Commit Graph

192 Commits (7012500aac072032eac98e22b2e20b6489c1618d)
 

Author SHA1 Message Date
Mariano Cano 7012500aac Submit to ct log the renew and CA server certificate
Related to smallstep/ca-component#142
5 years ago
Mariano Cano 7b175004cb Initialize certNotAfter to avoid a renew when the server starts. 5 years ago
Mariano Cano 19c4842cdf Initial POS of certificate transparency
Related to smallstep/ca-component#142
5 years ago
max furman cedf8784b6 dep update cli 5 years ago
Mariano Cano 262a9d0978
Merge pull request #27 from smallstep/mariano/renew-pool
SDK should update certificate pools safely
5 years ago
Mariano Cano e0fff4d80b Fix typo. 5 years ago
Mariano Cano f1f6c548ad Fix typo. 5 years ago
max furman 7e43402575 bug fix: don't add common name to CSR validation claims in Sign
* added unit test for this case
5 years ago
Mariano Cano 758d829355 Fix tests. 5 years ago
max furman 47228cd9a0 dep ensure to update cli 5 years ago
max furman f6bfb71602 cli dep sans -> master 5 years ago
Max 91f183a62a
Merge pull request #29 from smallstep/sans
Add SANs support
5 years ago
max furman 3415a1fef8 move SplitSANs to cli 5 years ago
Mariano Cano 975cb75fbd Fix typo. 5 years ago
Mariano Cano 3c06d6f9bc Fix comment. 5 years ago
Mariano Cano e330ac547c Fix comment. 5 years ago
Mariano Cano cd934bbede Remove println 5 years ago
max furman 6937bfea7b claims.SANS -> claims.SANs 5 years ago
max furman 93f39c64a0 backwards compat only when SANS empty 5 years ago
Mariano Cano 4c9dccd3f6 Allow multiple certificates in the root pem. 5 years ago
max furman ab78534b08 add test for SAN backwards compatibility with CLI
* new provisioner tokens always contain the crt.Subject.CommonName
in the SANS attribute of the token claims. added tests that verifies
backwards compatibility still works in cases where the token does not
contain the subject as a SAN claim.
5 years ago
max furman fe8c8614b2 SANS backwards compat when token missing sujbect SAN 5 years ago
max furman e6e8443f3c allow multiple identical SANs in cert 5 years ago
max furman f0683c2e0a Enable signing certificates with custom SANs
* validate against SANs in token. must be 1:1 equivalent.
6 years ago
Sebastian Tiedtke 55155d1207 Change readme formatting 6 years ago
Sebastian Tiedtke 754670ad12
Add basic federation example (#26)
Add basic federation example
6 years ago
Mariano Cano 025e36bf10
Merge pull request #28 from pallas/fix-overflow
authority/provisioners: fix overflow on 32-bit systems
6 years ago
Derrick Lyndon Pallas 7a5c4a1112 authority/provisioners: fix overflow on 32-bit systems
In Go, len returns signed ints, not unsigned ints; consequently, this code
comparison overflows on 32-bit systems, like ARM.
6 years ago
Mariano Cano d394dd233a Initiate default RootCAs/ClientCAs when no options are passed. 6 years ago
Mariano Cano 25eba1a96c WIP on the safely rotate of root and federated certificates.
Fixes #23
6 years ago
Max 88a3c4cf83
Merge pull request #25 from smallstep/Duration
make Duration wrapper publicly accessible
6 years ago
max furman 2c72ada610 remove dead code 6 years ago
max furman 6dc89f46d8 make Duration public 6 years ago
Michael Malone 45fb8de26f
Link to the right blog post in README.md 6 years ago
max furman 0615f7eb11 don't wrap time.Duration 6 years ago
max furman 4b742042ee make Duration wrapper publicly accessible 6 years ago
Mariano Cano bacbf85aa3 Add new bootstrap method that creates a listener. 6 years ago
Mariano Cano 984bf8d38c Add missing file. 6 years ago
Mariano Cano 1cc5e94666 Add simple test for federation. 6 years ago
max furman 8402b06119 bump step-cli container version in step-ca Dockerfile 6 years ago
max furman 7b9b091b18 don't need to update the brew formula for certificates updates
* brew uses a tarball built by cli releases (not certificates)
6 years ago
Mariano Cano d0e0217955
Merge pull request #22 from smallstep/mariano/multiroot
Multiple roots and federation
6 years ago
Mariano Cano e8ac3f4888 Add comment to differentiate GetRootCertificates and GetRoots. 6 years ago
Mariano Cano 6e620073f5 Rename method Empties to HasEmpties 6 years ago
max furman cfbb2a6f41 method documentation grammar fix 6 years ago
Mariano Cano dbd1bf11f1 Rename variable. 6 years ago
Sebastian Tiedtke 70f0a0e182 It's 2019 6 years ago
Mariano Cano 8252608ca2 Fix mock 6 years ago
Mariano Cano 7dc61bf233 Remove deprecated code 6 years ago
Mariano Cano 518b597535 Remove mTLS client requirement in /roots and /federation 6 years ago