Commit Graph

64 Commits (231f03ae28ff2c8744cfa8e3091509e02c5124b5)

Author SHA1 Message Date
Herman Slatman 231f03ae28
Use a struct for the Wire DPoP token 5 months ago
Herman Slatman 9bb1b24bf1
Change `kid` and `dpop` validation 5 months ago
Herman Slatman 24795720e1
Perform initialization of DPoP and OIDC options once 5 months ago
Herman Slatman 79739e5073
Change signature algorithm property name 5 months ago
Herman Slatman 7eacb68361
Merge branch 'herman/remove-rusty-cli' into herman/wire-configuration-refactor 5 months ago
Herman Slatman 348363abce
Add Wire `DPoP` proof claims verification 5 months ago
Herman Slatman 1bf807add3
Use base64 encoded signing key format 5 months ago
Herman Slatman b964c97750
Add validation of `handle` and `token` to Wire verification 5 months ago
Herman Slatman cd9480ab14
Fix test for `parseAndVerifyWireAccessToken` 5 months ago
Herman Slatman 897688a831
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 5 months ago
Herman Slatman 29fa6621b1
Remove the Wire CLI invocatation 5 months ago
Mariano Cano b20af51f32
Upgrade go.step.sm/crypto to use go-jose/v3 6 months ago
Mariano Cano d8eeebfd51
Fix error string in tests
This commit fixes a test checking an error string from an external
dependency.
10 months ago
Herman Slatman c952e9fc9d
Use `NewDetailedError` instead 11 months ago
Herman Slatman f3c24fe875
Change how multiple identifiers are printed in errors 11 months ago
Herman Slatman 9a52675865
Return descriptive error when using unsupported format 11 months ago
Herman Slatman 0d3338ff3a
Return consistent ACME error types for specific cases 11 months ago
Herman Slatman dd9bf1e915
Add error details for the `step` format 11 months ago
Herman Slatman 9cbbd1d575
Add error details to ACME `tpm` format validation errors 11 months ago
max furman 8b256f0351
address linter warning for go 1.19 1 year ago
Herman Slatman d9aa2c110f
Increase test coverage for AK certificate properties 1 year ago
Mariano Cano 6ba20209c2
Verify CSR key fingerprint with attestation certificate key
This commit makes sure that the attestation certificate key matches the
key used on the CSR on an ACME device attestation flow.
1 year ago
Herman Slatman 3a6fc5e0b4
Remove dependency on `smallstep/assert` in ACME challenge tests 1 year ago
Herman Slatman 0f9128c873
Fix linting issue and order of test SUT 1 year ago
Herman Slatman 2ab9beb7ed
Add tests for `deviceAttest01Validate` 1 year ago
Mariano Cano e27c6c529b
Add support for custom acme ports
This change adds the flags --acme-http-port, --acme-tls-port, that
combined with --insecure can be used to set custom ports for ACME
http-01 and tls-alpn-01 challenges. These flags should only be used
for testing purposes.

Fixes #1015
2 years ago
Mariano Cano a7e597450a
Update acme/challenge_test.go
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2 years ago
Mariano Cano 7a78c76199
Add test simulating YubiKey v5.2.4
There are YubiKeys v5.2.4 where the attestation intermediate (f9)
does not have a basic constraint extension, so that certificate
is not marked as a CA. The test and CA in this commit imitates
that use case. Currently the test case returns an error as we
don't support it. But if we change the verification to support
this use case, the test should change accordingly.
2 years ago
Mariano Cano 21666ba887
Revert "Set timestamp when marking an acme challenge invalid"
This reverts commit 5f130895f3.
2 years ago
Mariano Cano 5f130895f3
Set timestamp when marking an acme challenge invalid 2 years ago
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano 498549c95c Extract common function used in tests 2 years ago
Mariano Cano 829530ae90 Fix linter errors 2 years ago
Mariano Cano 6b73a020e3 Add unit tests for apple and step attestations 2 years ago
Brandon Weeks aacd6f4cc6 Add device-attest-01 challenge type 2 years ago
Mariano Cano 2ab7dc6f9d Fix acme tests. 2 years ago
Herman Slatman 479c6d2bf5
Fix ACME IPv6 HTTP-01 challenges
Fixes #890
2 years ago
Herman Slatman e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano ae58a0ee4e Make tests compatible with Go 1.17.
With Go 1.17 tls.Dial will fail if the client and server configured
protocols do not overlap. See https://golang.org/doc/go1.17#ALPN
3 years ago
Herman Slatman 64c15fde7e
Add tests for canonicalize function 3 years ago
Herman Slatman c514a187b2
Fix Fail() -_-b 3 years ago
Herman Slatman 135e912ac8
Improve coverage for TLS-ALPN-01 challenge 3 years ago
Herman Slatman af4803b8b8
Fix tests 3 years ago
max furman 440678cb62 Add markInvalid arg to storeError for invalidating challenge 3 years ago
max furman b6ebc0fd25 more unit tests 3 years ago
max furman a58466589f add tls-alpn-01 validate unit tests 3 years ago
max furman a8e4bbf715 start Validate unit tests 3 years ago
max furman 1fb0f1d7d9 add storeError unit tests 3 years ago
max furman 8b4a5a6d8b add unit tests for dns01 validate 3 years ago