Herman Slatman
0f35bb1af5
Defer missing decrypter/signer configuration errors to SCEP authority
1 year ago
Herman Slatman
afdd8d3786
Upgrade `golang.org/x/net` to `v0.13.0`
1 year ago
Herman Slatman
f3c24fe875
Change how multiple identifiers are printed in errors
1 year ago
Herman Slatman
4496830859
Merge branch 'master' into herman/acme-attestation-errors
1 year ago
Herman Slatman
fc1fb51854
Improve SCEP authority initialization and reload
1 year ago
Herman Slatman
7163c4f95f
Add helper for getting the appropriate SCEP response signer
1 year ago
Herman Slatman
59b7419dcf
Rely on latest `linkedca` commit with `SCEPDecrypter` support
1 year ago
Herman Slatman
569a1be12c
Merge branch 'master' into herman/scep-provisioner-decrypter
1 year ago
github-actions[bot]
c07124e374
Merge pull request #1499 from smallstep/dependabot/go_modules/google.golang.org/api-0.134.0
...
Bump google.golang.org/api from 0.132.0 to 0.134.0
1 year ago
dependabot[bot]
74240092e9
Bump google.golang.org/api from 0.132.0 to 0.134.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.132.0 to 0.134.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.132.0...v0.134.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
github-actions[bot]
edd718d89e
Merge pull request #1498 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.57.0
...
Bump google.golang.org/grpc from 1.56.2 to 1.57.0
1 year ago
dependabot[bot]
a8b67cd9e6
Bump google.golang.org/grpc from 1.56.2 to 1.57.0
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.56.2 to 1.57.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.56.2...v1.57.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
Herman Slatman
a0cdad335d
Add test for `WithAdditionalErrorDetail`
1 year ago
Herman Slatman
9a52675865
Return descriptive error when using unsupported format
1 year ago
Herman Slatman
0d3338ff3a
Return consistent ACME error types for specific cases
1 year ago
Herman Slatman
df22b8a303
Cleanup some leftover TODOs
1 year ago
Mariano Cano
d8a9c69eaa
Merge pull request #1484 from smallstep/fix-620
...
Add support for the disableSmallstepExtensions claim
1 year ago
Herman Slatman
dd9bf1e915
Add error details for the `step` format
1 year ago
Herman Slatman
9cbbd1d575
Add error details to ACME `tpm` format validation errors
1 year ago
Herman Slatman
d5dd8feccd
Prevent internal errors from being returned to ACME clients
1 year ago
Herman Slatman
979e0f8f51
Add error details to select error cases for `apple` format
1 year ago
Mariano Cano
d0fd9ebe42
Update Makefile preparing for a new release
1 year ago
Mariano Cano
cce7d9e839
Address comments from code review
1 year ago
Mariano Cano
c7c7decd5e
Add support for the disableSmallstepExtensions claim
...
This commit adds a new claim to exclude the Smallstep provisioner
extension from the generated certificates.
Fixes #620
1 year ago
Mariano Cano
d7efceadb1
Merge pull request #1493 from smallstep/steppath
...
Remove automatic initialization of the STEPPATH
1 year ago
Mariano Cano
7429008599
Use tagged versions of crypto and cli-utils
1 year ago
Herman Slatman
1ce80cf740
Merge branch 'master' into herman/scep-provisioner-decrypter
1 year ago
Herman Slatman
567fc25404
Use the RSA decryption configuration for signing responses too
1 year ago
Mariano Cano
7061147885
Use step.Abs to load the certificate templates
...
step.Abs has been removed from crypto and they need to be set when those
methods are used
1 year ago
Mariano Cano
40a2f53589
Remove automatic initialization of the STEPPATH
...
This commit upgrades cli-utils and crypto packages that remove the
automatic initialization of the STEPPATH.
1 year ago
Herman Slatman
557672bb4b
Add some notes for SCEP provisioners
1 year ago
Mariano Cano
95887ebf40
Merge pull request #1481 from smallstep/remove-user-regex
...
Remove OIDC user regexp check
1 year ago
Josh Drake
a1350b14fb
Merge pull request #1489 from smallstep/josh/authorization-principal-in-webhook
...
Include authorization principal in provisioner webhooks.
1 year ago
Mariano Cano
c9df65ebae
Merge pull request #1490 from smallstep/dry-run-migration
...
Add option to dry-run the migration
1 year ago
Mariano Cano
d9d7c52997
Add option to dry-run the migration
...
This commit adds an option that runs the migration on a virtual database
that doesn't do anything. This option can be used to see how many rows
there are.
1 year ago
Josh Drake
ff424fa944
Fix tests.
1 year ago
github-actions[bot]
7282245e88
Merge pull request #1488 from smallstep/dependabot/go_modules/go.step.sm/linkedca-0.20.0
...
Bump go.step.sm/linkedca from 0.19.1 to 0.20.0
1 year ago
github-actions[bot]
9a7582d1d3
Merge pull request #1487 from smallstep/dependabot/go_modules/google.golang.org/api-0.132.0
...
Bump google.golang.org/api from 0.131.0 to 0.132.0
1 year ago
dependabot[bot]
7796ad8f90
Bump go.step.sm/linkedca from 0.19.1 to 0.20.0
...
Bumps [go.step.sm/linkedca](https://github.com/smallstep/linkedca ) from 0.19.1 to 0.20.0.
- [Release notes](https://github.com/smallstep/linkedca/releases )
- [Commits](https://github.com/smallstep/linkedca/compare/v0.19.1...v0.20.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/linkedca
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
dependabot[bot]
2d666cfc4f
Bump google.golang.org/api from 0.131.0 to 0.132.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.131.0 to 0.132.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.131.0...v0.132.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 year ago
Josh Drake
904f416d20
Include authorization principal in provisioner webhooks.
1 year ago
Mariano Cano
d89c3a942e
Merge pull request #1486 from smallstep/migrate-admindb
...
Add to the migration script the admin tables
1 year ago
Mariano Cano
aa30c2c73c
Add to the migration script the admin tables
1 year ago
Mariano Cano
31533c4a15
Merge pull request #1485 from smallstep/webhooks-x5c
...
Send X5C leaf certificate to webhooks
1 year ago
Mariano Cano
5bfe96d8c7
Send X5C leaf certificate to webhooks
...
This commit adds a new property that will be sent to authorizing and
enriching webhooks when signing certificates using the X5C provisioner.
1 year ago
Mariano Cano
d604a900ed
Merge pull request #1482 from smallstep/fix-reload-tests
...
Wait for Accept in TestBootstrapClientServerRotation
1 year ago
Mariano Cano
0c3a1aea38
Wait for Accept in TestBootstrapClientServerRotation
...
The TestBootstrapClientServerRotation often fails because the reload
returns once the Server loop gets the new listener, but the server
hasn't really started yet. This commit makes the test pass, adding a
small sleep after the reload.
A proper fix might require a wrapper over the listener and an ACK
callback on a sync.Once on a custom Accept.
1 year ago
Mariano Cano
7fa97bedec
Remove OIDC user regexp check
...
This commit removes the regular expression check on OIDC usernames.
Although it is not recommended to use any character in a username,
it is possible to create and use them. The tool useradd has the flag
--badname and adduser has --allow-badname and --allow-all-names to
create new users with any character.
Moreover, it is possible to create any username with the rest of
provisioners.
Fixes #1436
1 year ago
Mariano Cano
cbc46d11e5
Merge pull request #1477 from smallstep/badger-migration
...
Add tool to migrate data from badger to mysql or postgresql
1 year ago
Mariano Cano
1755c8d60f
Fix typo in comment
1 year ago