Commit Graph

244 Commits (59b7603d1e27634f3d100618581429e886342c82)

Author SHA1 Message Date
Mariano Cano 6db631df51 Upgrade go.step.sm/crypto@attest 2 years ago
Mariano Cano 2a44972830 Run go mod tidy 2 years ago
Mariano Cano bca311b05e Add acme property to enable challenges
Fixes #1027
2 years ago
Mariano Cano 693dc39481 Merge branch 'master' into device-attestation 2 years ago
Mariano Cano 6cab4d328e Add a middleware to automatically route HEAD requests to GET
Fixes #992
2 years ago
Mariano Cano 0c7467ceb2 Allow to automatically configure and linked RA 2 years ago
Mariano Cano 5df1694250 Add endpoint id for the RA certificate
In a linked RA mode, send an endpoint id to group the server
certificates.
2 years ago
Mariano Cano 2f7cb9225f Use go.step.sm/crypto to set the permanent identifier 2 years ago
Mariano Cano 369b8f81c3 Use go.step.sm/crypto/kms
Fixes #975
2 years ago
Mariano Cano e02a190fa7 Merge branch 'master' into device-attestation 2 years ago
Mariano Cano 8445c29db6 Change actions to build using Go 1.19
Fixes #998
2 years ago
Mariano Cano 38fb92452f
Merge pull request #993 from smallstep/ra-ids
RA provisioner IDs
2 years ago
Mariano Cano 821743f71e Upgrade newrelic to v3 2 years ago
Aaron Bieber 135c481893 Update deps to bring in support for OpenBSD
OpenBSD support was added to the following deps:
 - github.com/go-piv/piv-go in https://github.com/go-piv/piv-go/pull/101
 - github.com/newrelic/go-agent in https://github.com/newrelic/go-agent/pull/455
 - github.com/miekg/pkcs11 in https://github.com/miekg/pkcs11/pull/140

With these deps bumped, tests all pass on OpenBSD amd64.
2 years ago
Mariano Cano a2f7766943 Use released version of linkedca 2 years ago
Mariano Cano 64744562c6 Send RA provisioner to linkedca. 2 years ago
Brandon Weeks 77c6d10fd6 Verify key authorization is contained within the TPM quote extraData field 2 years ago
Brandon Weeks e1ec31c0ed Implement TPM attestation statement verification 2 years ago
Brandon Weeks 2ac8b69da2 Add ACME permanent-identifier identifier type 2 years ago
Mariano Cano 2adf8caac7 Fix Dependabot warning on an indirect dependency 2 years ago
Erik De Lamarter dec1067add
vault kubernetes auth 2 years ago
Herman Slatman d1ab1d5431
Merge branch 'master' into herman/update-crypto-0.16.2 2 years ago
Herman Slatman b75ce3acbd
Update to go.step.sm/crypto v0.16.2
This patch release of go.step.sm/crypto fixes an issue with
not all `Subject` names being available for usage in a template
as `ExtraNames`.
2 years ago
Herman Slatman 7030dbb7a1
Use github.com/smallstep/pkcs7 fork with patches applied 2 years ago
Herman Slatman ed231d29e2
Update to go.step.sm/linkedca@v0.16.1 2 years ago
Herman Slatman f0272dc717
Fix import replacement of linkedca 2 years ago
Herman Slatman 60d8b22d89
Change context retrievers to MustTFromContext 2 years ago
Herman Slatman ad2de16299
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano fe9c3cf753
Merge branch 'master' into ahmet2mir-feat/vault 2 years ago
Herman Slatman d6be9450be
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano 674dc3c844 Rename unreleased claim to allowRenewalAfterExpiry for consistency. 2 years ago
Mariano Cano 9134bad22c Run go mod tidy. 2 years ago
Mariano Cano 37b521ec6c
Merge branch 'master' into feat/vault 2 years ago
Herman Slatman 9797b3350e
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano d4013f0df6 Update linkedca 2 years ago
Herman Slatman 7df52dbb76
Add ACME EAB policy 2 years ago
Herman Slatman 235a2c9d04
Pin to specific version of go.step.sm/linkedca 2 years ago
Herman Slatman 5daa9fc0b1
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano f5bf46b950 Upgrade go.step.sm/crypto 2 years ago
Herman Slatman 2fbdf7d5b0
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 1dbaa62740
Update cloud.google.com/go/kms 2 years ago
Herman Slatman dc23fd23bf
Merge branch 'master' into herman/allow-deny-next 2 years ago
Herman Slatman 6b620c8e9c
Improve protobuf unmarshaling error handling 2 years ago
Herman Slatman 81b0c6c37c
Add API implementation for authority and provisioner policy 2 years ago
Mariano Cano c903f00cd4 Rename claim to allowRenewAfterExpiry. 2 years ago
Mariano Cano 616490a9c6 Refactor renew after expiry token authorization
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
Mariano Cano 3fb5e57f12 Upgrade nosql package
The new version of the package allows filtering out database drivers
using Go tags.
2 years ago
Mariano Cano 6f46cdb432
Merge pull request #829 from vijayjt/new-azure-token-authz-options
Add subscription and object ID validation options to Azure provisioner
2 years ago
vijayjt 7a32c312bf Update linkedca dependency version 2 years ago
max furman 9d885e6914 bump nosql for postgres support 2 years ago