Commit Graph

2455 Commits (5f4ac5beffd82270fbd0282c3b56c411a6747239)
 

Author SHA1 Message Date
Mariano Cano e62d7988b8 Do not store password on exports. 3 years ago
Mariano Cano ac363d7824 Add --password-file and --issuer-password-file flags to export. 3 years ago
Mariano Cano 4f27f4b002 Change default ciphersuites to newer names. 3 years ago
Carl Tashian 97af829805 RA install script 3 years ago
Mariano Cano 07f7316851 Add bastion to export. 3 years ago
Mariano Cano 0730a165fd Add collection of files and authority template. 3 years ago
Mariano Cano c7f8516142 Add to export all the information in the ca.json 3 years ago
Mariano Cano 887423ee6e Update TLS cipher suites. 3 years ago
Carl Tashian 53d08e1f5c
Remove microbadger.com (the website is gone) 3 years ago
Carl Tashian 8f4c833845
Update README.md 3 years ago
Mariano Cano dc1ec18b52 Create a way to export ca configurations. 3 years ago
Mariano Cano d0c1530f89 Remove replace of linkedca package. 3 years ago
Mariano Cano 3a00b6b396 Properly marshal a certificate when we send it to linkedca. 3 years ago
Mariano Cano 4ad82a2f76 Check linkedca for revocation. 3 years ago
Herman Slatman 7dad7038c3
Fix missing ACME EAB API endpoints 3 years ago
Herman Slatman c6a4c4ecba
Change ACME EAB endpoint 3 years ago
Herman Slatman c6bfc6eac2
Fix PR comments 3 years ago
Herman Slatman b65a588d5b
Make authentication work for /admin/eak 3 years ago
Mariano Cano f7542a5bd9 Move check of ssh revocation from provisioner to the authority. 3 years ago
Carl Tashian cff19691b3
Merge pull request #654 from smallstep/needs-renewal
Fix needs-renewal condition and switch to using ExecCondition
3 years ago
Carl Tashian 09b554f855
Merge pull request #609 from smallstep/discord
update gitter to discord
3 years ago
Carl Tashian 22ef324534 Fix needs-renewal condition and switch to using ExecCondition 3 years ago
Mariano Cano 71f8019243 Store x509 and ssh certificates on linkedca if enabled. 3 years ago
Mariano Cano 17eef81c91 Remove linkerd replace. 3 years ago
Mariano Cano a72eab915b Use linkedca v0.1.0 3 years ago
Mariano Cano 7c0faab73e Remove now unused step-ca login. 3 years ago
Carl Tashian f8c137af4f
Update provisioners.md 3 years ago
Carl Tashian 28acc1b7d2
Merge pull request #653 from smallstep/needs-renewal
systemd cert renewer can now use 'step certificate needs-renewal'
3 years ago
Mariano Cano 8fb5340dc9 Use a token at start time to configure linkedca.
Instead of using `step-ca login` we will use a new token provided
as a flag to configure and start linkedca. Certificates will be kept
in memory and refreshed automatically.
3 years ago
Carl Tashian 0dd6564b1e
README link fixes 3 years ago
Carl Tashian 3e5b90b6fa systemd cert renewer can now use 'step certificate needs-renewal' 3 years ago
Herman Slatman d669f3cb14
Fix misspelling 3 years ago
Herman Slatman 540d5fbbdc
Fix marshaling -> marshalling 3 years ago
Herman Slatman 2110c7722f
Fix JWK payload key equality check 3 years ago
Herman Slatman a4cfb6698f
Merge branch 'master' into hs/acme-revocation 3 years ago
Herman Slatman 2eb69636ea
Merge branch 'master' into hs/acme-eab 3 years ago
Herman Slatman d44cd18b96
Add External Accounting Binding key "BoundAt" marking 3 years ago
Herman Slatman f81d49d963
Add first working version of External Account Binding 3 years ago
max furman bd51b1f85b Updates for new issue page 3 years ago
max furman a3af991261 Update pull request labeler action 3 years ago
max furman b71ff09a08 UI updates for certificates new issue page 3 years ago
Mariano Cano 4aa529605d
Merge pull request #641 from hillu/quote-serial
Log certificate's serial number as stringified decimal number
3 years ago
Mariano Cano 76413b845e
Merge pull request #644 from hslatman/hs/fix-provisioner-name-log
Fix logging provisioner name as string
3 years ago
Herman Slatman 9210a6740b
Fix logging provisioner name as string 3 years ago
Hilko Bengen edb01bc9f2 Log certificate's serial number as stringified decimal number
Using a JSON string fixes a common issue with JSON parsers that
deserialize all numbers to a 64-bit IEEE-754 floats. (Certificate
serial numbers are usually 128 bit values.)

This change is consistent with existing log entries for revocation
requests.

See also: #630, #631
3 years ago
Mariano Cano dd9850ce4c Add working implementation of the linkedca.
Replaces the authority adminDB with a new impmentation that users the
linkedca client to retrieve the data.

Note that this implementation still hardcodes the endpoint to localhost.
3 years ago
Mariano Cano 49c1427d15 Use authorityId instead of authorityID.
In json or javascript world authorityId, userId, ... are more common
than authorityID, ...
3 years ago
Mariano Cano f7e09af9df Implement the login command.
The login commands creates a new certificate for the linked ca.
This certificate will be used to sync data with the linkedca
endpoint.
3 years ago
Herman Slatman 258efca0fa
Improve revocation authorization 3 years ago
Herman Slatman 97165f1844
Fix test mocking for CreateCertificate 3 years ago