Commit Graph

88 Commits (7101fbb0ee939d24756695508845e78e41a1cb59)

Author SHA1 Message Date
Mariano Cano 978ad7e2b6 Fix merged tests. 4 years ago
Mariano Cano d64cb99a22 Fix authority package tests. 4 years ago
max furman fd05f3249b A few last fixes and tests added for rekey/renew ...
- remove all `renewOrRekey`
- explicitly test difference between renew and rekey (diff pub keys)
- add back tests for renew
4 years ago
Max ea9bc493b8
Merge pull request #307 from dharanikumar-s/master
Add support for rekeying Fixes #292
4 years ago
dharanikumar-s dfda497929 Renamed RenewOrRekey to Rekey 4 years ago
dharanikumar-s 0c21f0ae9e Added error check after GenerateDefaultKeyPair 4 years ago
dharanikumar-s b368a53149 Modified TestAuthority_Renew to TestAuthority_RenewOrRekey 4 years ago
max furman 71d87b4e61 wip 4 years ago
Mariano Cano bfe1f4952d Rename interface to CertificateEnforcer and add tests. 4 years ago
Mariano Cano 4eaeede77d Fix unit tests. 4 years ago
max furman 1e5763031b Add backdate validation to sshCertValidityValidator. 4 years ago
max furman c387b21808 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
Mariano Cano 8585b29711 Make test to compile, they still fail. 5 years ago
Max 0a96062b76
Merge pull request #128 from jkralik/returnCertChain
Change api of functions Authority.Sign, Authority.Renew
5 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
Jozef Kralik bc6074f596 Change api of functions Authority.Sign, Authority.Renew
Returns certificate chain instead of 2 members.

Implements #126
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
Mariano Cano e1cd5ee8c3 Add context to the Authorize method.
Fix tests.
5 years ago
max furman 81db527f12 NoopDB -> SimpleDB 5 years ago
max furman b73fe8c157 Add used OTT to DB during authToken step 5 years ago
max furman ab4d569f36 Add /revoke API with interface db backend 5 years ago
Mariano Cano 04da00d716
Merge pull request #55 from smallstep/x509util-real-x509
Use standard x509 creating signed certificates
5 years ago
Mariano Cano 64f2615864 Fix tests. 5 years ago
Mariano Cano 8c8547bf65 Remove unnecessary parse and improve tests. 5 years ago
Mariano Cano b9530909a4 Fix tests. 5 years ago
Mariano Cano 7fd737cbb1 Fix lint warnings. 5 years ago
Mariano Cano 1f5ff5c899 Fix sign and renew tests. 5 years ago
Mariano Cano 54d86ca1c1 testing work in progress. 5 years ago
max furman 229e5908b7 Added test for different authority key id after renew
Also ran dep ensure.
5 years ago
Mariano Cano d78febec7a Fix extensions copy on renew
Fixes #36
5 years ago
max furman 7e43402575 bug fix: don't add common name to CSR validation claims in Sign
* added unit test for this case
5 years ago
Mariano Cano d6cad2a7f3 Add provisioner option to disable renewal.
Fixes smallstep/ca-component#108
6 years ago
max furman 0d9dd2d14b provisioner issuer -> name 6 years ago
max furman 7fa06643b2 change step provisioner OID and ASN1 representation 6 years ago
max furman a4a461466b withProvisionerOID and unit test 6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
max furman c284a2c0ab first commit 6 years ago