Commit Graph

1884 Commits (0c79914d0d417fcc4df97663e2e4acb6162108bf)
 

Author SHA1 Message Date
Herman Slatman 0c79914d0d
Improve check for single IP in TLS-ALPN-01 challenge 3 years ago
Herman Slatman a6405e98a9
Remove fmt. 3 years ago
Herman Slatman 2f40011da8
Add support for TLS-ALPN-01 challenge 3 years ago
Herman Slatman 76dcf542d4
Fix mixed DNS and IP SANs in Order 3 years ago
Herman Slatman af615db6b5
Support DNS and IPs as SANs in single Order 3 years ago
Herman Slatman a0e92f8e99
Verify IP identifier contains valid IP 3 years ago
Herman Slatman 6486e6016b
Make logic for which challenge types to use clearer 3 years ago
Herman Slatman 3e36522329
Add preliminary support for TLS-ALPN-01 challenge for IP identifiers 3 years ago
Herman Slatman 848b5202a5
Merge branch 'master' into hs/ip-verification 3 years ago
Herman Slatman 6d9710c88d
Add initial support for ACME IP validation 3 years ago
Mariano Cano 8d7c3d2f08
Merge pull request #506 from hslatman/hs/scep
Add SCEP support
3 years ago
max furman 781e0c4b86 [action] forgot to add default labeler config file 3 years ago
max furman 1be1ed1236 [action] labeler to v3 and use default config path location 3 years ago
Herman Slatman bc2bb53009
Merge branch 'master' into hs/scep 3 years ago
Herman Slatman 375687cd1b
Add setup for Authority tests 3 years ago
Mariano Cano f84c8f846a Upgrade x/crypto
Although this does not affects us the old version had the vulnerability
CVE-2020-29652
3 years ago
Carl Tashian 850b15932d
Merge pull request #571 from smallstep/carl/makefile-clean
Remove binary-* recipes from Makefile
3 years ago
max furman b205f50412 bump crypto to 0.8.3 and go mod tidy 3 years ago
Carl Tashian 07cf037d6e Remove binary-* recipes from Makefile 3 years ago
Carl Tashian f83ccc31d1
Merge pull request #570 from smallstep/carl/arm6
Add arm6 to goreleaser
3 years ago
Carl Tashian fc31df34cf Zip the windows release 3 years ago
Carl Tashian 2a70ac2d0e Take 2 on arm6 3 years ago
Carl Tashian e305940448 Small docs cleanup 3 years ago
Carl Tashian 6f0f023d2c Small docs cleanup 3 years ago
Carl Tashian 08f9bc0031
Merge pull request #567 from FibreFoX/master
Added missing hints for running step-ca on Raspberry Pi
3 years ago
Carl Tashian 8e1343224c Add arm6 to goreleaser 3 years ago
FibreFoX 9607691f9c
Added missing hints for running step-ca on Raspberry Pi
See #351, #344, #279
3 years ago
Mariano Cano 1788d09b44
Merge pull request #566 from smallstep/ed25519-improvements
Ed25519 improvements
3 years ago
Herman Slatman 877fc9ae8c
Add tests for CreateDecrypter 3 years ago
Mariano Cano 26e7cc6177 Allow to use the SDK with ed25519 keys. 3 years ago
Mariano Cano c1c986922b Show Ed25519 in the public-key log field. 3 years ago
Herman Slatman a3ec890e71
Fix small typo in divisible 3 years ago
Herman Slatman 54610e890b
Improve error logging 3 years ago
Herman Slatman d0a9cbc797
Change fmt to errors package for formatting errors 3 years ago
Herman Slatman ff1b46c95d
Add configuration option for specifying the minimum public key length
Instead of using the defaultPublicKeyValidator a new validator called
publicKeyMinimumLengthValidator has been implemented that uses a
configurable minimum length for public keys in CSRs.

It's also an option to alter the defaultPublicKeyValidator to also
take a parameter, but that would touch quite some lines of code. This
might be a viable option after merging SCEP support.
3 years ago
Herman Slatman c04f556dc2
Merge branch 'master' into hs/scep 3 years ago
Mariano Cano 5a6517ca5b
Merge pull request #561 from LecrisUT/master
Check admin privileges from group membership
3 years ago
Cristian Le d7eec869c2 Fix the previous tests 3 years ago
Cristian Le c2d30f7260 gofmt everything 3 years ago
Cristian Le f38a72a62b Leftover from previous commit 3 years ago
Cristian Le 1d2445e1d8 Removed the variadic username
Could be useful later on, but for the current PR changes should be minimized
3 years ago
Cristian Le 9e00b82bdf Revert `oidc_test.go`
Moving the `preferred_username` to a separate PR
3 years ago
Cristian Le cd67d64eec Merge remote-tracking branch 'origin/master' 3 years ago
Cristian Le decf0fc8ce Revert using preferred_username
It might present a security issue if the users can change this value for themselves. Needs further investigation
3 years ago
Cristian Le 21732f213b Fix shadow issue in CI 3 years ago
Mariano Cano 08e5ec6ad1 Fix IsAdminGroup comment. 3 years ago
Mariano Cano 46c1dc80fb Use map[string]struct{} instead of map[string]bool 3 years ago
Mariano Cano aafac179a5 Add test for oidc with preferred usernames. 3 years ago
Cristian Le f730c0bec4 Sanitize usernames 3 years ago
Cristian Le 48666792c7 Draft: adding usernames to GetIdentityFunc 3 years ago