smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
Herman Slatman	6de964f13a	Merge pull request #1495 from smallstep/herman/acme-attestation-errors Return more detailed errors to ACME clients using `device-attest-01`	1 year ago
Mariano Cano	bdc7b1b691	Merge pull request #1501 from smallstep/safe-save Write configuration only if encoding succeeds	1 year ago
Herman Slatman	cbc1be310d	Merge branch 'master' into herman/acme-attestation-errors	1 year ago
Herman Slatman	c952e9fc9d	Use `NewDetailedError` instead	1 year ago
Mariano Cano	30ce9e65f7	Write configuration only if encoding succeeds This commit fixes a problem when the ca.json is truncated if the encoding of the configuration fails. This can happen by adding a new provisioner with bad template data. Related to smallstep/cli#994	1 year ago
Mariano Cano	47d820561f	Merge pull request #1500 from smallstep/upgrade-crypto Fix adding certificate templates with ASN.1 functions	1 year ago
Mariano Cano	4667060df8	Upgrade golang.org/x/net This commit fixes the vulnerability GO-2023-1988, improper rendering of text nodes in golang.org/x/net/html. More info: https://pkg.go.dev/vuln/GO-2023-1988	1 year ago
Mariano Cano	103b4e1cf1	Fix adding certificate templates with ASN.1 functions This commit upgrades go.step.sm/crypto with a fix to validate the templates that use custom functions.	1 year ago
Herman Slatman	afdd8d3786	Upgrade `golang.org/x/net` to `v0.13.0`	1 year ago
Herman Slatman	f3c24fe875	Change how multiple identifiers are printed in errors	1 year ago
Herman Slatman	4496830859	Merge branch 'master' into herman/acme-attestation-errors	1 year ago
github-actions[bot]	c07124e374	Merge pull request #1499 from smallstep/dependabot/go_modules/google.golang.org/api-0.134.0 Bump google.golang.org/api from 0.132.0 to 0.134.0	1 year ago
dependabot[bot]	74240092e9	Bump google.golang.org/api from 0.132.0 to 0.134.0 Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.132.0 to 0.134.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.132.0...v0.134.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
github-actions[bot]	edd718d89e	Merge pull request #1498 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.57.0 Bump google.golang.org/grpc from 1.56.2 to 1.57.0	1 year ago
dependabot[bot]	a8b67cd9e6	Bump google.golang.org/grpc from 1.56.2 to 1.57.0 Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.56.2 to 1.57.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.56.2...v1.57.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
Herman Slatman	a0cdad335d	Add test for `WithAdditionalErrorDetail`	1 year ago
Herman Slatman	9a52675865	Return descriptive error when using unsupported format	1 year ago
Herman Slatman	0d3338ff3a	Return consistent ACME error types for specific cases	1 year ago
Herman Slatman	df22b8a303	Cleanup some leftover TODOs	1 year ago
Mariano Cano	d8a9c69eaa	Merge pull request #1484 from smallstep/fix-620 Add support for the disableSmallstepExtensions claim	1 year ago
Herman Slatman	dd9bf1e915	Add error details for the `step` format	1 year ago
Herman Slatman	9cbbd1d575	Add error details to ACME `tpm` format validation errors	1 year ago
Herman Slatman	d5dd8feccd	Prevent internal errors from being returned to ACME clients	1 year ago
Herman Slatman	979e0f8f51	Add error details to select error cases for `apple` format	1 year ago
Mariano Cano	d0fd9ebe42	Update Makefile preparing for a new release	1 year ago
Mariano Cano	cce7d9e839	Address comments from code review	1 year ago
Mariano Cano	c7c7decd5e	Add support for the disableSmallstepExtensions claim This commit adds a new claim to exclude the Smallstep provisioner extension from the generated certificates. Fixes #620	1 year ago
Mariano Cano	d7efceadb1	Merge pull request #1493 from smallstep/steppath Remove automatic initialization of the STEPPATH	1 year ago
Mariano Cano	7429008599	Use tagged versions of crypto and cli-utils	1 year ago
Mariano Cano	7061147885	Use step.Abs to load the certificate templates step.Abs has been removed from crypto and they need to be set when those methods are used	1 year ago
Mariano Cano	40a2f53589	Remove automatic initialization of the STEPPATH This commit upgrades cli-utils and crypto packages that remove the automatic initialization of the STEPPATH.	1 year ago
Mariano Cano	95887ebf40	Merge pull request #1481 from smallstep/remove-user-regex Remove OIDC user regexp check	1 year ago
Josh Drake	a1350b14fb	Merge pull request #1489 from smallstep/josh/authorization-principal-in-webhook Include authorization principal in provisioner webhooks.	1 year ago
Mariano Cano	c9df65ebae	Merge pull request #1490 from smallstep/dry-run-migration Add option to dry-run the migration	1 year ago
Mariano Cano	d9d7c52997	Add option to dry-run the migration This commit adds an option that runs the migration on a virtual database that doesn't do anything. This option can be used to see how many rows there are.	1 year ago
Josh Drake	ff424fa944	Fix tests.	1 year ago
github-actions[bot]	7282245e88	Merge pull request #1488 from smallstep/dependabot/go_modules/go.step.sm/linkedca-0.20.0 Bump go.step.sm/linkedca from 0.19.1 to 0.20.0	1 year ago
github-actions[bot]	9a7582d1d3	Merge pull request #1487 from smallstep/dependabot/go_modules/google.golang.org/api-0.132.0 Bump google.golang.org/api from 0.131.0 to 0.132.0	1 year ago
dependabot[bot]	7796ad8f90	Bump go.step.sm/linkedca from 0.19.1 to 0.20.0 Bumps [go.step.sm/linkedca](https://github.com/smallstep/linkedca) from 0.19.1 to 0.20.0. - [Release notes](https://github.com/smallstep/linkedca/releases) - [Commits](https://github.com/smallstep/linkedca/compare/v0.19.1...v0.20.0) --- updated-dependencies: - dependency-name: go.step.sm/linkedca dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
dependabot[bot]	2d666cfc4f	Bump google.golang.org/api from 0.131.0 to 0.132.0 Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.131.0 to 0.132.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.131.0...v0.132.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	1 year ago
Josh Drake	904f416d20	Include authorization principal in provisioner webhooks.	1 year ago
Mariano Cano	d89c3a942e	Merge pull request #1486 from smallstep/migrate-admindb Add to the migration script the admin tables	1 year ago
Mariano Cano	aa30c2c73c	Add to the migration script the admin tables	1 year ago
Mariano Cano	31533c4a15	Merge pull request #1485 from smallstep/webhooks-x5c Send X5C leaf certificate to webhooks	1 year ago
Mariano Cano	5bfe96d8c7	Send X5C leaf certificate to webhooks This commit adds a new property that will be sent to authorizing and enriching webhooks when signing certificates using the X5C provisioner.	1 year ago
Mariano Cano	d604a900ed	Merge pull request #1482 from smallstep/fix-reload-tests Wait for Accept in TestBootstrapClientServerRotation	1 year ago
Mariano Cano	0c3a1aea38	Wait for Accept in TestBootstrapClientServerRotation The TestBootstrapClientServerRotation often fails because the reload returns once the Server loop gets the new listener, but the server hasn't really started yet. This commit makes the test pass, adding a small sleep after the reload. A proper fix might require a wrapper over the listener and an ACK callback on a sync.Once on a custom Accept.	1 year ago
Mariano Cano	7fa97bedec	Remove OIDC user regexp check This commit removes the regular expression check on OIDC usernames. Although it is not recommended to use any character in a username, it is possible to create and use them. The tool useradd has the flag --badname and adduser has --allow-badname and --allow-all-names to create new users with any character. Moreover, it is possible to create any username with the rest of provisioners. Fixes #1436	1 year ago
Mariano Cano	cbc46d11e5	Merge pull request #1477 from smallstep/badger-migration Add tool to migrate data from badger to mysql or postgresql	1 year ago
Mariano Cano	1755c8d60f	Fix typo in comment	1 year ago

1 2 3 4 5 ...

3793 Commits (6de964f13a3fec219011796b20176313ac9f3fc7) All Branches Search

3793 Commits (6de964f13a3fec219011796b20176313ac9f3fc7)

All Branches