Commit Graph

354 Commits (66df354f2fba940ea7d9050d2722ccb67f713941)

Author SHA1 Message Date
Dominic Evans 231b5d8406 chore(deps): upgrade github.com/go-chi/chi to v5
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.

See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
1 year ago
Herman Slatman f2993c4c3b
Use the legacy `tpm2` package import 1 year ago
Max 116ff8ed65
bump go.mod to go1.20 and associated linter fixes (#1518) 1 year ago
Mariano Cano d8eeebfd51
Fix error string in tests
This commit fixes a test checking an error string from an external
dependency.
1 year ago
Herman Slatman c952e9fc9d
Use `NewDetailedError` instead 1 year ago
Herman Slatman f3c24fe875
Change how multiple identifiers are printed in errors 1 year ago
Herman Slatman a0cdad335d
Add test for `WithAdditionalErrorDetail` 1 year ago
Herman Slatman 9a52675865
Return descriptive error when using unsupported format 1 year ago
Herman Slatman 0d3338ff3a
Return consistent ACME error types for specific cases 1 year ago
Herman Slatman df22b8a303
Cleanup some leftover TODOs 1 year ago
Herman Slatman dd9bf1e915
Add error details for the `step` format 1 year ago
Herman Slatman 9cbbd1d575
Add error details to ACME `tpm` format validation errors 1 year ago
Herman Slatman d5dd8feccd
Prevent internal errors from being returned to ACME clients 1 year ago
Herman Slatman 979e0f8f51
Add error details to select error cases for `apple` format 1 year ago
Herman Slatman a5801b3c74
Fix TPM simulator initialization for tests 1 year ago
Max 7731edd816
Store and verify Acme account location (#1386)
* Store and verify account location on acme requests

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
Co-authored-by: Mariano Cano <mariano@smallstep.com>
1 year ago
Herman Slatman e71b62e95c
Merge branch 'master' into herman/update-crypto-v0.29.4 1 year ago
max furman 8b256f0351
address linter warning for go 1.19 1 year ago
Herman Slatman 0c2b00f6a1
Depend on our fork of `go-attestation` 1 year ago
Herman Slatman d9aa2c110f
Increase test coverage for AK certificate properties 2 years ago
Herman Slatman ed1a62206e
Add additional verification of AK certificate 2 years ago
Herman Slatman 1c38e252a6
Cast `alg` to a valid `COSEAlgorithmIdentifier` 2 years ago
Herman Slatman e25acff13c
Simplify `alg` validity check 2 years ago
Herman Slatman 9cd4b362f7
Extract the `ParseSubjectAlternativeNames` function 2 years ago
Herman Slatman b6957358fc
Fix PR remarks
- Root CA error message improved
- Looping through intermediate certs
- Change checking unhandled extensions to using `if`
2 years ago
Herman Slatman 09bd7705cd
Fix linting issues 2 years ago
Herman Slatman f88ef6621f
Add `PermanentIdentifier` SAN parsing and tests 2 years ago
Herman Slatman 52023d6083
Add tests for `doTPMAttestationFormat` 2 years ago
Herman Slatman ae30f6e96b
Add failing TPM simulator test 2 years ago
Herman Slatman bf53b394a1
Add `tpm` format test with simulated TPM 2 years ago
Herman Slatman 094f0521e2
Remove check for `PermanentIdentifier` from `tpm` format validation 2 years ago
Herman Slatman 589a62df74
Make validation of `tpm` format stricter 2 years ago
Herman Slatman 213b31bc2c
Simplify processing logic for unhandled critical extension 2 years ago
Herman Slatman e1c7e8f00b
Return the CSR public key fingerprint for `tpm` format 2 years ago
Herman Slatman 6297bace1a
Merge branch 'master' into herman/acme-da-tpm 2 years ago
Herman Slatman 69489480ab
Add more complete `tpm` format validation 2 years ago
Mariano Cano 5ff0dde819
Remove json tag in acme.Authorization fingerprint 2 years ago
Mariano Cano 6ba20209c2
Verify CSR key fingerprint with attestation certificate key
This commit makes sure that the attestation certificate key matches the
key used on the CSR on an ACME device attestation flow.
2 years ago
Herman Slatman 3a6fc5e0b4
Remove dependency on `smallstep/assert` in ACME challenge tests 2 years ago
Herman Slatman 0f1c509e4b
Remove debug utility 2 years ago
Herman Slatman 0f9128c873
Fix linting issue and order of test SUT 2 years ago
Herman Slatman 2ab9beb7ed
Add tests for `deviceAttest01Validate` 2 years ago
Herman Slatman ed61c5df5f
Cleanup some leftover debug statements 2 years ago
Herman Slatman 60a9e41c1c
Remove `Identifier` from top level ACME `Errors` 2 years ago
Herman Slatman edee01c80c
Refactor debug utility 2 years ago
Herman Slatman 1c38113e44
Add ACME `Subproblem` for more detailed ACME client-side errors
When validating an ACME challenge (`device-attest-01` in this case,
but it's also true for others), and validation fails, the CA didn't
return a lot of information about why the challenge had failed. By
introducing the ACME `Subproblem` type, an ACME `Error` can include
some additional information about what went wrong when validating
the challenge.

This is a WIP commit. The `Subproblem` isn't created in many code
paths yet, just for the `step` format at the moment. Will probably
follow up with some more improvements to how the ACME error is
handled. Also need to cleanup some debug things (q.Q)
2 years ago
Herman Slatman f1724ea8c5
Merge branch 'master' into herman/acme-da-tpm 2 years ago
Herman Slatman 64d9ad7b38
Validate Subject Common Name for Orders with Permanent Identifier 2 years ago
Herman Slatman 817edcbba5
Remove `charset=utf-8` from ACME certificate requests 2 years ago
Herman Slatman 4cf25ede24
Merge branch 'master' into herman/acme-da-tpm 2 years ago