Commit Graph

2717 Commits (6532c933030e33e46c28ddc5018d17f3d3926720)
 

Author SHA1 Message Date
Mariano Cano af8fcf5b01 Use always LoadProvisionerByCertificate on authority package 2 years ago
Mariano Cano 1d1e095447 Add tests for LoadProvisionerByCertificate. 2 years ago
Mariano Cano e53bd64861 Use release version of linkedca. 2 years ago
Herman Slatman 0bb15e16f9
Fix missing ACME provisioner option 2 years ago
Herman Slatman 9797b3350e
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano dfdc9c06ed Fix linter error importShadow 2 years ago
Mariano Cano 304bb5b97a Remove unused code. 2 years ago
Mariano Cano cca5679a11 Use branch dependency for linkedca 2 years ago
Mariano Cano 8abd568f03 Merge branch 'master' into fix/adminra 2 years ago
Mariano Cano 67abe6607e
Merge pull request #863 from smallstep/feat/linkedra
Linked RA improvements
2 years ago
Mariano Cano d4013f0df6 Update linkedca 2 years ago
Mariano Cano b7e11da480 Merge branch 'master' into feat/linkedra 2 years ago
Mariano Cano c55b27a2fc Refactor admin token to use with RAs. 2 years ago
Herman Slatman 034b7943fe
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 7df52dbb76
Add ACME EAB policy 2 years ago
Herman Slatman 1fd2481cb4
Merge pull request #891 from smallstep/herman/fix-acme-ipv6-challenge
Fix ACME IPv6 HTTP-01 challenges
2 years ago
Herman Slatman 479c6d2bf5
Fix ACME IPv6 HTTP-01 challenges
Fixes #890
2 years ago
Mariano Cano db337debcd Load provisioner from the database instead of the extension. 2 years ago
Mariano Cano 7d6116c3d0 Add GetCertificateData and refactor x509_certs_data. 2 years ago
Mariano Cano 41c6ded85e Store in the db the provisioner that granted a cert. 2 years ago
Mariano Cano df8ffb35af Remove unnecessary database in provisioner config. 2 years ago
Carl Tashian 949c29d7db
Merge pull request #862 from smallstep/startup-info
Print some basic configuration info on startup
2 years ago
Carl Tashian 2e61e01f41 Linted. 2 years ago
Carl Tashian 150eee70df Updates based on Herman's feedback 2 years ago
Carl Tashian acc75bc679 Add context name to startup info 2 years ago
Carl Tashian 4b9f44982d Merge branch 'master' into startup-info 2 years ago
Carl Tashian 43f2c655b9 More info on startup 2 years ago
Carl Tashian 7ebb2e4c74
Update ca/ca.go
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2 years ago
Herman Slatman 679e2945f2
Disallow name constraint wildcard notation 2 years ago
Herman Slatman 96f4c49b0c
Improve how policy errors are returned and used 2 years ago
Herman Slatman d8776d8f7f
Add K8sSA SSH user policy back
According to the docs, the K8sSA provisioner can be configured
to issue SSH user certs.
2 years ago
Herman Slatman 5f0dc42b1e
Fix tests on Go 1.18 due to IDNA deviations
In Go 1.18 the behavior for looking up domains with non-ASCII
characters was changed to be in accordance with UTS#46
(https://unicode.org/reports/tr46/). There's a slight difference
in how IDNA2003 and IDNA2008 process these. Go 1.18 handles
the deviations in accordance with IDNA2008 now.
2 years ago
Herman Slatman 235a2c9d04
Pin to specific version of go.step.sm/linkedca 2 years ago
Herman Slatman 5daa9fc0b1
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 571b21abbc
Fix (most) PR comments 2 years ago
Mariano Cano dc9db5fbba
Merge pull request #882 from smallstep/dep/crypto
Upgrade go.step.sm/crypto
2 years ago
Mariano Cano f5bf46b950 Upgrade go.step.sm/crypto 2 years ago
Carl Tashian 1ba1584c7a Formatted. 2 years ago
Carl Tashian a13e58e340 Update GetAuthorityInfo -> GetInfo 2 years ago
Carl Tashian 90cb6315b1 Progress. 2 years ago
Carl Tashian 055e75f394 Progress? 2 years ago
Herman Slatman bfa4d809fd
Improve middleware test coverage 2 years ago
Herman Slatman 6da243c34d
Add policy precheck for all admins 2 years ago
Herman Slatman 628d7448de
Don't return policy in provisioner JSON 2 years ago
Herman Slatman 2fbdf7d5b0
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 0e052fe299
Add authority policy API 2 years ago
Panagiotis Siatras 00634fb648
api/render, api/log: initial implementation of the packages (#860)
* api/render: initial implementation of the package

* acme/api: refactored to support api/render

* authority/admin: refactored to support api/render

* ca: refactored to support api/render

* api: refactored to support api/render

* api/render: implemented Error

* api: refactored to support api/render.Error

* acme/api: refactored to support api/render.Error

* authority/admin: refactored to support api/render.Error

* ca: refactored to support api/render.Error

* ca: fixed broken tests

* api/render, api/log: moved error logging to this package

* acme: refactored Error so that it implements render.RenderableError

* authority/admin: refactored Error so that it implements render.RenderableError

* api/render: implemented RenderableError

* api/render: added test coverage for Error

* api/render: implemented statusCodeFromError

* api: refactored RootsPEM to work with render.Error

* acme, authority/admin: fixed pointer receiver name for consistency

* api/render, errs: moved StatusCoder & StackTracer to the render package
2 years ago
Mariano Cano abf5fc32a3 Format comment. 2 years ago
Mariano Cano b42c1dfe64
Merge pull request #879 from smallstep/feat/WithX509SignerFunc
Add authority.WithX509SignerFunc
2 years ago
Mariano Cano c480936ba4 Split comments. 2 years ago