384 Commits (4a0cfd24e56866d79d753caff7c627b058334170)

Author	SHA1	Message	Date
Herman Slatman	c7c5c3c94e	Merge branch 'master' into herman/scep-macos-renewal-fixes	3 years ago
Herman Slatman	8838961b68	Merge branch 'master' into hs/acme-eab	3 years ago
Herman Slatman	64680bb16d	Fix PR comments	3 years ago
Herman Slatman	3612eefc31	Cleanup	3 years ago
Herman Slatman	9c6580ccd2	Fix macOS SCEP client issues ... Fixes #746	3 years ago
Mariano Cano	0920224816	Fix error message.	3 years ago
Mariano Cano	449a9fdfd6	Address review comments.	3 years ago
Mariano Cano	b424aa3dc1	Add nebula header and use der version of certificate.	3 years ago
Mariano Cano	f49a4b326f	Add missing comments.	3 years ago
Mariano Cano	6600f1253e	Fix error messages after review.	3 years ago
Mariano Cano	de51c2edfb	More unit tests for nebula.	3 years ago
Mariano Cano	99845d38bb	Add some extra unit tests for nebula.	3 years ago
Mariano Cano	76794ce613	Use default SANs without sans in the token. ... Fix step claim condition in SSH	3 years ago
Mariano Cano	9ec0276887	Update certificate set with new api.	3 years ago
Mariano Cano	cb72796a2d	Fix decoding of certificate.	3 years ago
Mariano Cano	32390a2964	Add initial implementation of a nebula provisioner. ... A nebula provisioner will generate a X509 or SSH certificate with the identities in the nebula certificate embedded in the token. The token is signed with the private key of the nebula certificate.	3 years ago
Herman Slatman	d799359917	Merge branch 'master' into hs/acme-eab	3 years ago
Herman Slatman	3bc3957b06	Merge branch 'master' into hs/acme-revocation	3 years ago
Herman Slatman	d0c23973cc	Merge branch 'master' into hs/acme-eab	3 years ago
Mariano Cano	e0fee84694	Add comment about public key validator.	3 years ago
Herman Slatman	a7fbbc4748	Add tests for GetCertificateBySerial	3 years ago
Herman Slatman	c9cd876a7d	Merge branch 'master' into hs/acme-revocation	3 years ago
Mariano Cano	c3f98fd04d	Change some bad requests to forbidded. ... Change in the sign options bad requests to forbidded if is the provisioner the one adding a restriction, e.g. list of dns names, validity, ...	3 years ago
Mariano Cano	b9beab071d	Fix unit tests.	3 years ago
Mariano Cano	507a272b4d	Return always http errors in sign options.	3 years ago
Mariano Cano	a33709ce8d	Fix sign ssh options tests.	3 years ago
Mariano Cano	1da7ea6646	Return always http errors in sign ssh options.	3 years ago
Herman Slatman	2d50c96d99	Merge branch 'master' into hs/acme-revocation	3 years ago
Mariano Cano	b6ebd118fc	Update temporal solution for sending message to users	3 years ago
Mariano Cano	668d3ea6c7	Modify errs.Wrap() with bad request to send messages to users.	3 years ago
Mariano Cano	8c8db0d4b7	Modify errs.BadRequestErr() to always return an error to the client.	3 years ago
Mariano Cano	8ce807a6cb	Modify errs.BadRequest() calls to always send an error to the client.	3 years ago
Mariano Cano	440616cffa	Merge pull request #750 from smallstep/duration-errors ... Report duration errors directly to the cli.	3 years ago
Mariano Cano	acd0bac025	Remove extra and in comment.	3 years ago
Mariano Cano	1aadd63cef	Use always badRequest on duration errors.	3 years ago
Mariano Cano	41fec1577d	Report duration errors directly to the cli.	3 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
Herman Slatman	3151255a25	Merge branch 'master' into hs/acme-revocation	3 years ago
Herman Slatman	e0b495e4c8	Merge branch 'master' into hs/acme-eab	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Herman Slatman	9d4cafc4bd	Merge branch 'master' into hs/acme-eab	3 years ago
Mariano Cano	a50654b468	Check for admins in both emails and groups.	3 years ago
Herman Slatman	66464ae302	Merge branch 'master' into hs/acme-eab	3 years ago
Mariano Cano	141c519171	Simplify check of principals in a case insensitive way ... Fixes #679	3 years ago
Fearghal O Floinn	7a94b0c157	Converts group and subgroup to lowercase for comparison. ... Fixes #679	3 years ago
Mariano Cano	f919535475	Add an extra way to distinguish Azure and Azure OIDC tokens. ... We used to distinguish these tokens using the azp claim, but this claim does not appear on new azure oidc tokens, at least on some configurations. This change will try to load by audience (client id) if the token contains an email, required for OIDC.	3 years ago
Herman Slatman	a98fe03e80	Merge branch 'master' into hs/acme-eab	3 years ago
Mariano Cano	40e77f6e9a	Initialize required variables on GetIdentityToken ... Fixes smallstep/cli#465	3 years ago
Mariano Cano	42fde8ba28	Merge branch 'master' into linkedca	3 years ago
Mariano Cano	d4ae267add	Fix ErrAllowTokenReuse comment.	3 years ago