137 Commits (7101fbb0ee939d24756695508845e78e41a1cb59)

Author	SHA1	Message	Date
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
Mariano Cano	c9e7af3722	Use only name constraints in GetTLSCertificate	2 years ago
Mariano Cano	2eba5326db	Remove policy validation on renew	2 years ago
Mariano Cano	d68c765e20	Add context to errors	2 years ago
Mariano Cano	72e2c4eb2e	Render proper policy and constrains errors	2 years ago
Mariano Cano	4b79405dac	Check constraints and policy for leaf certificates too	2 years ago
Mariano Cano	325d8bca4f	Merge branch 'master' into name-constraints	2 years ago
Mariano Cano	debe565e42	Validate constraints on Sign and Renew/Rekey ... Fixes #1060	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	34c6c65671	Pass attestation information to the Sign method ... Attestation information might be useful in authorizing webhooks	2 years ago
Mariano Cano	8bd0174251	Rename field to IsCAServerCert	2 years ago
Mariano Cano	5df1694250	Add endpoint id for the RA certificate ... In a linked RA mode, send an endpoint id to group the server certificates.	2 years ago
Mariano Cano	eb091aec54	Simplify field names for ProvisionerInfo	2 years ago
Mariano Cano	6b5d3dca95	Add provisioner name to RA info	2 years ago
Mariano Cano	f9df8ac05f	Remove unused interface	2 years ago
Mariano Cano	9408d0f24b	Send RA provisioner information to the CA	2 years ago
Mariano Cano	ce9a23a0f7	Fix SSH certificate revocation	2 years ago
Mariano Cano	c8d7ad7ab9	Fix store certificates methods with new interface	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	76112c2da1	Improve error creation and testing for core policy engine	2 years ago
Herman Slatman	3fa96ebf13	Improve policy errors returned to client	2 years ago
Herman Slatman	ad2de16299	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	fe9c3cf753	Merge branch 'master' into ahmet2mir-feat/vault	2 years ago
Herman Slatman	abcad679ff	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	ea5f7f2acc	Fix SANs for step-ca certificate ... Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>	2 years ago
Mariano Cano	37b521ec6c	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	db337debcd	Load provisioner from the database instead of the extension.	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	b49307f326	Fix ACME order tests with mock ACME CA	2 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2 years ago
Herman Slatman	613c99f00f	Fix linting issues	2 years ago
Mariano Cano	9d027c17d0	Send current provisioner on PostCertificate	2 years ago
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	2 years ago
Herman Slatman	81b0c6c37c	Add API implementation for authority and provisioner policy	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Mariano Cano	c0525381eb	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	5cb23c6029	Merge pull request #804 from smallstep/herman/normalize-ipv6-dns-names ... Normalize IPv6 hostname addresses	2 years ago
Herman Slatman	e887ccaa07	Ensure the CA TLS certificate represents IPv6 DNS names as IP in cert ... If an IPv6 domain name (i.e. [::1]) is provided manually in the `ca.json`, this commit will ensure that it's represented as an IP SAN in the TLS certificate. Before this change, the IPv6 would become a DNS SAN.	2 years ago
Mariano Cano	300c19f8b9	Add a custom enforcer that can be used to modify a cert.	2 years ago
Ahmet DEMIR	68b980d689	feat(authority): avoid hardcoded cn in authority csr	2 years ago
Herman Slatman	50c3bce98d	Change if/if to if/else-if when checking the type of JSON error	2 years ago
Herman Slatman	a3cf6bac36	Add special handling for *json.UnmarshalTypeError	2 years ago
Herman Slatman	0475a4d26f	Refactor extraction of JSON template syntax errors	2 years ago
Herman Slatman	a5455d3572	Improve errors related to template execution failures (slightly)	2 years ago
Herman Slatman	3bc3957b06	Merge branch 'master' into hs/acme-revocation	2 years ago
Herman Slatman	47a8a3c463	Add test case for ACME Revoke to Authority	2 years ago
Herman Slatman	c9cd876a7d	Merge branch 'master' into hs/acme-revocation	3 years ago
Mariano Cano	ff04873a2a	Change the default error type to forbidden in Sign. ... The errors will also be propagated from sign options.	3 years ago
Mariano Cano	668d3ea6c7	Modify errs.Wrap() with bad request to send messages to users.	3 years ago