450 Commits (2b7f6931f3fc8d5e9010a758c07bfeb0657bb36e)

Author	SHA1	Message	Date
Herman Slatman	2b7f6931f3	Change Subject Common Name verification ... Subject Common Names can now also be configured to be allowed or denied, similar to SANs. When a Subject Common Name is not explicitly allowed or denied, its type will be determined and its value will be validated according to the constraints for that type of name (i.e. URI).	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	2a7620641f	Fix more PR comments	2 years ago
Herman Slatman	c40a4d2694	Contain policy engines inside provisioner Controller	2 years ago
Herman Slatman	72bbe53376	Add additional policy options	2 years ago
Herman Slatman	7f9034d22a	Add additional policy options	2 years ago
Herman Slatman	abcad679ff	Merge branch 'master' into herman/allow-deny	2 years ago
Herman Slatman	d6be9450be	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	d3b6bc3c75	Merge branch 'master' into fix/adminra	2 years ago
Mariano Cano	674dc3c844	Rename unreleased claim to allowRenewalAfterExpiry for consistency.	2 years ago
Herman Slatman	0bb15e16f9	Fix missing ACME provisioner option	2 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	8abd568f03	Merge branch 'master' into fix/adminra	2 years ago
Mariano Cano	b7e11da480	Merge branch 'master' into feat/linkedra	2 years ago
Mariano Cano	df8ffb35af	Remove unnecessary database in provisioner config.	2 years ago
Herman Slatman	d8776d8f7f	Add K8sSA SSH user policy back ... According to the docs, the K8sSA provisioner can be configured to issue SSH user certs.	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	628d7448de	Don't return policy in provisioner JSON	2 years ago
Herman Slatman	2fbdf7d5b0	Merge branch 'master' into herman/allow-deny	2 years ago
Panagiotis Siatras	00634fb648	api/render, api/log: initial implementation of the packages (#860) ... * api/render: initial implementation of the package * acme/api: refactored to support api/render * authority/admin: refactored to support api/render * ca: refactored to support api/render * api: refactored to support api/render * api/render: implemented Error * api: refactored to support api/render.Error * acme/api: refactored to support api/render.Error * authority/admin: refactored to support api/render.Error * ca: refactored to support api/render.Error * ca: fixed broken tests * api/render, api/log: moved error logging to this package * acme: refactored Error so that it implements render.RenderableError * authority/admin: refactored Error so that it implements render.RenderableError * api/render: implemented RenderableError * api/render: added test coverage for Error * api/render: implemented statusCodeFromError * api: refactored RootsPEM to work with render.Error * acme, authority/admin: fixed pointer receiver name for consistency * api/render, errs: moved StatusCoder & StackTracer to the render package	2 years ago
Mariano Cano	6851842841	Fix unit tests.	2 years ago
vijayjt	37207793f9	Pass in the resource name regardless of if its a VM or managed identity	2 years ago
vijayjt	7e47c70af2	Remove redundant parameter type declaration	2 years ago
vijayjt	7b605b2d16	Support Azure tokens from managed identities not associated with a VM	2 years ago
Mariano Cano	5ab79f53be	Fix linter errors	2 years ago
Herman Slatman	b49307f326	Fix ACME order tests with mock ACME CA	2 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2 years ago
Herman Slatman	613c99f00f	Fix linting issues	2 years ago
Herman Slatman	dc23fd23bf	Merge branch 'master' into herman/allow-deny-next	2 years ago
Mariano Cano	082734474b	Merge pull request #845 from vijayjt/azure-user-mi-token ... WIP: Support Azure tokens generated by managed identities	2 years ago
Mariano Cano	b401376829	Add current provisioner to AuthorizeSign SignOptions. ... The original provisioner cannot be retrieved from a certificate if a linked ra is used.	2 years ago
vijayjt	24a963766e	Pass in the resource name regardless of if its a VM or managed identity	2 years ago
Mariano Cano	ad8a813abe	Fix linter errors	2 years ago
Mariano Cano	6d532045dc	Fix validity check for sshpop provisioner.	2 years ago
Mariano Cano	c903f00cd4	Rename claim to allowRenewAfterExpiry.	2 years ago
Mariano Cano	4690fa64ed	Add public methods to retrieve the provisioner extensions.	2 years ago
Mariano Cano	616490a9c6	Refactor renew after expiry token authorization ... This changes adds a new authority method that authorizes the renew after expiry tokens.	2 years ago
Mariano Cano	389815642d	Fix tests: certs are truncated to seconds.	2 years ago
Mariano Cano	8ef8f4f665	Use the provisioner controller in Nebula renewals	2 years ago
Mariano Cano	259e95947c	Add support for the provisioner controller ... The claimer, audiences and custom callback methods are now managed by the provisioner controller in an uniform way.	2 years ago
Mariano Cano	3c2ff33ca9	Add provisioner controller tests.	2 years ago
Mariano Cano	fd6a2eeb9c	Add provisioner controller ... The provisioner controller has the implementation of the identity function as well as the renew methods with renew after expiry support.	2 years ago
Herman Slatman	3ec9a7310c	Fix ACME order identifier allow/deny check	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Herman Slatman	af53a17bb4	Merge branch 'master' into herman/allow-deny	2 years ago
vijayjt	4822516d72	Remove redundant parameter type declaration	2 years ago
vijayjt	e699244291	Support Azure tokens from managed identities not associated with a VM	2 years ago
Mariano Cano	15b1049f19	Fix json tag for Azure.ObjectIDs.	2 years ago
vijayjt	4a10f2c584	Rename new fields as per feedback to remove AAD from the name	2 years ago
vijayjt	8b68bedffa	Add support for validation of certificate requests using Azure subscription and AAD object IDs. See #735	2 years ago