397 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	4c9dccd3f6	Allow multiple certificates in the root pem.	5 years ago
max furman	ab78534b08	add test for SAN backwards compatibility with CLI ... * new provisioner tokens always contain the crt.Subject.CommonName in the SANS attribute of the token claims. added tests that verifies backwards compatibility still works in cases where the token does not contain the subject as a SAN claim.	5 years ago
max furman	e6e8443f3c	allow multiple identical SANs in cert	5 years ago
max furman	f0683c2e0a	Enable signing certificates with custom SANs ... * validate against SANs in token. must be 1:1 equivalent.	5 years ago
Mariano Cano	d394dd233a	Initiate default RootCAs/ClientCAs when no options are passed.	5 years ago
Mariano Cano	25eba1a96c	WIP on the safely rotate of root and federated certificates. ... Fixes #23	5 years ago
Mariano Cano	bacbf85aa3	Add new bootstrap method that creates a listener.	5 years ago
Mariano Cano	984bf8d38c	Add missing file.	5 years ago
Mariano Cano	1cc5e94666	Add simple test for federation.	5 years ago
Mariano Cano	dbd1bf11f1	Rename variable.	5 years ago
Mariano Cano	7dc61bf233	Remove deprecated code	5 years ago
Mariano Cano	518b597535	Remove mTLS client requirement in /roots and /federation	5 years ago
Mariano Cano	9adc65febf	Add test for newTLSOptionCtx	5 years ago
Mariano Cano	6116523055	Fix random order in tests.	5 years ago
Mariano Cano	8510e25b3b	Add test with bootstrap server.	5 years ago
Mariano Cano	f99ae9da93	Add root rotation test.	5 years ago
Mariano Cano	af9e6488fc	Make the renew test shorter.	5 years ago
Mariano Cano	25ddbaedff	Allow to customize the minimal cert duration for tests.	5 years ago
Mariano Cano	10aaece1b0	Update root certificates on renew.	5 years ago
Mariano Cano	6d3e8ed93c	Add all root certificates by default on bootstrap methods.	5 years ago
Mariano Cano	d296cf95a9	Add mTLS request to get all the root CAs, not the federated ones.	5 years ago
Mariano Cano	98cc243a37	Add support for multiple roots.	5 years ago
Mariano Cano	722bcb7e7a	Add initial support for federated root certificates.	5 years ago
Mariano Cano	7e2f80ac30	Fix grammar error	6 years ago
max furman	c0107ab5b9	Fix ca renew documentation	6 years ago
Mariano Cano	f7a5be3942	Force the renew of the CA server.	6 years ago
Mariano Cano	b0a410066b	Add support for parsing endpoints without schema. ... Fixes smallstep/ca-component#117	6 years ago
Mariano Cano	d872f09910	Use mTLS by default on SDK methods. ... Add options to modify the tls.Config for different configurations. Fixes #7	6 years ago
Mariano Cano	9c64dbda9a	Add helpers to add direct support for mTLS.	6 years ago
Mariano Cano	b23e3bec7f	Remove comment of removed arguments.	6 years ago
max furman	5f2d998584	change documentation for bootstrap Server|Client ... * provide documentation for default and non-default invocation.	6 years ago
Mariano Cano	ba88c8c5cb	Add context to bootstrap methods.	6 years ago
Mariano Cano	7eb8aeb1f1	Add tests for bootstrap functions.	6 years ago
Mariano Cano	091506a994	Add bootstrap helpers that uses just a token.	6 years ago
max furman	c74fcd57a7	ca-component -> certificates ... * fix redundant error check * add README	6 years ago
max furman	0d9dd2d14b	provisioner issuer -> name	6 years ago
Mariano Cano	71a3587b76	Add client support for provisioner cursor and limit options. ... Fixes #83	6 years ago
Mariano Cano	99cab73360	Remove unused import /provisioners/jwk-set-by-issuer	6 years ago
max furman	ee7db4006a	change sign + authorize authority api | add provisioners ... * authorize returns []interface{} - operators in this list can conform to any interface the user decides - our implementation has a combination of certificate claim validators and certificate template modifiers. * provisioners can set and enforce tls cert options	6 years ago
Mariano Cano	d7c31c3133	Properly fill CSR DNSNames or IPAddresses	6 years ago
Mariano Cano	2b2598c695	Fix audience to fix ca tests.	6 years ago
Mariano Cano	511e1a9e23	Fix getting transport from root fingerprint.	6 years ago
max furman	0b5f6487e1	change provisioners api ... * /provisioners -> /provisioners/jwk-set-by-issuer * /provisioners now returns a list of Provisioners	6 years ago
Mariano Cano	7b6a3ea427	Add client methods for provisioning endpoints.	6 years ago
max furman	378166a3b2	add full stack tests for multiple provisioners api ... * /provisioners and /provisioners/<key-id>/encrypted-key	6 years ago
max furman	d773770a44	add authority.New unit tests	6 years ago
max furman	c284a2c0ab	first commit	6 years ago