Commit Graph

2004 Commits (2eb69636ea2f67f481b54725b6617ea1ba4d6b16)
 

Author SHA1 Message Date
Mariano Cano d9f93ccfde Fix typo. 4 years ago
Mariano Cano edc7c4d90e Add support for password encrypted files 4 years ago
Mariano Cano 80542d6d9a Add JWK as an issuer for stepcas. 4 years ago
Mariano Cano 81428afa6f
Merge pull request #514 from gdbelvin/pin
PKCS11 Init Pin Flag
4 years ago
Gary Belvin 341966c30f Check pin flag 4 years ago
Carl Tashian 9146fe8055 Merge branch 'carl/sysd-update' 4 years ago
Gary Belvin 1ac838628a Add flag for setting the pin 4 years ago
Mariano Cano ce3e6bfdf6 Fix linting errors. 4 years ago
Mariano Cano 0b8528ce6b Allow mTLS revocation without provisioner. 4 years ago
Mariano Cano 96de4e6ec8 Return a non-implemented error in stepcas.RenewCertificate. 4 years ago
Mariano Cano 348815f4f6 Fix error message. 4 years ago
Herman Slatman 583d60dc0d
Address (most) PR comments 4 years ago
Herman Slatman a526065d0c
Merge branch 'master' into hs/scep 4 years ago
Mariano Cano e7a6c46e54 Fix linting errors. 4 years ago
Mariano Cano 08e75b614e Do not depend on Go 1.16. 4 years ago
Mariano Cano 6fd6270e7d Remove debug statements. 4 years ago
Mariano Cano 7958f6ebb5 Add support for lifetime. 4 years ago
Mariano Cano ae4b8f58b8 Add support for emails, ips and uris. 4 years ago
Mariano Cano 561341a6f2 Update go.step.sm/crypto. 4 years ago
Mariano Cano dbb48ecf8d Add tests for stepcas. 4 years ago
Mariano Cano bcf70206ac Add support for revocation using an extra provisioner in the RA. 4 years ago
Mariano Cano a6115e29c2 Add initial implementation of StepCAS.
StepCAS allows to configure step-ca as an RA using another step-ca
as the main CA.
4 years ago
Carl Tashian 9f0fce6df8 Quoting fix 4 years ago
Carl Tashian 2c09baf696 Two small systemd changes
1. Don't halt the cert renewer service from ExecStartPost ops if a relying service doesn't exist; halt it if the relying service exists and doesn't restart properly.
2. Use /bin/env bash instead of /bin/bash for portability.
4 years ago
max furman 3b9eed003d [action] set goreleaser config values back to default 4 years ago
max furman 6861202762 go.sum update 4 years ago
max furman 6d879affa4 [action] remove duplicate step in job 4 years ago
Carl Tashian 33bba8fcd5 Fix goreleaser indentation issue 4 years ago
Carl Tashian 7249f495a9
Merge pull request #503 from smallstep/carl/goreleaser-windows
Add step-ca Windows build & Scoop release to goreleaser
4 years ago
Herman Slatman a4844fee7b
Make tests green 4 years ago
Herman Slatman 99952080c7
Make tests not fail hard on ECDSA keys
All tests for the Authority failed because the test data
contains ECDSA keys. ECDSA keys are no crypto.Decrypter,
resulting in a failure when instantiating the Authority.
4 years ago
Herman Slatman e30084c9a8
Make linter happy 4 years ago
Herman Slatman 3e0dac3ab4
Fix certificateChain property 4 years ago
Herman Slatman e1cab4966f
Improve initialization of SCEP authority 4 years ago
Herman Slatman 8c5b12e21d
Add non-TLS server and improve crypto.Decrypter interface
A server without TLS was added to serve the SCEP endpoints. According
to the RFC, SCEP has to be served via HTTP. The `sscep` client, for
example, will stop any URL that does not start with `http://` from
being used, so serving SCEP seems to be the right way to do it.

This commit adds a second server for which no TLS configuration is
configured. A distinct field in the configuration, `insecureAddress`
was added to specify the address for the insecure server.

The SCEP endpoints will also still be served via HTTPS. Some clients
may be able to work with that.

This commit also improves how the crypto.Decrypter interface is
handled for the different types of KMSes supported by step. The
apiv1.Decrypter interface was added. Currently only SoftKMS
implements this interface, providing a crypto.Decrypter required
for SCEP operations.
4 years ago
Herman Slatman efd5501aca
Merge branch 'master' into hs/scep 4 years ago
Carl Tashian 192207d263 Add Windows build to goreleaser 4 years ago
Herman Slatman 538fe8114d
Fix linter issues 4 years ago
Herman Slatman cc1ecb9438
Store new certificates in database 4 years ago
Mariano Cano a98ea5f9cd
Merge pull request #502 from smallstep/windows-ui
Add support for cli-utils with powershell support.
4 years ago
Mariano Cano d74f1fa55e Use cli-utils v0.2.0 4 years ago
Mariano Cano a1a7e38a49 Add support for cli-utils with powershell support. 4 years ago
Herman Slatman 47c2a82d3b
Merge branch 'master' into hs/scep 4 years ago
Herman Slatman 9902dc1079
Add signed failure responses 4 years ago
Dominic Evans 9ee4441a79
Log successful /health requests at Trace lvl
Adds `STEP_LOGGER_ONLY_TRACE_HEALTH_ENDPOINT` environment variable to
opt-in to only logging successful /health requests at the Trace level

Fixes #420

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
4 years ago
Carl Tashian 4d7338f763
Merge pull request #499 from smallstep/carl/readmes
Update "build from source" instructions
4 years ago
Carl Tashian 35be06f4aa Amendments to CONTRIBUTING doc 4 years ago
Herman Slatman 2536a08dc2
Add support for configuring capabilities (cacaps) 4 years ago
Herman Slatman e4d7ea8fa0
Add support for challenge password 4 years ago
Herman Slatman 2d21b09d41
Remove some duplicate and unnecessary logic 4 years ago