31 Commits (master)

Author	SHA1	Message	Date
findnature	5072d7a58f	chore: fix function names in comment (#1813) ... Signed-off-by: findnature <cricis@aliyun.com>	1 week ago
Mariano Cano	10f6a901ec	Let the CA determine the RA lifetime ... When the RA mode with StepCAS is used, let the CA decide which lifetime the RA should get instead of requiring always 24h. This commit also fixes linter warnings. Related to #1094	2 months ago
max furman	8b256f0351	address linter warning for go 1.19	12 months ago
Mariano Cano	72e2c4eb2e	Render proper policy and constrains errors	2 years ago
max furman	75bb196193	Add concurrency workflow config | fix broken test due to golang ver	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Herman Slatman	cc26a0b394	Explicitly disable wildcard Common Name constraint	2 years ago
Herman Slatman	d82e51b748	Update AllowWildcardNames configuration name	2 years ago
Herman Slatman	2b7f6931f3	Change Subject Common Name verification ... Subject Common Names can now also be configured to be allowed or denied, similar to SANs. When a Subject Common Name is not explicitly allowed or denied, its type will be determined and its value will be validated according to the constraints for that type of name (i.e. URI).	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	76112c2da1	Improve error creation and testing for core policy engine	2 years ago
Herman Slatman	a2cfbe3d54	Fix (part of) PR comments	2 years ago
Herman Slatman	82e0033428	Remove Adder options	2 years ago
Herman Slatman	679e2945f2	Disallow name constraint wildcard notation	2 years ago
Herman Slatman	96f4c49b0c	Improve how policy errors are returned and used	2 years ago
Herman Slatman	d8776d8f7f	Add K8sSA SSH user policy back ... According to the docs, the K8sSA provisioner can be configured to issue SSH user certs.	2 years ago
Herman Slatman	5f0dc42b1e	Fix tests on Go 1.18 due to IDNA deviations ... In Go 1.18 the behavior for looking up domains with non-ASCII characters was changed to be in accordance with UTS#46 (https://unicode.org/reports/tr46/). There's a slight difference in how IDNA2003 and IDNA2008 process these. Go 1.18 handles the deviations in accordance with IDNA2008 now.	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	613c99f00f	Fix linting issues	2 years ago
Herman Slatman	6b620c8e9c	Improve protobuf unmarshaling error handling	2 years ago
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	2 years ago
Herman Slatman	88c7b63c9d	Split SSH user and cert policy configuration and execution	2 years ago
Herman Slatman	a7eb27d309	Fix URI domains IDNA support	2 years ago
Herman Slatman	9617edf0c2	Improve internationalized domain name handling ... This PR improves internationalized domain name handling according to rules of IDNA and based on the description in RFC 5280, section 7: https://datatracker.ietf.org/doc/html/rfc5280#section-7. Support for internationalized URI(s), so-called IRIs, still needs to be done.	2 years ago
Herman Slatman	066bf32086	Fix part of PR comments	2 years ago
Herman Slatman	ff08b5055e	Fix linting issues	2 years ago
Herman Slatman	6440870a80	Clean up, improve test cases and coverage	2 years ago
Herman Slatman	1e808b61e5	Merge logic for X509 and SSH policy	2 years ago
Herman Slatman	6bc301339f	Improve test case and code coverage	2 years ago
Herman Slatman	6bc0513468	Add more tests	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago