216 Commits (66a8158f26d86c36d23fbd2d73b737b688bbbb9d)

Author	SHA1	Message	Date
Mariano Cano	36b622bfc2	Use Golang's default keep-alive. ... Since Go 1.13 a net.Listen keep-alive is enabled by default if the protocol and OS supports it. The new one is 15s to match the net.Dial default one. Previously http.Server ListenAndServe and ListenAndServeTLS used to add a wrapper with 3m that we replicated. See https://github.com/golang/go/issues/31510	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	6729c79253	Add support for setting individual password for ssh and tls keys ... This change add the following flags: * --ssh-host-password-file * --ssh-user-password-file Fixes #693	3 years ago
Mariano Cano	e3ef4a7da9	Update test with default tls options.	3 years ago
Mariano Cano	8fb5340dc9	Use a token at start time to configure linkedca. ... Instead of using `step-ca login` we will use a new token provided as a flag to configure and start linkedca. Certificates will be kept in memory and refreshed automatically.	3 years ago
max furman	1df21b9b6a	Addressing comments in PR review ... - added a bit of validation to admin create and update - using protojson where possible in admin api - fixing a few instances of admin -> acme in errors	3 years ago
max furman	77fdfc9fa3	Merge branch 'master' into max/cert-mgr-crud	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Herman Slatman	03c472359c	Add sync.WaitGroup for proper error handling in Run()	3 years ago
Herman Slatman	13fe7a0121	Make serving SCEP endpoints optional ... Only when a SCEP provisioner is enabled, the SCEP endpoints will now be available. The SCEP endpoints will be served on an "insecure" server, without TLS, only when an additional "insecureAddress" and a SCEP provisioner are configured for the CA.	3 years ago
Herman Slatman	97b88c4d58	Address (most) PR comments	3 years ago
Herman Slatman	5df60c5a9b	Add support for multiple SCEP provisioners ... Similarly to how ACME suppors multiple provisioners, it's now possible to load the right provisioner based on the URL.	3 years ago
Herman Slatman	339039768c	Refactor SCEP authority initialization and clean some code	3 years ago
Herman Slatman	48c86716a0	Add rudimentary (and incomplete) support for SCEP	3 years ago
max furman	94ba057f01	wip	3 years ago
max furman	01a4460812	wip	3 years ago
max furman	9bfb1c2e7b	wip	3 years ago
max furman	d8d5d7332b	wip	3 years ago
max furman	9bf9bf142d	wip	3 years ago
Herman Slatman	bc2bb53009	Merge branch 'master' into hs/scep	3 years ago
max furman	4f3e5ef64d	wip	3 years ago
max furman	5d09d04d14	wip	3 years ago
max furman	4d48072746	wip admin CRUD	3 years ago
max furman	98a6e54530	wip	3 years ago
max furman	af3cf7dae9	first steps	3 years ago
max furman	7b5d6968a5	first commit	3 years ago
Mariano Cano	26e7cc6177	Allow to use the SDK with ed25519 keys.	3 years ago
Herman Slatman	c04f556dc2	Merge branch 'master' into hs/scep	3 years ago
max furman	8c709fe3c2	Init config on load | Add wrapper for cli	3 years ago
Mariano Cano	5846314f88	Add missing Rekey method to the ca.Client ... Fixes #315	3 years ago
Herman Slatman	68d5f6d0d2	Merge branch 'master' into hs/scep	3 years ago
Mariano Cano	1328aa3e47	Fix review comments.	3 years ago
Mariano Cano	50b9aaec57	Add new identity tests.	3 years ago
Mariano Cano	e414d0c8ea	Fix unit tests.	3 years ago
Mariano Cano	c5234e9c61	Refactor tls tunnel connections. ... New method will use an identity-like file with the configuration used to create the (m)TLS connection to the tunnel.	3 years ago
Mariano Cano	e75a9409a5	Add experimental support for a TLS over TLS tunnel.	3 years ago
Herman Slatman	0487686f69	Merge branch 'master' into hs/scep	3 years ago
Mariano Cano	02a5879cfe	Specify always a Proxy in all custom transports. ... Fixes #535	3 years ago
max furman	93c3c2bf2e	Error handle non existent provisioner downstream and disable debug route logging	3 years ago
max furman	b1888fd34d	Use different method for unescpaed paths for the router	3 years ago
Max	b724af30ad	Merge pull request #496 from smallstep/max/acme ... Convert to ACME DB interface	3 years ago
max furman	672e3f976e	Few ACME fixes ... ... - always URL escape linker output - validateJWS should accept RSAPSS - GetUpdateAccount -> GetOrUpdateAccount	3 years ago
Herman Slatman	2320d0911e	Add sync.WaitGroup for proper error handling in Run()	3 years ago
Herman Slatman	b815478981	Make serving SCEP endpoints optional ... Only when a SCEP provisioner is enabled, the SCEP endpoints will now be available. The SCEP endpoints will be served on an "insecure" server, without TLS, only when an additional "insecureAddress" and a SCEP provisioner are configured for the CA.	3 years ago
Herman Slatman	c5e4ea08b3	Merge branch 'master' into hs/scep	3 years ago
Herman Slatman	b97f024f8a	Remove superfluous call to StoreCertificate	3 years ago
max furman	df05340521	fixing broken unit tests	3 years ago
max furman	f72b2ff2c2	[acme db interface] nosql authz unit tests	3 years ago
max furman	074ab7b221	[acme db interface] add linker tests	3 years ago
max furman	bb8d54e596	[acme db interface] unit tests compiling	3 years ago