6600f1253e
Fix error messages after review.
3 years ago
6a1d0cb9f8
Add linkedca conversions.
3 years ago
de51c2edfb
More unit tests for nebula.
3 years ago
99845d38bb
Add some extra unit tests for nebula.
3 years ago
76794ce613
Use default SANs without sans in the token.
...
Fix step claim condition in SSH
3 years ago
9ec0276887
Update certificate set with new api.
3 years ago
cb72796a2d
Fix decoding of certificate.
3 years ago
32390a2964
Add initial implementation of a nebula provisioner.
...
A nebula provisioner will generate a X509 or SSH certificate with
the identities in the nebula certificate embedded in the token.
The token is signed with the private key of the nebula certificate.
3 years ago
3bc3957b06
Merge branch 'master' into hs/acme-revocation
3 years ago
e0fee84694
Add comment about public key validator.
3 years ago
47a8a3c463
Add test case for ACME Revoke to Authority
3 years ago
a7fbbc4748
Add tests for GetCertificateBySerial
3 years ago
2d357da99b
Add tests for ACME revocation
3 years ago
c9cd876a7d
Merge branch 'master' into hs/acme-revocation
3 years ago
d35848f7a9
Fix unit tests.
3 years ago
c3f98fd04d
Change some bad requests to forbidded.
...
Change in the sign options bad requests to forbidded if is the
provisioner the one adding a restriction, e.g. list of dns names,
validity, ...
3 years ago
ff04873a2a
Change the default error type to forbidden in Sign.
...
The errors will also be propagated from sign options.
3 years ago
b9beab071d
Fix unit tests.
3 years ago
507a272b4d
Return always http errors in sign options.
3 years ago
a33709ce8d
Fix sign ssh options tests.
3 years ago
1da7ea6646
Return always http errors in sign ssh options.
3 years ago
031d4d7000
Return BadRequest when validating sign options.
3 years ago
bb26799583
Modify errs.Wrap with forbidden errors.
3 years ago
2d50c96d99
Merge branch 'master' into hs/acme-revocation
3 years ago
b6ebd118fc
Update temporal solution for sending message to users
3 years ago
668d3ea6c7
Modify errs.Wrap() with bad request to send messages to users.
3 years ago
8c8db0d4b7
Modify errs.BadRequestErr() to always return an error to the client.
3 years ago
8ce807a6cb
Modify errs.BadRequest() calls to always send an error to the client.
3 years ago
de2ce5cf9f
Merge pull request #692 from smallstep/max/context
...
Context management
3 years ago
440616cffa
Merge pull request #750 from smallstep/duration-errors
...
Report duration errors directly to the cli.
3 years ago
acd0bac025
Remove extra and in comment.
3 years ago
1aadd63cef
Use always badRequest on duration errors.
3 years ago
41fec1577d
Report duration errors directly to the cli.
3 years ago
7fac8c96c3
Merge branch 'master' into max/context
3 years ago
922d239171
Simplify conditional
3 years ago
a7d144996f
SSH backwards compat updates
...
- use existence of new value in data map as boolean
- add tests for backwards and forwards compatibility
- fix old tests that used static dir locations
3 years ago
507be61e8c
Use a more distint map key to indicate template version
...
- make the key a variable that can be reused on the CLI side.
3 years ago
f426c152a9
backwards compatibility for version of cli older than v0.18.0
3 years ago
ed4b56732e
updates after rebase to keep up with master
3 years ago
e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues
3 years ago
3151255a25
Merge branch 'master' into hs/acme-revocation
3 years ago
933b40a02a
Introduce gocritic linter and address warnings
3 years ago
9fb6df3abb
Fix ssh template variables when CA is injected using options.
3 years ago
aedd7fcc05
Be able to start a SSH host or SSH user only CA
...
In previous versions if the host or user CA is not configured, the
start of step-ca was crashing. This allows to configure a user or
host only ssh ca.
3 years ago
a50654b468
Check for admins in both emails and groups.
3 years ago
2d5bfd3485
fix comment
3 years ago
6729c79253
Add support for setting individual password for ssh and tls keys
...
This change add the following flags:
* --ssh-host-password-file
* --ssh-user-password-file
Fixes #693
3 years ago
141c519171
Simplify check of principals in a case insensitive way
...
Fixes #679
3 years ago
7a94b0c157
Converts group and subgroup to lowercase for comparison.
...
Fixes #679
3 years ago
f919535475
Add an extra way to distinguish Azure and Azure OIDC tokens.
...
We used to distinguish these tokens using the azp claim, but this
claim does not appear on new azure oidc tokens, at least on some
configurations.
This change will try to load by audience (client id) if the token
contains an email, required for OIDC.
3 years ago
Mariano Cano
Herman Slatman
Max
Mariano Cano
Fearghal O Floinn