Commit Graph

4179 Commits

Author SHA1 Message Date
dependabot[bot]
8406f75806
Bump cloud.google.com/go/security from 1.15.3 to 1.15.4
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.15.3 to 1.15.4.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.3...kms/v1.15.4)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-06 15:25:48 +00:00
Herman Slatman
132e888f36
Merge pull request #1610 from abelgvidal/fixcontrib
Amend link to Contribution Guide in README
2023-11-02 13:48:26 +01:00
Abel Gonzalez
807c7562f5 Amend wrong link to Contribution Guide in README 2023-11-01 20:18:05 +01:00
Mariano Cano
49045a1150
Change CommonName validator in JWK
This commit changes the common name validator in the JWK provisioner to
accept either the token subject or any of the sans in the token.
2023-10-31 16:44:18 -07:00
Mariano Cano
6705b7dde4
Build RA token using SANs from the template
This commit updates the RA token to use the SANs coming from the
template instead of the CSR.

Note that this PR might break some admin tokens.
2023-10-31 15:41:59 -07:00
github-actions[bot]
ef2b43d888
Merge pull request #1604 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.3
Bump cloud.google.com/go/security from 1.15.2 to 1.15.3
2023-10-30 17:14:28 +01:00
dependabot[bot]
3528012614
Bump cloud.google.com/go/security from 1.15.2 to 1.15.3
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.15.2 to 1.15.3.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.2...kms/v1.15.3)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 15:58:06 +00:00
github-actions[bot]
a278e707e8
Merge pull request #1605 from smallstep/dependabot/go_modules/github.com/google/uuid-1.4.0
Bump github.com/google/uuid from 1.3.1 to 1.4.0
2023-10-30 16:54:37 +01:00
github-actions[bot]
7043ff1464
Merge pull request #1606 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.5.3
Bump cloud.google.com/go/longrunning from 0.5.2 to 0.5.3
2023-10-30 16:53:56 +01:00
dependabot[bot]
15383bae66
Bump cloud.google.com/go/longrunning from 0.5.2 to 0.5.3
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/longrunning/v0.5.2...longrunning/v0.5.3)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 15:49:04 +00:00
dependabot[bot]
4c51360400
Bump github.com/google/uuid from 1.3.1 to 1.4.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 15:48:46 +00:00
Herman Slatman
71a4481e57
Merge pull request #1600 from smallstep/herman/use-smallstep-scep-and-pkcs7
Use Smallstep SCEP and PKCS7 libraries
2023-10-25 12:15:31 +02:00
Herman Slatman
af649018a2
Merge branch 'master' into herman/use-smallstep-scep-and-pkcs7 2023-10-24 21:50:58 +02:00
Herman Slatman
1abada69b0
Update import aliases from microscep to smallscep 2023-10-24 21:48:24 +02:00
Herman Slatman
4c17f25389
Replace MicroMDM and Mozilla libraries with Smallstep forks 2023-10-24 21:44:34 +02:00
github-actions[bot]
5e70d6fc81
Merge pull request #1597 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.27.0
Bump github.com/newrelic/go-agent/v3 from 3.26.0 to 3.27.0
2023-10-23 20:17:40 +02:00
github-actions[bot]
27fdfca7c8
Merge pull request #1595 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.59.0
Bump google.golang.org/grpc from 1.58.3 to 1.59.0
2023-10-23 20:04:56 +02:00
dependabot[bot]
352979ac23
Bump google.golang.org/grpc from 1.58.3 to 1.59.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.3 to 1.59.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.3...v1.59.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-23 17:54:18 +00:00
github-actions[bot]
0425a0c86c
Merge pull request #1596 from smallstep/dependabot/go_modules/google.golang.org/api-0.148.0
Bump google.golang.org/api from 0.147.0 to 0.148.0
2023-10-23 19:52:03 +02:00
dependabot[bot]
756bec0df8
Bump google.golang.org/api from 0.147.0 to 0.148.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.147.0 to 0.148.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.147.0...v0.148.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-23 17:43:05 +00:00
dependabot[bot]
16f1606ad4
Bump github.com/newrelic/go-agent/v3 from 3.26.0 to 3.27.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.26.0 to 3.27.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.26.0...v3.27.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-23 17:42:16 +00:00
Max
c451546cfb
[action] fix actionlint warnings (#1598) 2023-10-23 19:22:26 +02:00
Mariano Cano
96c87bb99e
Merge pull request #1590 from smallstep/mariano/asn1-bool
Upgrade go.step.sm/crypto with ASN.1 bool support
2023-10-18 11:48:28 -07:00
Mariano Cano
ad22f149b7
Upgrade go.step.sm/crypto with ASN.1 bool support
This commit upgrades go.step.sm/crypto dependency with a version that
adds support of ASN.1 boolean encoding.
2023-10-18 11:42:55 -07:00
Carl Tashian
5d10e54551
Merge pull request #1580 from smallstep/carl/unversioned
Wrap unversioned step-ca binary into an unversioned dir
2023-10-17 10:26:08 -07:00
github-actions[bot]
06baf58c9f
Merge pull request #1588 from smallstep/dependabot/github_actions/dependabot/fetch-metadata-1.6.0
Bump dependabot/fetch-metadata from 1.1.1 to 1.6.0
2023-10-17 15:44:14 +02:00
github-actions[bot]
d5663ef021
Merge pull request #1589 from smallstep/dependabot/go_modules/google.golang.org/api-0.147.0
Bump google.golang.org/api from 0.145.0 to 0.147.0
2023-10-17 15:42:55 +02:00
dependabot[bot]
d5f17908a3
Bump google.golang.org/api from 0.145.0 to 0.147.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.145.0 to 0.147.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.145.0...v0.147.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-17 13:40:40 +00:00
dependabot[bot]
f548c13e3e
Bump dependabot/fetch-metadata from 1.1.1 to 1.6.0
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.1.1 to 1.6.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.1.1...v1.6.0)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-17 13:39:37 +00:00
Max
830f31c6d1
[action] add dependabot updates for github actions (#1586) 2023-10-17 16:39:17 +03:00
github-actions[bot]
819a4d7d6b
Merge pull request #1584 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.2
Bump cloud.google.com/go/security from 1.15.1 to 1.15.2
2023-10-17 12:09:49 +02:00
github-actions[bot]
f8ae8f252e
Merge pull request #1582 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.3
Bump google.golang.org/grpc from 1.58.2 to 1.58.3
2023-10-17 12:09:32 +02:00
github-actions[bot]
7008feae30
Merge pull request #1583 from smallstep/dependabot/go_modules/github.com/google/go-cmp-0.6.0
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0
2023-10-17 12:09:17 +02:00
github-actions[bot]
c70c092557
Merge pull request #1585 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.36.0
Bump go.step.sm/crypto from 0.35.1 to 0.36.0
2023-10-17 12:09:01 +02:00
dependabot[bot]
2574555672
Bump cloud.google.com/go/security from 1.15.1 to 1.15.2
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.1...kms/v1.15.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-17 09:47:04 +00:00
github-actions[bot]
3a633c1cf6
Merge pull request #1581 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.5.2
Bump cloud.google.com/go/longrunning from 0.5.1 to 0.5.2
2023-10-17 11:44:25 +02:00
dependabot[bot]
d66ddf890c
Bump go.step.sm/crypto from 0.35.1 to 0.36.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.35.1 to 0.36.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.35.1...v0.36.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:42:54 +00:00
dependabot[bot]
7ada4cac91
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.9 to 0.6.0.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.5.9...v0.6.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:42:01 +00:00
dependabot[bot]
6d6b8882ad
Bump google.golang.org/grpc from 1.58.2 to 1.58.3
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.2 to 1.58.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.2...v1.58.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:41:48 +00:00
dependabot[bot]
c6daca0c2e
Bump cloud.google.com/go/longrunning from 0.5.1 to 0.5.2
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.5.1 to 0.5.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/dataflow/v0.5.1...longrunning/v0.5.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:41:28 +00:00
Carl Tashian
de1dc6838f
Wrap unversioned step into an unversioned dir 2023-10-12 15:20:03 -07:00
Carl Tashian
63aa894525
Wrap unversioned step into an unversioned dir 2023-10-12 15:17:16 -07:00
Mariano Cano
f7836a0664
Merge pull request #1578 from smallstep/upgrade-x-net-http2
Upgrades golang.org/x/net/http2
2023-10-10 12:55:23 -07:00
Mariano Cano
532fc228d3
Upgrades golang.org/x/net/http2
Although step-ca doesn't manually configure HTTP/2, the new version
fixes the issue described in https://go.dev/issue/63417.
2023-10-10 12:32:13 -07:00
github-actions[bot]
95bf3d60ef
Merge pull request #1574 from smallstep/dependabot/go_modules/golang.org/x/net-0.16.0
Bump golang.org/x/net from 0.15.0 to 0.16.0
2023-10-10 10:59:39 +02:00
dependabot[bot]
bf7aa211eb
Bump golang.org/x/net from 0.15.0 to 0.16.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.16.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-09 23:05:10 +00:00
github-actions[bot]
06174b9ea7
Merge pull request #1575 from smallstep/dependabot/go_modules/google.golang.org/api-0.145.0
Bump google.golang.org/api from 0.143.0 to 0.145.0
2023-10-10 01:02:53 +02:00
dependabot[bot]
51612b6345
Bump google.golang.org/api from 0.143.0 to 0.145.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.143.0 to 0.145.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.143.0...v0.145.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-09 15:14:33 +00:00
Max
9f84f7ce35
Allow for identity certificate signing (in sshSign) by skipping validators (#1572)
- skip urisValidator for identity certificate signing. Implemented
  by building the validator with the context in a hacky way.
2023-10-06 14:02:19 -07:00
Herman Slatman
06750b03fe
Merge pull request #1566 from smallstep/herman/fix-init-with-duplicate-provisioner-name
Fix `step ca init` with duplicate provisioner name (`--provisioner acme --acme`)
2023-10-04 23:29:58 +02:00