Commit Graph

39 Commits (master)

Author SHA1 Message Date
Mariano Cano f3f484cee2
Log errors using slog.Logger
This commit allows logging errors in a slog.Logger injected in the
context. This type of logger is not currently used directly in step-ca,
but this will change in the future.
3 days ago
Herman Slatman 0898c6db97
Use UUIDv4 as automatically generated client request identifier 3 months ago
Herman Slatman b9d6bfc1eb
Cleanup CA client tests by removing `smallstep/assert` 3 months ago
Herman Slatman 532b9df0a3
Improve CA client request ID handling 3 months ago
max furman 8b256f0351
address linter warning for go 1.19 1 year ago
max furman 7203739369
Fix err assert linter warnings - upgrade outdated package 2 years ago
Panagiotis Siatras 00634fb648
api/render, api/log: initial implementation of the packages (#860)
* api/render: initial implementation of the package

* acme/api: refactored to support api/render

* authority/admin: refactored to support api/render

* ca: refactored to support api/render

* api: refactored to support api/render

* api/render: implemented Error

* api: refactored to support api/render.Error

* acme/api: refactored to support api/render.Error

* authority/admin: refactored to support api/render.Error

* ca: refactored to support api/render.Error

* ca: fixed broken tests

* api/render, api/log: moved error logging to this package

* acme: refactored Error so that it implements render.RenderableError

* authority/admin: refactored Error so that it implements render.RenderableError

* api/render: implemented RenderableError

* api/render: added test coverage for Error

* api/render: implemented statusCodeFromError

* api: refactored RootsPEM to work with render.Error

* acme, authority/admin: fixed pointer receiver name for consistency

* api/render, errs: moved StatusCoder & StackTracer to the render package
2 years ago
Panagiotis Siatras e6b2359273
ca: fixed import statement order 2 years ago
Panagiotis Siatras 9ba33bab4e
ca: refactored to use the read package 2 years ago
Mariano Cano ead742ca0f Fix unit test 2 years ago
Mariano Cano a4dd586a81 Add method to get the CA url from the client. 2 years ago
Mariano Cano 616490a9c6 Refactor renew after expiry token authorization
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
Mariano Cano 8ce807a6cb Modify errs.BadRequest() calls to always send an error to the client. 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano 5846314f88 Add missing Rekey method to the ca.Client
Fixes #315
3 years ago
Mariano Cano 533ad0ca20 Use always go.step.sm/crypto/x509util 4 years ago
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
Mariano Cano a88ba8eb31 Use errs package for HTTP errors. 4 years ago
Mariano Cano 50188fc901 Add version support to the ca.Client. 4 years ago
Mariano Cano f9e5b27e63 Add client method for SSHBastion 4 years ago
Mariano Cano d08db4df23 Rename SSH methods. 4 years ago
Mariano Cano 961be1fbc7 Add endpoint to return the SSH public keys.
Related to smallstep/ca-component#195
4 years ago
Jozef Kralik bc6074f596 Change api of functions Authority.Sign, Authority.Renew
Returns certificate chain instead of 2 members.

Implements #126
5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
Mariano Cano 01b6aebbf7 Make provisioner more configurable.
The intention of this change is to make it usable from cert-manager.
5 years ago
max furman ab4d569f36 Add /revoke API with interface db backend 5 years ago
Mariano Cano 64f2615864 Fix tests. 5 years ago
Mariano Cano b07fe546fd Fix types in tests. 5 years ago
Mariano Cano 518b597535 Remove mTLS client requirement in /roots and /federation 5 years ago
Mariano Cano d296cf95a9 Add mTLS request to get all the root CAs, not the federated ones. 5 years ago
Mariano Cano 722bcb7e7a Add initial support for federated root certificates. 5 years ago
Mariano Cano b0a410066b Add support for parsing endpoints without schema.
Fixes smallstep/ca-component#117
6 years ago
max furman c74fcd57a7 ca-component -> certificates
* fix redundant error check
* add README
6 years ago
Mariano Cano 71a3587b76 Add client support for provisioner cursor and limit options.
Fixes #83
6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
max furman 0b5f6487e1 change provisioners api
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
6 years ago
Mariano Cano 7b6a3ea427 Add client methods for provisioning endpoints. 6 years ago
max furman c284a2c0ab first commit 6 years ago