2164 Commits (6aaa7853b28f6e225cecae93e82e6d73a3f9a085)

 

All Branches   

Search

Author	SHA1	Message	Date
max furman	31ad7f2e9b	[acme] Continued work on acme db interface (wip)	4 years ago
max furman	34859551ef	Add new directory structure	4 years ago
max furman	088432150d	Beginnings of acmeDB interface	4 years ago
Mariano Cano	5249ce794b	Merge pull request #516 from smallstep/ra-mode-improvements ... RA mode improvements	4 years ago
Mariano Cano	84018ec71b	Clarify comment.	4 years ago
Mariano Cano	8c8c160c92	Fix method name in comment.	4 years ago
Mariano Cano	a9297100d8	Allow to configure the JWK using the encrypted key.	4 years ago
Mariano Cano	e727532963	Fix wrong format of the first flag on `step-ca --help`	4 years ago
Mariano Cano	bdeb0ccd7c	Add support for the flag --issuer-password-file ... The new flag allows to pass a file with the password used to decrypt the key used in RA mode.	4 years ago
Mariano Cano	71f59de396	Merge pull request #510 from smallstep/ra-mode ... StepCAS.	4 years ago
Mariano Cano	d9f93ccfde	Fix typo.	4 years ago
Mariano Cano	edc7c4d90e	Add support for password encrypted files	4 years ago
Mariano Cano	80542d6d9a	Add JWK as an issuer for stepcas.	4 years ago
Mariano Cano	81428afa6f	Merge pull request #514 from gdbelvin/pin ... PKCS11 Init Pin Flag	4 years ago
Gary Belvin	341966c30f	Check pin flag	4 years ago
Carl Tashian	9146fe8055	Merge branch 'carl/sysd-update'	4 years ago
Gary Belvin	1ac838628a	Add flag for setting the pin	4 years ago
Mariano Cano	ce3e6bfdf6	Fix linting errors.	4 years ago
Mariano Cano	0b8528ce6b	Allow mTLS revocation without provisioner.	4 years ago
Mariano Cano	96de4e6ec8	Return a non-implemented error in stepcas.RenewCertificate.	4 years ago
Mariano Cano	348815f4f6	Fix error message.	4 years ago
Herman Slatman	583d60dc0d	Address (most) PR comments	4 years ago
Herman Slatman	a526065d0c	Merge branch 'master' into hs/scep	4 years ago
Mariano Cano	e7a6c46e54	Fix linting errors.	4 years ago
Mariano Cano	08e75b614e	Do not depend on Go 1.16.	4 years ago
Mariano Cano	6fd6270e7d	Remove debug statements.	4 years ago
Mariano Cano	7958f6ebb5	Add support for lifetime.	4 years ago
Mariano Cano	ae4b8f58b8	Add support for emails, ips and uris.	4 years ago
Mariano Cano	561341a6f2	Update go.step.sm/crypto.	4 years ago
Mariano Cano	dbb48ecf8d	Add tests for stepcas.	4 years ago
Mariano Cano	bcf70206ac	Add support for revocation using an extra provisioner in the RA.	4 years ago
Mariano Cano	a6115e29c2	Add initial implementation of StepCAS. ... StepCAS allows to configure step-ca as an RA using another step-ca as the main CA.	4 years ago
Carl Tashian	9f0fce6df8	Quoting fix	4 years ago
Carl Tashian	2c09baf696	Two small systemd changes ... 1. Don't halt the cert renewer service from ExecStartPost ops if a relying service doesn't exist; halt it if the relying service exists and doesn't restart properly. 2. Use /bin/env bash instead of /bin/bash for portability.	4 years ago
max furman	3b9eed003d	[action] set goreleaser config values back to default	4 years ago
max furman	6861202762	go.sum update	4 years ago
max furman	6d879affa4	[action] remove duplicate step in job	4 years ago
Carl Tashian	33bba8fcd5	Fix goreleaser indentation issue	4 years ago
Carl Tashian	7249f495a9	Merge pull request #503 from smallstep/carl/goreleaser-windows ... Add step-ca Windows build & Scoop release to goreleaser	4 years ago
Herman Slatman	a4844fee7b	Make tests green	4 years ago
Herman Slatman	99952080c7	Make tests not fail hard on ECDSA keys ... All tests for the Authority failed because the test data contains ECDSA keys. ECDSA keys are no crypto.Decrypter, resulting in a failure when instantiating the Authority.	4 years ago
Herman Slatman	e30084c9a8	Make linter happy	4 years ago
Herman Slatman	3e0dac3ab4	Fix certificateChain property	4 years ago
Herman Slatman	e1cab4966f	Improve initialization of SCEP authority	4 years ago
Herman Slatman	8c5b12e21d	Add non-TLS server and improve crypto.Decrypter interface ... A server without TLS was added to serve the SCEP endpoints. According to the RFC, SCEP has to be served via HTTP. The `sscep` client, for example, will stop any URL that does not start with `http://` from being used, so serving SCEP seems to be the right way to do it. This commit adds a second server for which no TLS configuration is configured. A distinct field in the configuration, `insecureAddress` was added to specify the address for the insecure server. The SCEP endpoints will also still be served via HTTPS. Some clients may be able to work with that. This commit also improves how the crypto.Decrypter interface is handled for the different types of KMSes supported by step. The apiv1.Decrypter interface was added. Currently only SoftKMS implements this interface, providing a crypto.Decrypter required for SCEP operations.	4 years ago
Herman Slatman	efd5501aca	Merge branch 'master' into hs/scep	4 years ago
Carl Tashian	192207d263	Add Windows build to goreleaser	4 years ago
Herman Slatman	538fe8114d	Fix linter issues	4 years ago
Herman Slatman	cc1ecb9438	Store new certificates in database	4 years ago
Mariano Cano	a98ea5f9cd	Merge pull request #502 from smallstep/windows-ui ... Add support for cli-utils with powershell support.	4 years ago