119 Commits (6e1f8dd7aba9f76ebcc925606f5961fb63f5fca2)

Author	SHA1	Message	Date
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	76112c2da1	Improve error creation and testing for core policy engine	2 years ago
Herman Slatman	3fa96ebf13	Improve policy errors returned to client	2 years ago
Herman Slatman	ad2de16299	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	fe9c3cf753	Merge branch 'master' into ahmet2mir-feat/vault	2 years ago
Herman Slatman	abcad679ff	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	ea5f7f2acc	Fix SANs for step-ca certificate ... Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>	2 years ago
Mariano Cano	37b521ec6c	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	db337debcd	Load provisioner from the database instead of the extension.	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	b49307f326	Fix ACME order tests with mock ACME CA	2 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2 years ago
Herman Slatman	613c99f00f	Fix linting issues	2 years ago
Mariano Cano	9d027c17d0	Send current provisioner on PostCertificate	2 years ago
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	2 years ago
Herman Slatman	81b0c6c37c	Add API implementation for authority and provisioner policy	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Mariano Cano	c0525381eb	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	5cb23c6029	Merge pull request #804 from smallstep/herman/normalize-ipv6-dns-names ... Normalize IPv6 hostname addresses	2 years ago
Herman Slatman	e887ccaa07	Ensure the CA TLS certificate represents IPv6 DNS names as IP in cert ... If an IPv6 domain name (i.e. [::1]) is provided manually in the `ca.json`, this commit will ensure that it's represented as an IP SAN in the TLS certificate. Before this change, the IPv6 would become a DNS SAN.	2 years ago
Mariano Cano	300c19f8b9	Add a custom enforcer that can be used to modify a cert.	2 years ago
Ahmet DEMIR	68b980d689	feat(authority): avoid hardcoded cn in authority csr	2 years ago
Herman Slatman	50c3bce98d	Change if/if to if/else-if when checking the type of JSON error	2 years ago
Herman Slatman	a3cf6bac36	Add special handling for *json.UnmarshalTypeError	2 years ago
Herman Slatman	0475a4d26f	Refactor extraction of JSON template syntax errors	2 years ago
Herman Slatman	a5455d3572	Improve errors related to template execution failures (slightly)	2 years ago
Herman Slatman	3bc3957b06	Merge branch 'master' into hs/acme-revocation	3 years ago
Herman Slatman	47a8a3c463	Add test case for ACME Revoke to Authority	3 years ago
Herman Slatman	c9cd876a7d	Merge branch 'master' into hs/acme-revocation	3 years ago
Mariano Cano	ff04873a2a	Change the default error type to forbidden in Sign. ... The errors will also be propagated from sign options.	3 years ago
Mariano Cano	668d3ea6c7	Modify errs.Wrap() with bad request to send messages to users.	3 years ago
Mariano Cano	8ce807a6cb	Modify errs.BadRequest() calls to always send an error to the client.	3 years ago
Herman Slatman	3151255a25	Merge branch 'master' into hs/acme-revocation	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	42fde8ba28	Merge branch 'master' into linkedca	3 years ago
Mariano Cano	9e5762fe06	Allow the reuse of azure token if DisableTrustOnFirstUse is true ... Azure caches tokens for 24h and we cannot issue a new certificate for the same instance in that period of time. The meaning of this parameter is to allow the signing of multiple certificate in one instance. This is possible in GCP, because we get a new token, and is possible in AWS because we can generate a new one. On Azure there was no other way to do it unless you wait for 24h. Fixes #656	3 years ago
Mariano Cano	d72fa953ac	Remove debug statements.	3 years ago
Mariano Cano	3f07eb597a	Implement revocation using linkedca.	3 years ago
Mariano Cano	0730a165fd	Add collection of files and authority template.	3 years ago
Mariano Cano	71f8019243	Store x509 and ssh certificates on linkedca if enabled.	3 years ago
Herman Slatman	8f7e700f09	Merge branch 'master' into hs/acme-revocation	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Herman Slatman	84e7d468f2	Improve handling of ACME revocation	3 years ago
max furman	7b5d6968a5	first commit	3 years ago
Mariano Cano	2cbaee9c1d	Allow to use an alternative interface to store renewed certs. ... This can be useful to know if a certificate has been renewed and link one certificate with the 'parent'.	3 years ago
Mariano Cano	e6833ecee3	Add extension of db.AuthDB to store the fullchain. ... Add a temporary solution to allow an extension of an db.AuthDB interface that logs the fullchain of certificates instead of just the leaf.	3 years ago
Mariano Cano	0b8528ce6b	Allow mTLS revocation without provisioner.	3 years ago
Mariano Cano	bcf70206ac	Add support for revocation using an extra provisioner in the RA.	3 years ago
Mariano Cano	a6115e29c2	Add initial implementation of StepCAS. ... StepCAS allows to configure step-ca as an RA using another step-ca as the main CA.	3 years ago