Commit Graph

132 Commits (master)

Author SHA1 Message Date
Mariano Cano 10f6a901ec
Let the CA determine the RA lifetime
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.

This commit also fixes linter warnings.

Related to #1094
3 months ago
Herman Slatman b8510dd5b2
Make the `requestid` an exported middleware 3 months ago
Herman Slatman bbb80cde16
Add startup error shutdown message to log 3 months ago
Herman Slatman f02d4546a9
Handle CA server startup errors 3 months ago
Herman Slatman 7e5f10927f
Decouple request ID middleware from logging middleware 3 months ago
Mariano Cano 503e5046ea
Merge branch 'master' into allow_custom_tls_config 3 months ago
Mariano Cano beea482a0c
Fix linter errors in ca/ca.go 3 months ago
Mariano Cano ac773ff44e
Merge branch 'master' into allow_external_x509_ca_service_intf 3 months ago
Mariano Cano 9fcdd3ffa6
Fix format warnings on ca/ca.go 3 months ago
Panagiotis Siatras dd1ff9c15b
Implementation of the Prometheus endpoint (#1669)
Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.
4 months ago
Venky Gopal 356e7070ef Allow usage of externally supplied TLS config 4 months ago
Venky Gopal fbc1e895c2 Allow x509 Service CA implementation to be injected through ca and authority options 4 months ago
Herman Slatman ffe079f31b
Merge branch 'master' into herman/scep-provisioner-decrypter 8 months ago
Dominic Evans 231b5d8406 chore(deps): upgrade github.com/go-chi/chi to v5
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.

See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
8 months ago
Herman Slatman fc1fb51854
Improve SCEP authority initialization and reload 10 months ago
Herman Slatman 8fc3a46387
Refactor the SCEP authority initialization
Instead of relying on an intermediate `scep.Service` struct,
initialize the `scep.Authority` directly. This removes one redundant
layer of indirection.
1 year ago
Herman Slatman 6985b4be62
Clean up the SCEP authority and provisioner 1 year ago
Herman Slatman 180162bd6a
Refactor SCEP provisioner and decrypter 1 year ago
Herman Slatman 5e35aca29c
Use `CRLConfig.IsEnabled` 1 year ago
Herman Slatman 60a4512abe
Add `/crl` and `/1.0/crl` to the insecure HTTP handler 1 year ago
Mariano Cano 7700bb77da
Remove old call to compact 1 year ago
Mariano Cano 831a1e35ea
Add support for compating the badger db
This commit adds a job that will compact the badger db periodically.
In the nosql package, when Compact is called, it will run badger's
RunValueLogGC method.
1 year ago
Herman Slatman 54c560f620
Improve configuration file initialization log output 2 years ago
Herman Slatman c9ee4a9f9d
Disable initialization log output if started with `--quiet` 2 years ago
Andrew Reed 7101fbb0ee
Provisioner webhooks (#1001) 2 years ago
max furman 7c5e5b2b87
Even more linter fixes 2 years ago
Mariano Cano 567d96c771
Revert "Run on plaintext HTTP to support Cloud Run"
This reverts commit 09b9673a60.
2 years ago
Brandon Weeks f3d2bd7a19
Run on plaintext HTTP to support Cloud Run 2 years ago
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano 6cab4d328e Add a middleware to automatically route HEAD requests to GET
Fixes #992
2 years ago
Mariano Cano a8819376d3 Remove empty lines on debug information
At the start of step-ca some information about the CA is displayed,
this change remove extra lines when displaying the ssh public keys.
2 years ago
Shulhan fe04f93d7f
all: reformat all go files with the next gofmt (Go 1.19)
There are some changes that manually edited, for example using '-' as
default list and grouping imports.
2 years ago
Mariano Cano f639bfc53b Use contexts on the new PolicyAdminResponder 2 years ago
Mariano Cano d461918eb0 Merge branch 'master' into context-authority 2 years ago
Mariano Cano 9147356d8a Fix linter errors 2 years ago
Mariano Cano d1f75f1720 Refactor ACME api. 2 years ago
Mariano Cano 688f9ceb56 Add scep authority to context. 2 years ago
Mariano Cano 216d8f0efb Handle acme requests with the new api 2 years ago
Mariano Cano 439cb81b13 Use admin Route function 2 years ago
Mariano Cano 8bd4e1d73e Inject the acme database in the context 2 years ago
Mariano Cano 0446e82320 Add context methods for the authority database 2 years ago
Mariano Cano 623c296555 Create context methods from admin database 2 years ago
Mariano Cano d5070ecf31 Use server BaseContext
Instead of using the authority middleware this change adds the
authority in the base context of the server.
2 years ago
Mariano Cano a93653ea8e Use api.Route instead of the caHandler. 2 years ago
Mariano Cano 900a640f01 Enable the authority middleware in the server 2 years ago
Herman Slatman 2a7620641f
Fix more PR comments 2 years ago
Herman Slatman a3c51881c7
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman b72430f4ea
Block all APIs when using linked deployment mode 2 years ago
Carl Tashian 97b64aa851 Cosmetic fix for consistency in the startup messages 2 years ago
Herman Slatman 034b7943fe
Merge branch 'master' into herman/allow-deny 2 years ago