Commit Graph

1880 Commits (072bd0dcf430b14ca3308ae538477a4ea6733026)
 

Author SHA1 Message Date
Mariano Cano 072bd0dcf4 Add support for Google CAS v1 3 years ago
Mariano Cano 35ede74ea7
Merge pull request #596 from gdbelvin/name
Allow configuration of PKCS11 subject name
3 years ago
Mariano Cano 595f12505c
Merge branch 'master' into name 3 years ago
Mariano Cano e17fc4346d
Merge pull request #597 from gdbelvin/path
Configurable pkcs11-init output paths
3 years ago
Gary Belvin c264e8f580 Configurable pkcs11-init output paths 3 years ago
Gary Belvin 623e387fb0 Allow configuration of PKCS11 subject name 3 years ago
Mariano Cano 8d7c3d2f08
Merge pull request #506 from hslatman/hs/scep
Add SCEP support
3 years ago
max furman 781e0c4b86 [action] forgot to add default labeler config file 3 years ago
max furman 1be1ed1236 [action] labeler to v3 and use default config path location 3 years ago
Herman Slatman bc2bb53009
Merge branch 'master' into hs/scep 3 years ago
Herman Slatman 375687cd1b
Add setup for Authority tests 3 years ago
Mariano Cano f84c8f846a Upgrade x/crypto
Although this does not affects us the old version had the vulnerability
CVE-2020-29652
3 years ago
Carl Tashian 850b15932d
Merge pull request #571 from smallstep/carl/makefile-clean
Remove binary-* recipes from Makefile
3 years ago
max furman b205f50412 bump crypto to 0.8.3 and go mod tidy 3 years ago
Carl Tashian 07cf037d6e Remove binary-* recipes from Makefile 3 years ago
Carl Tashian f83ccc31d1
Merge pull request #570 from smallstep/carl/arm6
Add arm6 to goreleaser
3 years ago
Carl Tashian fc31df34cf Zip the windows release 3 years ago
Carl Tashian 2a70ac2d0e Take 2 on arm6 3 years ago
Carl Tashian e305940448 Small docs cleanup 3 years ago
Carl Tashian 6f0f023d2c Small docs cleanup 3 years ago
Carl Tashian 08f9bc0031
Merge pull request #567 from FibreFoX/master
Added missing hints for running step-ca on Raspberry Pi
3 years ago
Carl Tashian 8e1343224c Add arm6 to goreleaser 3 years ago
FibreFoX 9607691f9c
Added missing hints for running step-ca on Raspberry Pi
See #351, #344, #279
3 years ago
Mariano Cano 1788d09b44
Merge pull request #566 from smallstep/ed25519-improvements
Ed25519 improvements
3 years ago
Herman Slatman 877fc9ae8c
Add tests for CreateDecrypter 3 years ago
Mariano Cano 26e7cc6177 Allow to use the SDK with ed25519 keys. 3 years ago
Mariano Cano c1c986922b Show Ed25519 in the public-key log field. 3 years ago
Herman Slatman a3ec890e71
Fix small typo in divisible 3 years ago
Herman Slatman 54610e890b
Improve error logging 3 years ago
Herman Slatman d0a9cbc797
Change fmt to errors package for formatting errors 3 years ago
Herman Slatman ff1b46c95d
Add configuration option for specifying the minimum public key length
Instead of using the defaultPublicKeyValidator a new validator called
publicKeyMinimumLengthValidator has been implemented that uses a
configurable minimum length for public keys in CSRs.

It's also an option to alter the defaultPublicKeyValidator to also
take a parameter, but that would touch quite some lines of code. This
might be a viable option after merging SCEP support.
3 years ago
Herman Slatman c04f556dc2
Merge branch 'master' into hs/scep 3 years ago
Mariano Cano 5a6517ca5b
Merge pull request #561 from LecrisUT/master
Check admin privileges from group membership
3 years ago
Cristian Le d7eec869c2 Fix the previous tests 3 years ago
Cristian Le c2d30f7260 gofmt everything 3 years ago
Cristian Le f38a72a62b Leftover from previous commit 3 years ago
Cristian Le 1d2445e1d8 Removed the variadic username
Could be useful later on, but for the current PR changes should be minimized
3 years ago
Cristian Le 9e00b82bdf Revert `oidc_test.go`
Moving the `preferred_username` to a separate PR
3 years ago
Cristian Le cd67d64eec Merge remote-tracking branch 'origin/master' 3 years ago
Cristian Le decf0fc8ce Revert using preferred_username
It might present a security issue if the users can change this value for themselves. Needs further investigation
3 years ago
Cristian Le 21732f213b Fix shadow issue in CI 3 years ago
Mariano Cano 08e5ec6ad1 Fix IsAdminGroup comment. 3 years ago
Mariano Cano 46c1dc80fb Use map[string]struct{} instead of map[string]bool 3 years ago
Mariano Cano aafac179a5 Add test for oidc with preferred usernames. 3 years ago
Cristian Le f730c0bec4 Sanitize usernames 3 years ago
Cristian Le 48666792c7 Draft: adding usernames to GetIdentityFunc 3 years ago
Cristian Le 79eec83f3e Rename and reformat to PreferredUsername 3 years ago
Cristian Le 09a21fef26 Implement #550
- Read `preferred_username` from token
- Add `preferred_username` to the default Usernames
- Check the `admin` array for admin groups that the user might belong to
3 years ago
Cristian Le bb1e051b27 Revert using preferred_username
It might present a security issue if the users can change this value for themselves. Needs further investigation
3 years ago
Max 1ee288f9fb
Merge pull request #565 from smallstep/max/load-init
Init config on load | Add wrapper for cli
3 years ago