Commit Graph

396 Commits (master)

Author SHA1 Message Date
Mariano Cano 10f6a901ec
Let the CA determine the RA lifetime
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.

This commit also fixes linter warnings.

Related to #1094
2 months ago
Herman Slatman b8510dd5b2
Make the `requestid` an exported middleware 2 months ago
Herman Slatman bbb80cde16
Add startup error shutdown message to log 2 months ago
Herman Slatman f02d4546a9
Handle CA server startup errors 2 months ago
Herman Slatman d392c169fc
Improve functional coverage of request ID integration test 2 months ago
Herman Slatman 0898c6db97
Use UUIDv4 as automatically generated client request identifier 2 months ago
Herman Slatman b9d6bfc1eb
Cleanup CA client tests by removing `smallstep/assert` 2 months ago
Herman Slatman 532b9df0a3
Improve CA client request ID handling 2 months ago
Herman Slatman 7e5f10927f
Decouple request ID middleware from logging middleware 2 months ago
Herman Slatman 2255857b3a
Fix `client` shadowing and e2e request ID test case 2 months ago
Herman Slatman 5c2572c443
Add support for user provider `X-Request-Id` header value 2 months ago
Herman Slatman cf8a50157f
Add a basic e2e test for `X-Request-Id` reflection 2 months ago
Herman Slatman c1c2e73475
Add `X-Request-Id` to all requests made by our CA clients 2 months ago
Mariano Cano 503e5046ea
Merge branch 'master' into allow_custom_tls_config 3 months ago
Mariano Cano beea482a0c
Fix linter errors in ca/ca.go 3 months ago
Mariano Cano ac773ff44e
Merge branch 'master' into allow_external_x509_ca_service_intf 3 months ago
Mariano Cano 9fcdd3ffa6
Fix format warnings on ca/ca.go 3 months ago
Panagiotis Siatras dd1ff9c15b
Implementation of the Prometheus endpoint (#1669)
Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.
3 months ago
Venky Gopal 356e7070ef Allow usage of externally supplied TLS config 4 months ago
Venky Gopal fbc1e895c2 Allow x509 Service CA implementation to be injected through ca and authority options 4 months ago
Mariano Cano b20af51f32
Upgrade go.step.sm/crypto to use go-jose/v3 5 months ago
Herman Slatman ffe079f31b
Merge branch 'master' into herman/scep-provisioner-decrypter 8 months ago
Dominic Evans 231b5d8406 chore(deps): upgrade github.com/go-chi/chi to v5
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.

See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
8 months ago
Herman Slatman d9f56cdbdc
Merge branch 'master' into herman/scep-provisioner-decrypter 8 months ago
Mariano Cano d739aab345
Define BaseContext before starting the server in tests
If the http.Server BaseContext is not define before the start of the
server, it might not be properly set depending on the goroutine
scheduler. This was causing random errors on CI.
9 months ago
Herman Slatman fc1fb51854
Improve SCEP authority initialization and reload 9 months ago
Herman Slatman 1ce80cf740
Merge branch 'master' into herman/scep-provisioner-decrypter 10 months ago
Mariano Cano 0c3a1aea38
Wait for Accept in TestBootstrapClientServerRotation
The TestBootstrapClientServerRotation often fails because the reload
returns once the Server loop gets the new listener, but the server
hasn't really started yet. This commit makes the test pass, adding a
small sleep after the reload.

A proper fix might require a wrapper over the listener and an ACK
callback on a sync.Once on a custom Accept.
10 months ago
guoguangwu 4c70abcd62 chore: log error 10 months ago
Herman Slatman 8fc3a46387
Refactor the SCEP authority initialization
Instead of relying on an intermediate `scep.Service` struct,
initialize the `scep.Authority` directly. This removes one redundant
layer of indirection.
11 months ago
Herman Slatman 6985b4be62
Clean up the SCEP authority and provisioner 11 months ago
Herman Slatman 180162bd6a
Refactor SCEP provisioner and decrypter 11 months ago
max furman 8b256f0351
address linter warning for go 1.19 1 year ago
Herman Slatman f9ec62f46c
Merge branch 'master' into herman/improve-scep-marshaling 1 year ago
Herman Slatman 5e35aca29c
Use `CRLConfig.IsEnabled` 1 year ago
Herman Slatman 60a4512abe
Add `/crl` and `/1.0/crl` to the insecure HTTP handler 1 year ago
Mariano Cano 7700bb77da
Remove old call to compact 1 year ago
Mariano Cano 831a1e35ea
Add support for compating the badger db
This commit adds a job that will compact the badger db periodically.
In the nosql package, when Compact is called, it will run badger's
RunValueLogGC method.
1 year ago
max furman fd921e5b26
successful isEnabled check should not return error 1 year ago
max furman 0b26698e72
Add IsEnabled method in AdminClient for checking admin API availability 1 year ago
Herman Slatman b5961beba9
Fix and/or ignore linting issues 1 year ago
Herman Slatman 319333f936
Add `WithContext` methods to the CA client 1 year ago
Herman Slatman f2e1c56c6c
Improve SCEP provisioner marshaling 1 year ago
Mariano Cano fcfd2b9bdc
Return an appropriate error when requests fail
If an http client Do method fails, it always returns an *url.URL error,
this change generalizes all those errors in one common method instead of
returning an fake HTTP error.

Fixes smallstep/cli#738
2 years ago
Mariano Cano 47bd5a80d9
Set dialer local address with STEP_CLIENT_ADDR
The environment variable STEP_CLIENT_ADDR can be used to set the local
address to use when dialing an address. This can be useful when step
is behind an CIDR-based ACL.

Fixes smallstep/cli#730
2 years ago
Herman Slatman 54c560f620
Improve configuration file initialization log output 2 years ago
Herman Slatman da5d2b405c
Merge branch 'master' into herman/remote-management-helm 2 years ago
max furman 7203739369
Fix err assert linter warnings - upgrade outdated package 2 years ago
Herman Slatman c9ee4a9f9d
Disable initialization log output if started with `--quiet` 2 years ago
Andrew Reed 7101fbb0ee
Provisioner webhooks (#1001) 2 years ago