Commit Graph

10 Commits (master)

Author SHA1 Message Date
Mariano Cano b0b2e77b0e Avoid doing unauthenticated requests on the SDK
When step-ca runs with mTLS required on some endpoints, the SDK
used in autocert will fail to start because the identity certificate
is missing. This certificate is only required to retrieve all roots,
in most cases there's only one, and the SDK has access to it.
2 years ago
Mariano Cano 975cb75fbd Fix typo. 5 years ago
Mariano Cano d394dd233a Initiate default RootCAs/ClientCAs when no options are passed. 5 years ago
Mariano Cano 25eba1a96c WIP on the safely rotate of root and federated certificates.
Fixes #23
5 years ago
Mariano Cano 518b597535 Remove mTLS client requirement in /roots and /federation 5 years ago
Mariano Cano 10aaece1b0 Update root certificates on renew. 5 years ago
Mariano Cano 6d3e8ed93c Add all root certificates by default on bootstrap methods. 5 years ago
Mariano Cano d296cf95a9 Add mTLS request to get all the root CAs, not the federated ones. 5 years ago
Mariano Cano 722bcb7e7a Add initial support for federated root certificates. 5 years ago
Mariano Cano d872f09910 Use mTLS by default on SDK methods.
Add options to modify the tls.Config for different configurations.
Fixes #7
6 years ago