68 Commits

Author	SHA1	Message	Date
Herman Slatman	9e3807eaa3	Use SignWithContext in the critical paths	2023-09-19 16:34:29 +02:00
Mariano Cano	6ba20209c2	Verify CSR key fingerprint with attestation certificate key ... This commit makes sure that the attestation certificate key matches the key used on the CSR on an ACME device attestation flow.	2023-02-09 16:48:43 -08:00
Herman Slatman	64d9ad7b38	Validate Subject Common Name for Orders with Permanent Identifier	2023-01-20 16:54:55 +01:00
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2022-09-29 19:16:26 -05:00
max furman	f3d1863ec6	A few more linter errors	2022-09-20 21:01:55 -07:00
Mariano Cano	f0a24bd8ca	Add acme property to enable challenges ... Fixes #1027	2022-09-20 19:01:53 -07:00
Mariano Cano	191d9e8629	Use go.step.sm/crypto to set the permanent identifier	2022-09-20 18:57:43 -07:00
Mariano Cano	2b3b2c283a	Add attestation certificate validation for Apple devices	2022-09-20 18:51:43 -07:00
Brandon Weeks	5f5315260a	iOS 16 beta 1 support	2022-09-20 16:53:08 -07:00
Brandon Weeks	6f2b4d3042	Add ACME permanent-identifier identifier type	2022-09-20 16:48:28 -07:00
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2022-09-20 16:35:41 -07:00
Mariano Cano	34c6c65671	Pass attestation information to the Sign method ... Attestation information might be useful in authorizing webhooks	2022-09-16 12:37:41 -07:00
Mariano Cano	3cd72ac72a	Remove debug statements	2022-09-08 10:44:48 -07:00
Mariano Cano	54d92095ac	Validate proof of possession signature ... On the step format, validate proof of possession of the private key validating the signature in the attestation statement.	2022-09-01 10:45:31 -07:00
Mariano Cano	59b7603d1e	Use a clientAuth only cert for device-attest-01	2022-08-30 16:09:44 -07:00
Mariano Cano	2f7cb9225f	Use go.step.sm/crypto to set the permanent identifier	2022-08-10 17:38:18 -07:00
Mariano Cano	66356cff43	Add attestation certificate validation for Apple devices	2022-07-14 17:10:03 -07:00
Brandon Weeks	7e1b0bebd9	iOS 16 beta 1 support	2022-06-23 05:19:36 +10:00
Brandon Weeks	2ac8b69da2	Add ACME permanent-identifier identifier type	2022-06-23 05:19:36 +10:00
Herman Slatman	80bebda69c	Fix code style issue	2021-12-20 13:40:17 +01:00
Herman Slatman	bc0875bd7b	Disallow email address and URLs in the CSR ... Before this commit `step` would allow email addresses and URLs in the CSR. This doesn't fit nicely with the rest of ACME, in which identifiers need to be authorized before a certificate is issued.	2021-12-13 16:14:39 +01:00
Herman Slatman	13a31fd862	Merge branch 'master' into herman/ip-sans-improvements	2021-12-13 16:04:53 +01:00
Herman Slatman	ca707cbe05	Fix linting	2021-12-13 16:01:40 +01:00
Herman Slatman	a2c9b5cd7e	Allow IP identifiers in subject, including authorization enforcement ... To support IPs in the subject using `step-cli`, this PR ensures that Subject Common Names that can be parsed as an IP are also checked to have been authorized before. The PR for `step-cli` is here: github.com/smallstep/cli/pull/576.	2021-12-13 15:34:56 +01:00
Herman Slatman	06bb97c91e	Add logic for Account authorizations and improve tests	2021-12-02 16:25:35 +01:00
Herman Slatman	29f9730485	Satisfy golangci-lint	2021-11-12 17:13:10 +01:00
max furman	933b40a02a	Introduce gocritic linter and address warnings	2021-10-08 14:59:57 -04:00
Herman Slatman	8e4a4ecc1f	Refactor tests for sans	2021-06-26 00:48:40 +02:00
Herman Slatman	87b72afa25	Fix IP equality check and add more tests	2021-06-26 00:13:44 +02:00
Herman Slatman	64c15fde7e	Add tests for canonicalize function	2021-06-25 14:07:40 +02:00
Herman Slatman	218a2adb9f	Add tests for IP Order validations	2021-06-18 16:09:48 +02:00
Herman Slatman	84ea8bd67a	Fix PR comments	2021-06-18 12:03:46 +02:00
Herman Slatman	af4803b8b8	Fix tests	2021-06-04 11:14:59 +02:00
Herman Slatman	a6405e98a9	Remove fmt.	2021-06-04 00:06:15 +02:00
Herman Slatman	76dcf542d4	Fix mixed DNS and IP SANs in Order	2021-06-03 22:45:24 +02:00
Herman Slatman	af615db6b5	Support DNS and IPs as SANs in single Order	2021-06-03 22:03:21 +02:00
Herman Slatman	3e36522329	Add preliminary support for TLS-ALPN-01 challenge for IP identifiers	2021-05-29 00:19:14 +02:00
Herman Slatman	6d9710c88d	Add initial support for ACME IP validation	2021-05-28 16:40:46 +02:00
max furman	440678cb62	Add markInvalid arg to storeError for invalidating challenge	2021-03-29 22:58:26 -07:00
max furman	6b8585c702	PR review fixes / updates	2021-03-29 12:04:14 -07:00
max furman	1831920363	Finish order unit tests and remove unused mocklinker	2021-03-25 13:46:51 -07:00
max furman	bdf4c0f836	add acme order unit tests	2021-03-25 12:05:46 -07:00
max furman	c0a9f24798	add authorization and order unit tests	2021-03-25 12:05:46 -07:00
max furman	f72b2ff2c2	[acme db interface] nosql authz unit tests	2021-03-25 12:05:46 -07:00
max furman	8d2ebcfd49	[acme db interface] more unit tests	2021-03-25 12:05:46 -07:00
max furman	fc395f4d69	[acme db interface] compiles!	2021-03-25 12:05:46 -07:00
max furman	80a6640103	[acme db interface] wip	2021-03-25 12:05:46 -07:00
max furman	1135ae04fc	[acme db interface] wip	2021-03-25 12:05:46 -07:00
max furman	03ba229bcb	[acme db interface] wip more errors	2021-03-25 12:05:46 -07:00
max furman	2ae43ef2dc	[acme db interface] wip errors	2021-03-25 12:05:46 -07:00