Mariano Cano
343e7308a8
Remove Disabled provisioner add add an Uninitialized state
...
This commit renames the Disabled provisioner to Uninitialized and adds
an state instead of just a boolean. It also adds tests.
3 months ago
Mariano Cano
39089325b5
Merge branch 'master' into mariano/init-provisioners
3 months ago
Mariano Cano
191f1a598d
Fix unit tests after introduction of rawSubject
3 months ago
Mariano Cano
f8bda96940
Apply suggestions from code review
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
4 months ago
Mariano Cano
cb9abbe25b
Add support for validities in templates
...
This commit upgrades go.step.sm/crypto with a version that adds support
for setting validity bounds in templates. It also adds support for these
in the certificate modifiers.
The priority for the validity bounds are:
1. Coming from flags.
2. Coming from the template.
3. Defaults.
4 months ago
Mariano Cano
c8e65abfb1
Fix linter warnings
4 months ago
Mariano Cano
b4616ee8f1
Upgrade linkedca
...
This commit upgrades go.step.sm/linkedca with dependencies required by
smallstep/certificates#1802 . It also fixes some linter warnings.
4 months ago
Mariano Cano
a017c0e3fb
Merge branch 'master' into AuthParams
4 months ago
Max
474f5d28f4
Update hardcoded AWS certs ( #1881 )
4 months ago
Mariano Cano
47b5048d82
Merge pull request #1850 from smallstep/mariano/signer
...
Add GetX509Signer method
5 months ago
max furman
99ce13a4ea
Fix linter warnings
5 months ago
Mariano Cano
812ffd3c40
Reverse assert statements
5 months ago
Mariano Cano
d0548f9ec9
Use %q instead of '%s'
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
5 months ago
Mariano Cano
9e8087fbb1
Add GetX509Signer method
...
This commit adds a method to the Authority type that returns the signer
used to sign X509 certificates.
5 months ago
Mariano Cano
f3f484cee2
Log errors using slog.Logger
...
This commit allows logging errors in a slog.Logger injected in the
context. This type of logger is not currently used directly in step-ca,
but this will change in the future.
5 months ago
Mariano Cano
d4862a2520
Add methods to get the intermediate certificates
...
This commit adds new methods to get the intermediate certificates.
5 months ago
Mariano Cano
b1e31b1726
Use always acme.IsErrNotFound
...
This commit replaces the comparisons with acme.ErrNotFound and always
uses acme.IsErrNotFound.
5 months ago
Herman Slatman
949e2fdb1c
Fix test error expectation in `TestAuthorityNew`
6 months ago
Jeremy Doupe
03c3cf5790
fixed Scopes and AuthParams assignment
6 months ago
Herman Slatman
113a6dd8ab
Remove reporting the CA mode from startup logs
6 months ago
Herman Slatman
6bc0a86207
Fix CA startup with Vault RA configuration
6 months ago
Jeremy Doupe
aa543a335a
add Scopes to OIDC struct
6 months ago
Jeremy Doupe
4879376138
add AuthParams and Scopes to linkedca OIDC structures
6 months ago
Jeremy Doupe
2fcf34066b
add AuthParams to OIDC struct
6 months ago
Herman Slatman
f1a2c68f43
Merge pull request #1798 from smallstep/herman/fix-instrumented-key-manager
...
Add support for `kmsapi.Decrypter` to instrumented key manager
6 months ago
Mariano Cano
7df3ad05ed
Merge pull request #1797 from smallstep/mariano/init-scep
...
Allow custom SCEP key manager
6 months ago
Mariano Cano
4202d6673c
Remove debug statement
6 months ago
Herman Slatman
d6bbe5b06b
Add support for `kmsapi.Decrypter` to instrumented key manager
6 months ago
verytrap
db92404342
chore: fix function names in comment
...
Signed-off-by: verytrap <wangqiuyue@outlook.com>
6 months ago
Mariano Cano
725a913f66
Allow custom SCEP key manager
...
This commit allows to inject a custom key manger for SCEP.
6 months ago
Mariano Cano
06a9d2e255
Allow custom SCEP key manager
...
This commit allows to inject a custom key manger for SCEP.
6 months ago
Mariano Cano
976bf0c2a2
Do not fail if a provisioner cannot be initialized
...
This commit will mark a provisioner as disabled if it fails to
initialize. The provisioner will be visible, but authorizing a token
with a disabled provisioner will always fail.
Fixes : #589 , #1757
7 months ago
Mariano Cano
0ac9023590
Fix typo in error message and comment
7 months ago
Mariano Cano
10f6a901ec
Let the CA determine the RA lifetime
...
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.
This commit also fixes linter warnings.
Related to #1094
7 months ago
Herman Slatman
b8510dd5b2
Make the `requestid` an exported middleware
8 months ago
Herman Slatman
10aa48c74a
Merge pull request #1743 from smallstep/herman/improve-request-id
...
Improve end-to-end request ID propagation
8 months ago
Herman Slatman
d392c169fc
Improve functional coverage of request ID integration test
8 months ago
Herman Slatman
7e5f10927f
Decouple request ID middleware from logging middleware
8 months ago
Panagiotis Siatras
fb4cd6fe81
fix: Webhook-related instruments
...
* fix: also instrument webhooks that do not reach the wire
* fix: register the webhook instrumentation
8 months ago
Herman Slatman
041b486c55
Remove usages of `Sign` without context
8 months ago
Herman Slatman
c16a0b70ee
Remove `smallstep/assert` and `pkg/errors` from webhook tests
8 months ago
Herman Slatman
9689508709
Add tests for webhook request IDs
8 months ago
Herman Slatman
2a8b80a3e1
Merge branch 'master' into herman/webhook-request-id
8 months ago
Herman Slatman
bb296c9d19
Merge pull request #1708 from smallstep/herman/csr-expires-header
...
Add `Expires` header to CRL endpoint
8 months ago
Mariano Cano
ac773ff44e
Merge branch 'master' into allow_external_x509_ca_service_intf
8 months ago
Remi Vichery
ee44ac104d
fixup! Add AWS ca-west-1 identity document certificate
8 months ago
Remi Vichery
283d46d9a7
Add AWS ca-west-1 identity document certificate
8 months ago
Herman Slatman
69f5f8d8ea
Use `stretchr/testify` instead of `smallstep/assert` for tests
8 months ago
Herman Slatman
d1deb7f930
Add `Expires` header to CRL response
8 months ago
Panagiotis Siatras
dd1ff9c15b
Implementation of the Prometheus endpoint ( #1669 )
...
Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.
9 months ago