330 Commits (26122a2cbfa7530712de7713c04ab0477ce04991)

Author	SHA1	Message	Date
Mariano Cano	f7542a5bd9	Move check of ssh revocation from provisioner to the authority.	3 years ago
max furman	77fdfc9fa3	Merge branch 'master' into max/cert-mgr-crud	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Herman Slatman	a64974c179	Fix small typo in divisible	3 years ago
Herman Slatman	d46a4eaca4	Change fmt to errors package for formatting errors	3 years ago
Herman Slatman	2beea1aa89	Add configuration option for specifying the minimum public key length ... Instead of using the defaultPublicKeyValidator a new validator called publicKeyMinimumLengthValidator has been implemented that uses a configurable minimum length for public keys in CSRs. It's also an option to alter the defaultPublicKeyValidator to also take a parameter, but that would touch quite some lines of code. This might be a viable option after merging SCEP support.	3 years ago
Herman Slatman	4168449935	Fix typo	3 years ago
Herman Slatman	fa100a5138	Mask challenge password after it has been read	3 years ago
Herman Slatman	97b88c4d58	Address (most) PR comments	3 years ago
Herman Slatman	4fe7179b95	Add support for configuring capabilities (cacaps)	3 years ago
Herman Slatman	3b86550dbf	Add support for challenge password	3 years ago
Herman Slatman	da65f46d0f	Add AuthorizeSign method to SCEP authority	3 years ago
Herman Slatman	2a249d20de	Refactor initialization of SCEP authority	3 years ago
Herman Slatman	339039768c	Refactor SCEP authority initialization and clean some code	3 years ago
Herman Slatman	48c86716a0	Add rudimentary (and incomplete) support for SCEP	3 years ago
max furman	638766c615	wip	3 years ago
max furman	4f3e5ef64d	wip	3 years ago
max furman	5d09d04d14	wip	3 years ago
max furman	7b5d6968a5	first commit	3 years ago
Herman Slatman	a3ec890e71	Fix small typo in divisible	3 years ago
Herman Slatman	d0a9cbc797	Change fmt to errors package for formatting errors	3 years ago
Herman Slatman	ff1b46c95d	Add configuration option for specifying the minimum public key length ... Instead of using the defaultPublicKeyValidator a new validator called publicKeyMinimumLengthValidator has been implemented that uses a configurable minimum length for public keys in CSRs. It's also an option to alter the defaultPublicKeyValidator to also take a parameter, but that would touch quite some lines of code. This might be a viable option after merging SCEP support.	3 years ago
Herman Slatman	c04f556dc2	Merge branch 'master' into hs/scep	3 years ago
Cristian Le	d7eec869c2	Fix the previous tests	3 years ago
Cristian Le	c2d30f7260	gofmt everything	3 years ago
Cristian Le	f38a72a62b	Leftover from previous commit	3 years ago
Cristian Le	1d2445e1d8	Removed the variadic username ... Could be useful later on, but for the current PR changes should be minimized	3 years ago
Cristian Le	9e00b82bdf	Revert `oidc_test.go` ... Moving the `preferred_username` to a separate PR	3 years ago
Cristian Le	decf0fc8ce	Revert using preferred_username ... It might present a security issue if the users can change this value for themselves. Needs further investigation	3 years ago
Cristian Le	21732f213b	Fix shadow issue in CI	3 years ago
Mariano Cano	08e5ec6ad1	Fix IsAdminGroup comment.	3 years ago
Mariano Cano	46c1dc80fb	Use map[string]struct{} instead of map[string]bool	3 years ago
Mariano Cano	aafac179a5	Add test for oidc with preferred usernames.	3 years ago
Cristian Le	f730c0bec4	Sanitize usernames	3 years ago
Cristian Le	48666792c7	Draft: adding usernames to GetIdentityFunc	3 years ago
Cristian Le	79eec83f3e	Rename and reformat to PreferredUsername	3 years ago
Cristian Le	09a21fef26	Implement #550 ... - Read `preferred_username` from token - Add `preferred_username` to the default Usernames - Check the `admin` array for admin groups that the user might belong to	3 years ago
Herman Slatman	2336936b5c	Fix typo	4 years ago
Herman Slatman	9787728fbd	Mask challenge password after it has been read	4 years ago
Herman Slatman	0487686f69	Merge branch 'master' into hs/scep	4 years ago
max furman	2ae43ef2dc	[acme db interface] wip errors	4 years ago
Herman Slatman	583d60dc0d	Address (most) PR comments	4 years ago
Herman Slatman	2536a08dc2	Add support for configuring capabilities (cacaps)	4 years ago
Herman Slatman	e4d7ea8fa0	Add support for challenge password	4 years ago
Herman Slatman	311c9d767b	Add AuthorizeSign method to SCEP authority	4 years ago
Herman Slatman	7ad90d10b3	Refactor initialization of SCEP authority	4 years ago
Herman Slatman	713b571d7a	Refactor SCEP authority initialization and clean some code	4 years ago
Herman Slatman	ffdd58ea3c	Add rudimentary (and incomplete) support for SCEP	4 years ago
max furman	16665c97f0	Allow empty SAN in CSR for validation ... ... - The default template will always use the SANs from the token. - If there are any SANs they must be validated against the token.	4 years ago
Mariano Cano	5017b7d21f	Recalculate token id instead of validating it.	4 years ago