Commit Graph

4143 Commits

Author SHA1 Message Date
github-actions[bot]
eba23216d7
Merge pull request #1552 from smallstep/dependabot/go_modules/google.golang.org/api-0.142.0
Bump google.golang.org/api from 0.141.0 to 0.142.0
2023-09-25 19:46:01 +02:00
dependabot[bot]
f1b40a7dfb
Bump google.golang.org/api from 0.141.0 to 0.142.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.141.0 to 0.142.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.141.0...v0.142.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 16:20:58 +00:00
github-actions[bot]
0d430d4cdf
Merge pull request #1551 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.2
Bump google.golang.org/grpc from 1.58.1 to 1.58.2
2023-09-25 18:19:20 +02:00
dependabot[bot]
44662c6544
Bump google.golang.org/grpc from 1.58.1 to 1.58.2
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.1 to 1.58.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.1...v1.58.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 15:29:44 +00:00
dependabot[bot]
4df79cc974
Bump github.com/newrelic/go-agent/v3 from 3.24.1 to 3.25.1
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.24.1 to 3.25.1.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.24.1...v3.25.1)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-25 15:29:24 +00:00
Herman Slatman
ffe079f31b
Merge branch 'master' into herman/scep-provisioner-decrypter 2023-09-23 00:06:56 +02:00
Herman Slatman
0d66158bf1
Merge pull request #1544 from smallstep/herman/scep-notifying-webhook
Add SCEP issuance notification webhook
2023-09-23 00:05:44 +02:00
Mariano Cano
e766ca7a38
Merge pull request #1546 from smallstep/fix-webhook-signature
Fix webhooks signature
2023-09-22 13:28:42 -07:00
Mariano Cano
31da66c124
Fix webhooks signature
This commit fixes the way webhooks signatures are created. Before this
change, the signature of an empty body was prepended by the body itself.
2023-09-22 13:22:52 -07:00
Herman Slatman
68a1c859b0
Merge pull request #1543 from dnwe/chi
chore(deps): upgrade github.com/go-chi/chi to v5
2023-09-22 13:49:04 +02:00
Herman Slatman
3f3b67e05c
Merge branch 'herman/scep-provisioner-decrypter' into herman/scep-notifying-webhook 2023-09-22 12:44:11 +02:00
Herman Slatman
ba72710e2d
Address code review remarks 2023-09-22 12:40:14 +02:00
Herman Slatman
5f8e0de1c3
Fix duplicate import in SCEP provisioner 2023-09-22 11:46:51 +02:00
Herman Slatman
4fd4227b73
Use shorter SCEP decrypter property names from linkedca 2023-09-22 11:44:49 +02:00
Herman Slatman
5fd70af2c8
Make API responses aware of the new SCEP decrypter properties 2023-09-22 11:38:03 +02:00
Herman Slatman
3ade92f8d5
Support both a decrypter key URI as well as PEM 2023-09-22 11:10:22 +02:00
Herman Slatman
6d2d21e989
Fix undefined and unused variables
Forgot to save the latest version...
2023-09-21 18:15:03 +02:00
Herman Slatman
b6c95d7be2
Add additional properties to SCEP notify webhook request body 2023-09-21 18:12:13 +02:00
Herman Slatman
63257e0576
Add full certificate DER bytes to success notification webhook 2023-09-21 12:05:58 +02:00
Herman Slatman
52bc96760b
Add SCEP certificate issuance notification webhook 2023-09-21 12:01:03 +02:00
Herman Slatman
a3c9dd796a
Merge branch 'herman/scep-provisioner-decrypter' of github.com:smallstep/certificates into herman/scep-provisioner-decrypter 2023-09-21 09:55:18 +02:00
Herman Slatman
69a53eec33
Merge branch 'master' into herman/scep-provisioner-decrypter 2023-09-21 09:55:07 +02:00
Dominic Evans
231b5d8406 chore(deps): upgrade github.com/go-chi/chi to v5
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.

See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
2023-09-20 11:26:32 +01:00
Herman Slatman
09cc834ffa
Merge pull request #1541 from smallstep/herman/fix-go-tpm-0.9.0
Upgrade go-tpm to v0.9.0
2023-09-19 19:35:15 +02:00
Herman Slatman
ea7c508fbb
Upgrade to go.step.sm/crypto v0.35.1 2023-09-19 12:31:45 +02:00
Herman Slatman
c3572281ad
Upgrade github.com/smallstep/go-attestation to fix legacy tpm2 2023-09-19 12:20:36 +02:00
Herman Slatman
f2993c4c3b
Use the legacy tpm2 package import 2023-09-19 12:11:46 +02:00
dependabot[bot]
18d1b21a66
Bump github.com/google/go-tpm from 0.3.3 to 0.9.0
Bumps [github.com/google/go-tpm](https://github.com/google/go-tpm) from 0.3.3 to 0.9.0.
- [Release notes](https://github.com/google/go-tpm/releases)
- [Commits](https://github.com/google/go-tpm/compare/v0.3.3...v0.9.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-19 10:08:24 +00:00
github-actions[bot]
70533f55a4
Merge pull request #1538 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.5.0
Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.4.1 to 0.5.0
2023-09-19 12:06:05 +02:00
github-actions[bot]
b63276cc04
Merge pull request #1539 from smallstep/dependabot/go_modules/google.golang.org/api-0.141.0
Bump google.golang.org/api from 0.138.0 to 0.141.0
2023-09-19 12:02:49 +02:00
dependabot[bot]
d05f030452
Bump google.golang.org/api from 0.138.0 to 0.141.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.138.0 to 0.141.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.138.0...v0.141.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-18 16:06:03 +00:00
github-actions[bot]
1a6301e977
Merge pull request #1540 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.1
Bump google.golang.org/grpc from 1.58.0 to 1.58.1
2023-09-18 18:04:51 +02:00
dependabot[bot]
a73617150e
Bump google.golang.org/grpc from 1.58.0 to 1.58.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.0 to 1.58.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.0...v1.58.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-18 15:24:42 +00:00
dependabot[bot]
75132d94f3
Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.4.1 to 0.5.0
Bumps [github.com/hashicorp/vault/api/auth/kubernetes](https://github.com/hashicorp/vault) from 0.4.1 to 0.5.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.4.1...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/kubernetes
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-18 15:23:53 +00:00
github-actions[bot]
fda0bdb0c7
Merge pull request #1531 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.0
Bump google.golang.org/grpc from 1.57.0 to 1.58.0
2023-09-11 14:54:00 -07:00
dependabot[bot]
77eeb7e2c5
Bump google.golang.org/grpc from 1.57.0 to 1.58.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.57.0 to 1.58.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.57.0...v1.58.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-11 21:38:40 +00:00
github-actions[bot]
828591c61b
Merge pull request #1530 from smallstep/dependabot/go_modules/golang.org/x/net-0.15.0
Bump golang.org/x/net from 0.14.0 to 0.15.0
2023-09-11 14:36:54 -07:00
github-actions[bot]
1a4203edc0
Merge pull request #1533 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.5.0
Bump github.com/hashicorp/vault/api/auth/approle from 0.4.1 to 0.5.0
2023-09-11 14:35:46 -07:00
dependabot[bot]
23cc1c71ee
Bump golang.org/x/net from 0.14.0 to 0.15.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.14.0 to 0.15.0.
- [Commits](https://github.com/golang/net/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-11 21:22:45 +00:00
github-actions[bot]
fc1b720f35
Merge pull request #1532 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.13.0
Bump golang.org/x/crypto from 0.12.0 to 0.13.0
2023-09-11 14:21:19 -07:00
Max
67a41dca83
Remove db datasource from error msg to prevent leaking of secrets (#1528) 2023-09-11 09:11:48 -07:00
dependabot[bot]
ea40de159c
Bump github.com/hashicorp/vault/api/auth/approle from 0.4.1 to 0.5.0
Bumps [github.com/hashicorp/vault/api/auth/approle](https://github.com/hashicorp/vault) from 0.4.1 to 0.5.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.4.1...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/approle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-11 15:55:08 +00:00
dependabot[bot]
b330c63df8
Bump golang.org/x/crypto from 0.12.0 to 0.13.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.12.0 to 0.13.0.
- [Commits](https://github.com/golang/crypto/compare/v0.12.0...v0.13.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-09-11 15:54:59 +00:00
Max
b7c4ed26fb
Use provisioner name in error message (#1524) 2023-09-07 15:06:46 -07:00
Herman Slatman
4cc4bba7e9
Merge pull request #1523 from smallstep/herman/scep-webhook-csr
Add CSR to `SCEPCHALLENGE` webhook request body
2023-09-07 20:43:16 +02:00
Herman Slatman
33e661ce7d
Add a dummy CSR to SCEP request body tests 2023-09-07 20:37:29 +02:00
Carl Tashian
09ccb22c4b
Merge pull request #1521 from smallstep/carl/winget
Winget: Only make PRs on releases, not release candidates
2023-09-07 12:06:03 -05:00
Herman Slatman
36f1dd70bf
Add CSR to SCEPCHALLENGE webhook request body 2023-09-07 14:11:53 +02:00
Herman Slatman
98d015b5c3
Fix linting issues 2023-09-04 15:36:37 +02:00
Herman Slatman
d9f56cdbdc
Merge branch 'master' into herman/scep-provisioner-decrypter 2023-09-04 15:24:19 +02:00