templates some certificate validators and modifiers are not used anymore. This commit deletes the ones that are not used.	1 year ago
max furman	7203739369	Fix err assert linter warnings - upgrade outdated package	2 years ago
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
max furman	7c5e5b2b87	Even more linter fixes	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	a627f21440	Fix AuthorizeSSHSign tests with extra SignOption	2 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	b7e11da480	Merge branch 'master' into feat/linkedra	2 years ago
Herman Slatman	2fbdf7d5b0	Merge branch 'master' into herman/allow-deny	2 years ago
Panagiotis Siatras	00634fb648	api/render, api/log: initial implementation of the packages (#860) ... * api/render: initial implementation of the package * acme/api: refactored to support api/render * authority/admin: refactored to support api/render * ca: refactored to support api/render * api: refactored to support api/render * api/render: implemented Error * api: refactored to support api/render.Error * acme/api: refactored to support api/render.Error * authority/admin: refactored to support api/render.Error * ca: refactored to support api/render.Error * ca: fixed broken tests * api/render, api/log: moved error logging to this package * acme: refactored Error so that it implements render.RenderableError * authority/admin: refactored Error so that it implements render.RenderableError * api/render: implemented RenderableError * api/render: added test coverage for Error * api/render: implemented statusCodeFromError * api: refactored RootsPEM to work with render.Error * acme, authority/admin: fixed pointer receiver name for consistency * api/render, errs: moved StatusCoder & StackTracer to the render package	2 years ago
Mariano Cano	6851842841	Fix unit tests.	2 years ago
Mariano Cano	5ab79f53be	Fix linter errors	2 years ago
Herman Slatman	dc23fd23bf	Merge branch 'master' into herman/allow-deny-next	2 years ago
Mariano Cano	ad8a813abe	Fix linter errors	2 years ago
Mariano Cano	4690fa64ed	Add public methods to retrieve the provisioner extensions.	2 years ago
Mariano Cano	389815642d	Fix tests: certs are truncated to seconds.	2 years ago
Mariano Cano	259e95947c	Add support for the provisioner controller ... The claimer, audiences and custom callback methods are now managed by the provisioner controller in an uniform way.	2 years ago
Herman Slatman	88c7b63c9d	Split SSH user and cert policy configuration and execution	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	4 years ago
Mariano Cano	413af88aad	Fix provisioning tests.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	0c8376a7f6	Fix existing unit tests.	4 years ago
max furman	71d87b4e61	wip	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	4 years ago
Mariano Cano	d4627d1282	Make provisioner tests compile, they are still failing.	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago