Commit Graph

747 Commits (512b8d673083f0b61d1642e09575a8629629b2e3)

Author SHA1 Message Date
Herman Slatman 512b8d6730
Refactor instantiation of policy engines
Instead of using the `base` struct, the x509 and SSH policy
engines are now added to each provisioner directly.
3 years ago
Herman Slatman 066bf32086
Fix part of PR comments 3 years ago
Herman Slatman 6440870a80
Clean up, improve test cases and coverage 3 years ago
Herman Slatman 1e808b61e5
Merge logic for X509 and SSH policy 3 years ago
Herman Slatman 6bc301339f
Improve test case and code coverage 3 years ago
Herman Slatman 91d51c2b88
Add allow/deny to Nebula provisioner 3 years ago
Herman Slatman d9c56d67cc
Merge branch 'master' into herman/allow-deny 3 years ago
Herman Slatman 988efc8cd4
Merge pull request #792 from smallstep/herman/improve-template-errors
Improve errors related to template execution failures
3 years ago
Herman Slatman 50c3bce98d
Change if/if to if/else-if when checking the type of JSON error 3 years ago
max furman 4afcdd55ff Update doc line on WithSSHGetHosts 3 years ago
Herman Slatman a3cf6bac36
Add special handling for *json.UnmarshalTypeError 3 years ago
Herman Slatman 0475a4d26f
Refactor extraction of JSON template syntax errors 3 years ago
Herman Slatman a5455d3572
Improve errors related to template execution failures (slightly) 3 years ago
Mariano Cano de549adf2d Do not add extra new lines when creating nebula provisioners 3 years ago
Mariano Cano 0920224816 Fix error message. 3 years ago
Mariano Cano 449a9fdfd6 Address review comments. 3 years ago
Mariano Cano b424aa3dc1 Add nebula header and use der version of certificate. 3 years ago
Mariano Cano f49a4b326f Add missing comments. 3 years ago
Mariano Cano 6600f1253e Fix error messages after review. 3 years ago
Mariano Cano 6a1d0cb9f8 Add linkedca conversions. 3 years ago
Mariano Cano de51c2edfb More unit tests for nebula. 3 years ago
Mariano Cano 99845d38bb Add some extra unit tests for nebula. 3 years ago
Mariano Cano 76794ce613 Use default SANs without sans in the token.
Fix step claim condition in SSH
3 years ago
Herman Slatman 6bc0513468
Add more tests 3 years ago
Mariano Cano 9ec0276887 Update certificate set with new api. 3 years ago
Herman Slatman 9539729bd9
Add initial implementation of x509 and SSH allow/deny policy engine 3 years ago
Mariano Cano cb72796a2d Fix decoding of certificate. 3 years ago
Mariano Cano 32390a2964 Add initial implementation of a nebula provisioner.
A nebula provisioner will generate a X509 or SSH certificate with
the identities in the nebula certificate embedded in the token.
The token is signed with the private key of the nebula certificate.
3 years ago
Herman Slatman 3bc3957b06
Merge branch 'master' into hs/acme-revocation 3 years ago
Mariano Cano e0fee84694 Add comment about public key validator. 3 years ago
Herman Slatman 47a8a3c463
Add test case for ACME Revoke to Authority 3 years ago
Herman Slatman a7fbbc4748
Add tests for GetCertificateBySerial 3 years ago
Herman Slatman 2d357da99b
Add tests for ACME revocation 3 years ago
Herman Slatman c9cd876a7d
Merge branch 'master' into hs/acme-revocation 3 years ago
Mariano Cano d35848f7a9 Fix unit tests. 3 years ago
Mariano Cano c3f98fd04d Change some bad requests to forbidded.
Change in the sign options bad requests to forbidded if is the
provisioner the one adding a restriction, e.g. list of dns names,
validity, ...
3 years ago
Mariano Cano ff04873a2a Change the default error type to forbidden in Sign.
The errors will also be propagated from sign options.
3 years ago
Mariano Cano b9beab071d Fix unit tests. 3 years ago
Mariano Cano 507a272b4d Return always http errors in sign options. 3 years ago
Mariano Cano a33709ce8d Fix sign ssh options tests. 3 years ago
Mariano Cano 1da7ea6646 Return always http errors in sign ssh options. 3 years ago
Mariano Cano 031d4d7000 Return BadRequest when validating sign options. 3 years ago
Mariano Cano bb26799583 Modify errs.Wrap with forbidden errors. 3 years ago
Herman Slatman 2d50c96d99
Merge branch 'master' into hs/acme-revocation 3 years ago
Mariano Cano b6ebd118fc Update temporal solution for sending message to users 3 years ago
Mariano Cano 668d3ea6c7 Modify errs.Wrap() with bad request to send messages to users. 3 years ago
Mariano Cano 8c8db0d4b7 Modify errs.BadRequestErr() to always return an error to the client. 3 years ago
Mariano Cano 8ce807a6cb Modify errs.BadRequest() calls to always send an error to the client. 3 years ago
Max de2ce5cf9f
Merge pull request #692 from smallstep/max/context
Context management
3 years ago
Mariano Cano 440616cffa
Merge pull request #750 from smallstep/duration-errors
Report duration errors directly to the cli.
3 years ago