7101fbb0ee
Provisioner webhooks ( #1001 )
2 years ago
4c7a2ce3eb
Fix errors.As linter warnings
2 years ago
7c5e5b2b87
Even more linter fixes
2 years ago
ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors
2 years ago
6b3a8f22f3
Add provisioner to SSH renewals
...
This commit allows to report the provisioner to the linkedca when
a SSH certificate is renewed.
2 years ago
a627f21440
Fix AuthorizeSSHSign tests with extra SignOption
2 years ago
abcad679ff
Merge branch 'master' into herman/allow-deny
2 years ago
c066694c0c
Allow renew token issuer to be the provisioner name.
...
For consistency with AuthorizeAdminToken, AuthorizeRenewToken will
allow the issuer to be either the fixed string 'step-ca-client/1.0'
or the provisioner name.
2 years ago
5f714f2485
Fix tests for AuthorizeRenewToken
2 years ago
af8fcf5b01
Use always LoadProvisionerByCertificate on authority package
2 years ago
9797b3350e
Merge branch 'master' into herman/allow-deny
2 years ago
b7e11da480
Merge branch 'master' into feat/linkedra
2 years ago
2fbdf7d5b0
Merge branch 'master' into herman/allow-deny
2 years ago
00634fb648
api/render, api/log: initial implementation of the packages ( #860 )
...
* api/render: initial implementation of the package
* acme/api: refactored to support api/render
* authority/admin: refactored to support api/render
* ca: refactored to support api/render
* api: refactored to support api/render
* api/render: implemented Error
* api: refactored to support api/render.Error
* acme/api: refactored to support api/render.Error
* authority/admin: refactored to support api/render.Error
* ca: refactored to support api/render.Error
* ca: fixed broken tests
* api/render, api/log: moved error logging to this package
* acme: refactored Error so that it implements render.RenderableError
* authority/admin: refactored Error so that it implements render.RenderableError
* api/render: implemented RenderableError
* api/render: added test coverage for Error
* api/render: implemented statusCodeFromError
* api: refactored RootsPEM to work with render.Error
* acme, authority/admin: fixed pointer receiver name for consistency
* api/render, errs: moved StatusCoder & StackTracer to the render package
2 years ago
6851842841
Fix unit tests.
2 years ago
dc23fd23bf
Merge branch 'master' into herman/allow-deny-next
2 years ago
616490a9c6
Refactor renew after expiry token authorization
...
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
79349b4d7c
Add options to use custom renewal methods.
2 years ago
259e95947c
Add support for the provisioner controller
...
The claimer, audiences and custom callback methods are now managed
by the provisioner controller in an uniform way.
2 years ago
9539729bd9
Add initial implementation of x509 and SSH allow/deny policy engine
2 years ago
933b40a02a
Introduce gocritic linter and address warnings
3 years ago
9fdef64709
Admin level API for provisioner mgmt v1
3 years ago
d79b4e709e
Create a hash of a token if a token id is empty.
4 years ago
ba918100d0
Use go.step.sm/crypto/jose
...
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago
d30a95236d
Use always go.step.sm/crypto
4 years ago
e83e47a91e
Use sshutil and randutil from go.step.sm/crypto.
4 years ago
c4bbc81d9f
Fix authority tests.
4 years ago
6c64fb3ed2
Rename provisioner options structs:
...
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
4 years ago
d64cb99a22
Fix authority package tests.
4 years ago
71d87b4e61
wip
4 years ago
1cb8bb3ae1
Simplify statuscoder error generators.
4 years ago
dccbdf3a90
Introduce generalized statusCoder errors and loads of ssh unit tests.
...
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
f26103d150
Make test compilable.
4 years ago
a6edcd0a3d
Make test to compile, they still fail.
4 years ago
10e7b81b9f
Merge branch 'master' into ssh-ca
5 years ago
2b41faa9cf
Enforce >= 2048 bit rsa keys at the provisioner layer
...
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
635c59ed24
Accept emails SANs
5 years ago
e1cd5ee8c3
Add context to the Authorize method.
...
Fix tests.
5 years ago
81db527f12
NoopDB -> SimpleDB
5 years ago
b73fe8c157
Add used OTT to DB during authToken step
5 years ago
ab4d569f36
Add /revoke API with interface db backend
5 years ago
1f5ff5c899
Fix sign and renew tests.
5 years ago
b77621675c
Fix and simplify authorize tests.
5 years ago
ef4d809ee6
Move matchesAudience and stripPort tests to provisioner package.
5 years ago
af9688c419
Fix some testing errors.
5 years ago
54d86ca1c1
testing work in progress.
5 years ago
7e95fc0e45
Strip ports on audience check.
...
Services might have proxies behind them so we cannot rely on them.
Fixes #17
5 years ago
0d9dd2d14b
provisioner issuer -> name
6 years ago
d574545d94
Format code with `gofmt -s`
6 years ago
ca6087145f
fix unit test
6 years ago
Andrew Reed
max furman
Mariano Cano
Herman Slatman
Panagiotis Siatras
Mariano Cano