Commit Graph

60 Commits (041b486c556017aac05a3dc12c1b5681190ac55d)

Author SHA1 Message Date
Herman Slatman 041b486c55
Remove usages of `Sign` without context 3 months ago
Herman Slatman 2a8b80a3e1
Merge branch 'master' into herman/webhook-request-id 3 months ago
Max d34f0f6a97
Fix linter warnings (#1634) 6 months ago
Herman Slatman 1abada69b0
Update import aliases from `microscep` to `smallscep` 7 months ago
Herman Slatman 4c17f25389
Replace MicroMDM and Mozilla libraries with Smallstep forks 7 months ago
Herman Slatman b6c95d7be2
Add additional properties to SCEP notify webhook request body 8 months ago
Herman Slatman 52bc96760b
Add SCEP certificate issuance notification webhook 8 months ago
Herman Slatman 9e3807eaa3
Use `SignWithContext` in the critical paths 8 months ago
Herman Slatman 36f1dd70bf
Add CSR to `SCEPCHALLENGE` webhook request body 9 months ago
Herman Slatman 9d3b78ae49
Add `excludeIntermediate` to SCEP provisioner 9 months ago
Herman Slatman 0d09f3e202
Prevent data races with multiple PKCS7 encryption operations 10 months ago
Herman Slatman e2e9bf5494
Clarify some SCEP properties 10 months ago
Herman Slatman c0a1837cd9
Verify full decrypter/signer configuration at usage time
When changing the SCEP configuration it is possible that one
or both of the decrypter configurations required are not available
or have been provided in a way that's not usable for actual SCEP
requests.

Instead of failing hard when provisioners are loaded,
which could result in the CA not starting properly, this type of
problematic configuration errors will now be handled at usage
time instead.
10 months ago
Herman Slatman 0f35bb1af5
Defer missing decrypter/signer configuration errors to SCEP authority 10 months ago
Herman Slatman fc1fb51854
Improve SCEP authority initialization and reload 10 months ago
Herman Slatman 7163c4f95f
Add helper for getting the appropriate SCEP response signer 10 months ago
Herman Slatman 567fc25404
Use the RSA decryption configuration for signing responses too 10 months ago
Herman Slatman b2bf2c330b
Simplify SCEP provisioner context handling 12 months ago
Herman Slatman 8fc3a46387
Refactor the SCEP authority initialization
Instead of relying on an intermediate `scep.Service` struct,
initialize the `scep.Authority` directly. This removes one redundant
layer of indirection.
12 months ago
Herman Slatman 6985b4be62
Clean up the SCEP authority and provisioner 12 months ago
Herman Slatman 180162bd6a
Refactor SCEP provisioner and decrypter 12 months ago
Herman Slatman 0377fe559b
Add basic version of provisioner specific SCEP decrypter 1 year ago
max furman 8b256f0351
address linter warning for go 1.19 1 year ago
Herman Slatman e8c1e8719d
Refactor SCEP webhook validation 1 year ago
Herman Slatman 419478d1e5
Make SCEP webhook validation look better 1 year ago
Herman Slatman 27cdcaf5ee
Integrate the SCEP webhook with the existing webhook logic 1 year ago
Herman Slatman 05f7ab979f
Create basic webhook for SCEP challenge validation 1 year ago
Andrew Reed 7101fbb0ee
Provisioner webhooks (#1001) 2 years ago
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano d51c6b7d83 Make step handler backward compatible 2 years ago
Mariano Cano 9147356d8a Fix linter errors 2 years ago
Mariano Cano 688f9ceb56 Add scep authority to context. 2 years ago
Panagiotis Siatras e27124b037
scep: remove Interface and the dependency to pkg/errors (#872)
* scep: documented the package

* scep/api: removed some top level constants

* scep: removed dependency to pkg/errors

* scep/api: documented the package
2 years ago
Herman Slatman 5f42ae0bce
Remove unused function LoadProvisionerByID from SCEP 2 years ago
Herman Slatman 3b72d241e0
Add LinkedCA integration for improved SCEP provisioner 2 years ago
Herman Slatman 64680bb16d
Fix PR comments 2 years ago
Herman Slatman 3612eefc31
Cleanup 2 years ago
Herman Slatman 9c6580ccd2
Fix macOS SCEP client issues
Fixes #746
2 years ago
Herman Slatman 54610e890b
Improve error logging 3 years ago
Herman Slatman c3d9cef497
Update to v2.0.0 of github.com/micromdm/scep 3 years ago
Herman Slatman 9bda3c465a
Add more template data 3 years ago
Herman Slatman b97f024f8a
Remove superfluous call to StoreCertificate 3 years ago
Herman Slatman 583d60dc0d
Address (most) PR comments 3 years ago
Herman Slatman a4844fee7b
Make tests green 3 years ago
Herman Slatman e1cab4966f
Improve initialization of SCEP authority 3 years ago
Herman Slatman 538fe8114d
Fix linter issues 3 years ago
Herman Slatman cc1ecb9438
Store new certificates in database 3 years ago
Herman Slatman 9902dc1079
Add signed failure responses 3 years ago
Herman Slatman 2536a08dc2
Add support for configuring capabilities (cacaps) 3 years ago
Herman Slatman e4d7ea8fa0
Add support for challenge password 3 years ago