Herman Slatman
0475a4d26f
Refactor extraction of JSON template syntax errors
3 years ago
Mariano Cano
57f9e54151
Merge pull request #785 from smallstep/nebulous
...
Add initial implementation of a nebula provisioner
3 years ago
Herman Slatman
a5455d3572
Improve errors related to template execution failures (slightly)
3 years ago
Mariano Cano
de549adf2d
Do not add extra new lines when creating nebula provisioners
3 years ago
Mariano Cano
0920224816
Fix error message.
3 years ago
Herman Slatman
ef16febf40
Refactor ACME EAB queries
...
The ACME EAB keys are now also indexed by the provisioner. This
solves part of the issue in which too many EAB keys may be in
memory at a given time.
3 years ago
Mariano Cano
01a76445ea
Upgrade go.step.sm/crypto
3 years ago
Mariano Cano
98044cf08d
Use a tagged version of linkedca
3 years ago
Mariano Cano
449a9fdfd6
Address review comments.
3 years ago
Mariano Cano
b424aa3dc1
Add nebula header and use der version of certificate.
3 years ago
Herman Slatman
30859d3c83
Remove server-side paging logic for ExternalAccountKeys
3 years ago
Mariano Cano
f49a4b326f
Add missing comments.
3 years ago
Mariano Cano
6600f1253e
Fix error messages after review.
3 years ago
Mariano Cano
6a1d0cb9f8
Add linkedca conversions.
3 years ago
Mariano Cano
de51c2edfb
More unit tests for nebula.
3 years ago
Mariano Cano
99845d38bb
Add some extra unit tests for nebula.
3 years ago
Mariano Cano
76794ce613
Use default SANs without sans in the token.
...
Fix step claim condition in SSH
3 years ago
Herman Slatman
6929e31fe0
Merge branch 'master' into hs/acme-eab
3 years ago
Mariano Cano
9ec0276887
Update certificate set with new api.
3 years ago
Mariano Cano
cb72796a2d
Fix decoding of certificate.
3 years ago
Mariano Cano
32390a2964
Add initial implementation of a nebula provisioner.
...
A nebula provisioner will generate a X509 or SSH certificate with
the identities in the nebula certificate embedded in the token.
The token is signed with the private key of the nebula certificate.
3 years ago
Herman Slatman
8fee970297
Merge pull request #779 from smallstep/herman/acme-cli-user-agent
3 years ago
Herman Slatman
11a7f01177
Simplify lookup cursor logic for ExternalAccountKeys
3 years ago
Herman Slatman
5fe9909174
Refactor AdminAuthority interface
3 years ago
Herman Slatman
22ff90f655
Merge branch 'master' into hs/acme-eab
3 years ago
Herman Slatman
07addd0cac
Fix linting issue
3 years ago
Herman Slatman
a68208a3ba
Set Step CLI User-Agent when performing ACME requests
3 years ago
Herman Slatman
8473164b41
Merge pull request #773 from smallstep/herman/ip-sans-improvements
...
Improve IP SANS support
3 years ago
Herman Slatman
a5f2f004e3
Change name of IP Common Name test for clarity
3 years ago
Herman Slatman
f9ae875f9d
Use short if-style statements
3 years ago
Herman Slatman
80bebda69c
Fix code style issue
3 years ago
Mariano Cano
f7c1a328ed
Merge pull request #777 from smallstep/pkcs11-decrypter
...
Implement the kms.Decrypter with PKCS#11
3 years ago
Mariano Cano
d5c6572da4
Fix typo.
3 years ago
Mariano Cano
5a32401d23
Implement the kms.Decrypter with PKCS#11
...
This interface allows the use of SCEP with PKCS#11 modules.
3 years ago
Mariano Cano
ab44fbfb3f
Merge pull request #774 from smallstep/cm-roots
...
Avoid doing unauthenticated requests on the SDK
3 years ago
Mariano Cano
2c63abcf52
fix grammar
3 years ago
Mariano Cano
7c4e6dcc96
Remove duplicated code in bootstrap methods
3 years ago
Mariano Cano
64c19d4264
Fix subject in test, use ip
3 years ago
Mariano Cano
b0b2e77b0e
Avoid doing unauthenticated requests on the SDK
...
When step-ca runs with mTLS required on some endpoints, the SDK
used in autocert will fail to start because the identity certificate
is missing. This certificate is only required to retrieve all roots,
in most cases there's only one, and the SDK has access to it.
3 years ago
Herman Slatman
bc0875bd7b
Disallow email address and URLs in the CSR
...
Before this commit `step` would allow email addresses and URLs
in the CSR. This doesn't fit nicely with the rest of ACME, in which
identifiers need to be authorized before a certificate is issued.
3 years ago
Herman Slatman
13a31fd862
Merge branch 'master' into herman/ip-sans-improvements
3 years ago
Herman Slatman
ca707cbe05
Fix linting
3 years ago
Herman Slatman
a5d33512fe
Fix test
3 years ago
Herman Slatman
a2c9b5cd7e
Allow IP identifiers in subject, including authorization enforcement
...
To support IPs in the subject using `step-cli`, this PR ensures that
Subject Common Names that can be parsed as an IP are also checked
to have been authorized before.
The PR for `step-cli` is here: github.com/smallstep/cli/pull/576.
3 years ago
Herman Slatman
5f224b729e
Add tests for Provisioner Admin API
3 years ago
Herman Slatman
43a78f495f
Add tests for Admin API
3 years ago
Herman Slatman
bd169f505f
Add Admin API Middleware tests
3 years ago
Herman Slatman
d799359917
Merge branch 'master' into hs/acme-eab
3 years ago
Herman Slatman
63371a8fb6
Add additional tests for ACME EAB Admin
3 years ago
Herman Slatman
fbd3fd2145
Merge pull request #625 from hslatman/hs/acme-revocation
...
ACME Certificate Revocation
3 years ago