Commit Graph

3975 Commits

Author SHA1 Message Date
Mariano Cano
49045a1150
Change CommonName validator in JWK
This commit changes the common name validator in the JWK provisioner to
accept either the token subject or any of the sans in the token.
2023-10-31 16:44:18 -07:00
github-actions[bot]
ef2b43d888
Merge pull request #1604 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.3
Bump cloud.google.com/go/security from 1.15.2 to 1.15.3
2023-10-30 17:14:28 +01:00
dependabot[bot]
3528012614
Bump cloud.google.com/go/security from 1.15.2 to 1.15.3
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.15.2 to 1.15.3.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.2...kms/v1.15.3)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 15:58:06 +00:00
github-actions[bot]
a278e707e8
Merge pull request #1605 from smallstep/dependabot/go_modules/github.com/google/uuid-1.4.0
Bump github.com/google/uuid from 1.3.1 to 1.4.0
2023-10-30 16:54:37 +01:00
github-actions[bot]
7043ff1464
Merge pull request #1606 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.5.3
Bump cloud.google.com/go/longrunning from 0.5.2 to 0.5.3
2023-10-30 16:53:56 +01:00
dependabot[bot]
15383bae66
Bump cloud.google.com/go/longrunning from 0.5.2 to 0.5.3
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.5.2 to 0.5.3.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/longrunning/v0.5.2...longrunning/v0.5.3)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 15:49:04 +00:00
dependabot[bot]
4c51360400
Bump github.com/google/uuid from 1.3.1 to 1.4.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 15:48:46 +00:00
Herman Slatman
71a4481e57
Merge pull request #1600 from smallstep/herman/use-smallstep-scep-and-pkcs7
Use Smallstep SCEP and PKCS7 libraries
2023-10-25 12:15:31 +02:00
Herman Slatman
af649018a2
Merge branch 'master' into herman/use-smallstep-scep-and-pkcs7 2023-10-24 21:50:58 +02:00
Herman Slatman
1abada69b0
Update import aliases from microscep to smallscep 2023-10-24 21:48:24 +02:00
Herman Slatman
4c17f25389
Replace MicroMDM and Mozilla libraries with Smallstep forks 2023-10-24 21:44:34 +02:00
github-actions[bot]
5e70d6fc81
Merge pull request #1597 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.27.0
Bump github.com/newrelic/go-agent/v3 from 3.26.0 to 3.27.0
2023-10-23 20:17:40 +02:00
github-actions[bot]
27fdfca7c8
Merge pull request #1595 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.59.0
Bump google.golang.org/grpc from 1.58.3 to 1.59.0
2023-10-23 20:04:56 +02:00
dependabot[bot]
352979ac23
Bump google.golang.org/grpc from 1.58.3 to 1.59.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.3 to 1.59.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.3...v1.59.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-23 17:54:18 +00:00
github-actions[bot]
0425a0c86c
Merge pull request #1596 from smallstep/dependabot/go_modules/google.golang.org/api-0.148.0
Bump google.golang.org/api from 0.147.0 to 0.148.0
2023-10-23 19:52:03 +02:00
dependabot[bot]
756bec0df8
Bump google.golang.org/api from 0.147.0 to 0.148.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.147.0 to 0.148.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.147.0...v0.148.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-23 17:43:05 +00:00
dependabot[bot]
16f1606ad4
Bump github.com/newrelic/go-agent/v3 from 3.26.0 to 3.27.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.26.0 to 3.27.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.26.0...v3.27.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-23 17:42:16 +00:00
Max
c451546cfb
[action] fix actionlint warnings (#1598) 2023-10-23 19:22:26 +02:00
Mariano Cano
96c87bb99e
Merge pull request #1590 from smallstep/mariano/asn1-bool
Upgrade go.step.sm/crypto with ASN.1 bool support
2023-10-18 11:48:28 -07:00
Mariano Cano
ad22f149b7
Upgrade go.step.sm/crypto with ASN.1 bool support
This commit upgrades go.step.sm/crypto dependency with a version that
adds support of ASN.1 boolean encoding.
2023-10-18 11:42:55 -07:00
Carl Tashian
5d10e54551
Merge pull request #1580 from smallstep/carl/unversioned
Wrap unversioned step-ca binary into an unversioned dir
2023-10-17 10:26:08 -07:00
github-actions[bot]
06baf58c9f
Merge pull request #1588 from smallstep/dependabot/github_actions/dependabot/fetch-metadata-1.6.0
Bump dependabot/fetch-metadata from 1.1.1 to 1.6.0
2023-10-17 15:44:14 +02:00
github-actions[bot]
d5663ef021
Merge pull request #1589 from smallstep/dependabot/go_modules/google.golang.org/api-0.147.0
Bump google.golang.org/api from 0.145.0 to 0.147.0
2023-10-17 15:42:55 +02:00
dependabot[bot]
d5f17908a3
Bump google.golang.org/api from 0.145.0 to 0.147.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.145.0 to 0.147.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.145.0...v0.147.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-17 13:40:40 +00:00
dependabot[bot]
f548c13e3e
Bump dependabot/fetch-metadata from 1.1.1 to 1.6.0
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.1.1 to 1.6.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.1.1...v1.6.0)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-17 13:39:37 +00:00
Max
830f31c6d1
[action] add dependabot updates for github actions (#1586) 2023-10-17 16:39:17 +03:00
github-actions[bot]
819a4d7d6b
Merge pull request #1584 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.2
Bump cloud.google.com/go/security from 1.15.1 to 1.15.2
2023-10-17 12:09:49 +02:00
github-actions[bot]
f8ae8f252e
Merge pull request #1582 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.3
Bump google.golang.org/grpc from 1.58.2 to 1.58.3
2023-10-17 12:09:32 +02:00
github-actions[bot]
7008feae30
Merge pull request #1583 from smallstep/dependabot/go_modules/github.com/google/go-cmp-0.6.0
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0
2023-10-17 12:09:17 +02:00
github-actions[bot]
c70c092557
Merge pull request #1585 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.36.0
Bump go.step.sm/crypto from 0.35.1 to 0.36.0
2023-10-17 12:09:01 +02:00
dependabot[bot]
2574555672
Bump cloud.google.com/go/security from 1.15.1 to 1.15.2
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.1...kms/v1.15.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-17 09:47:04 +00:00
github-actions[bot]
3a633c1cf6
Merge pull request #1581 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.5.2
Bump cloud.google.com/go/longrunning from 0.5.1 to 0.5.2
2023-10-17 11:44:25 +02:00
dependabot[bot]
d66ddf890c
Bump go.step.sm/crypto from 0.35.1 to 0.36.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.35.1 to 0.36.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.35.1...v0.36.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:42:54 +00:00
dependabot[bot]
7ada4cac91
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.9 to 0.6.0.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.5.9...v0.6.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:42:01 +00:00
dependabot[bot]
6d6b8882ad
Bump google.golang.org/grpc from 1.58.2 to 1.58.3
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.2 to 1.58.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.2...v1.58.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:41:48 +00:00
dependabot[bot]
c6daca0c2e
Bump cloud.google.com/go/longrunning from 0.5.1 to 0.5.2
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.5.1 to 0.5.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/dataflow/v0.5.1...longrunning/v0.5.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-16 15:41:28 +00:00
Carl Tashian
de1dc6838f
Wrap unversioned step into an unversioned dir 2023-10-12 15:20:03 -07:00
Carl Tashian
63aa894525
Wrap unversioned step into an unversioned dir 2023-10-12 15:17:16 -07:00
Mariano Cano
f7836a0664
Merge pull request #1578 from smallstep/upgrade-x-net-http2
Upgrades golang.org/x/net/http2
2023-10-10 12:55:23 -07:00
Mariano Cano
532fc228d3
Upgrades golang.org/x/net/http2
Although step-ca doesn't manually configure HTTP/2, the new version
fixes the issue described in https://go.dev/issue/63417.
2023-10-10 12:32:13 -07:00
github-actions[bot]
95bf3d60ef
Merge pull request #1574 from smallstep/dependabot/go_modules/golang.org/x/net-0.16.0
Bump golang.org/x/net from 0.15.0 to 0.16.0
2023-10-10 10:59:39 +02:00
dependabot[bot]
bf7aa211eb
Bump golang.org/x/net from 0.15.0 to 0.16.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.15.0 to 0.16.0.
- [Commits](https://github.com/golang/net/compare/v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-09 23:05:10 +00:00
github-actions[bot]
06174b9ea7
Merge pull request #1575 from smallstep/dependabot/go_modules/google.golang.org/api-0.145.0
Bump google.golang.org/api from 0.143.0 to 0.145.0
2023-10-10 01:02:53 +02:00
dependabot[bot]
51612b6345
Bump google.golang.org/api from 0.143.0 to 0.145.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.143.0 to 0.145.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.143.0...v0.145.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-09 15:14:33 +00:00
Max
9f84f7ce35
Allow for identity certificate signing (in sshSign) by skipping validators (#1572)
- skip urisValidator for identity certificate signing. Implemented
  by building the validator with the context in a hacky way.
2023-10-06 14:02:19 -07:00
Herman Slatman
06750b03fe
Merge pull request #1566 from smallstep/herman/fix-init-with-duplicate-provisioner-name
Fix `step ca init` with duplicate provisioner name (`--provisioner acme --acme`)
2023-10-04 23:29:58 +02:00
Herman Slatman
d1dd1fa69c
Merge pull request #1570 from smallstep/herman/improve-scep-request-handling
Improve SCEP request handling
2023-10-04 22:51:44 +02:00
Herman Slatman
25f4b4014d
Add base64 to the raw message decoding error 2023-10-04 13:34:26 +02:00
Herman Slatman
965d7aa7f4
Fix linting issues 2023-10-04 13:33:01 +02:00
Herman Slatman
cd78b9fd43
Implement workaround for weird macOS SCEP message in query
Apparently the macOS SCEP client sends a SCEP message in the query
that's not fully escaped. Only the base64 padding is escaped, the
'+' and '/' characters aren't.

This is a bit of a special case, because the macOS SCEP client
will default to using HTTP POST for the PKIOperation. But if the
CA is configured without the POSTPKIOperation capability, the
macOS SCEP client will use HTTP GET instead. This behavior might
be the same on iOS.
2023-10-04 13:16:48 +02:00