Commit Graph

250 Commits (7101fbb0ee939d24756695508845e78e41a1cb59)

Author SHA1 Message Date
Andrew Reed 7101fbb0ee
Provisioner webhooks (#1001) 2 years ago
Mariano Cano 906c5067b9
Include attestation roots on provisioner converters 2 years ago
max furman 1e0ea6f958
more linting fixes 2 years ago
Mariano Cano 191d9e8629
Use go.step.sm/crypto to set the permanent identifier 2 years ago
Brandon Weeks de5b0ef5c2
Verify key authorization is contained within the TPM quote extraData field 2 years ago
Brandon Weeks 248da10f32
Implement TPM attestation statement verification 2 years ago
Brandon Weeks 6f2b4d3042
Add ACME permanent-identifier identifier type 2 years ago
Herman Slatman 25cbe02b9e
Add provisioner template validation
Fixes #1012
2 years ago
Mariano Cano df975122a0 Upgrade linkedca and add entry to changelog 2 years ago
Mariano Cano bb0210e875 Fix typo in linkedca variable 2 years ago
Mariano Cano 66407139e5 Add methods to convert attestation formats 2 years ago
Mariano Cano a2749ca8ed Merge branch 'master' into device-attestation 2 years ago
Mariano Cano 45af68b244 Upgrade go.step.sm/crypto 2 years ago
Mariano Cano 6db631df51 Upgrade go.step.sm/crypto@attest 2 years ago
Mariano Cano a893d6e7f7 Upgrade go.step.sm/cli-utils
Fixes issue with step path
2 years ago
Mariano Cano 1938b1bb34 Merge branch 'master' into herman/fix-template-validation 2 years ago
Mariano Cano 1d1e024b84 Upgrade to go.step.sm/crypto v0.18.0 2 years ago
Mariano Cano bca311b05e Add acme property to enable challenges
Fixes #1027
2 years ago
Herman Slatman 6b7b989988
Add provisioner template validation
Fixes #1012
2 years ago
Mariano Cano 693dc39481 Merge branch 'master' into device-attestation 2 years ago
Mariano Cano 6cab4d328e Add a middleware to automatically route HEAD requests to GET
Fixes #992
2 years ago
Mariano Cano 0c7467ceb2 Allow to automatically configure and linked RA 2 years ago
Mariano Cano 5df1694250 Add endpoint id for the RA certificate
In a linked RA mode, send an endpoint id to group the server
certificates.
2 years ago
Mariano Cano 2f7cb9225f Use go.step.sm/crypto to set the permanent identifier 2 years ago
Mariano Cano 369b8f81c3 Use go.step.sm/crypto/kms
Fixes #975
2 years ago
Mariano Cano e02a190fa7 Merge branch 'master' into device-attestation 2 years ago
Mariano Cano 8445c29db6 Change actions to build using Go 1.19
Fixes #998
2 years ago
Mariano Cano 38fb92452f
Merge pull request #993 from smallstep/ra-ids
RA provisioner IDs
2 years ago
Mariano Cano 821743f71e Upgrade newrelic to v3 2 years ago
Aaron Bieber 135c481893 Update deps to bring in support for OpenBSD
OpenBSD support was added to the following deps:
 - github.com/go-piv/piv-go in https://github.com/go-piv/piv-go/pull/101
 - github.com/newrelic/go-agent in https://github.com/newrelic/go-agent/pull/455
 - github.com/miekg/pkcs11 in https://github.com/miekg/pkcs11/pull/140

With these deps bumped, tests all pass on OpenBSD amd64.
2 years ago
Mariano Cano a2f7766943 Use released version of linkedca 2 years ago
Mariano Cano 64744562c6 Send RA provisioner to linkedca. 2 years ago
Brandon Weeks 77c6d10fd6 Verify key authorization is contained within the TPM quote extraData field 2 years ago
Brandon Weeks e1ec31c0ed Implement TPM attestation statement verification 2 years ago
Brandon Weeks 2ac8b69da2 Add ACME permanent-identifier identifier type 2 years ago
Mariano Cano 2adf8caac7 Fix Dependabot warning on an indirect dependency 2 years ago
Erik De Lamarter dec1067add
vault kubernetes auth 2 years ago
Herman Slatman d1ab1d5431
Merge branch 'master' into herman/update-crypto-0.16.2 2 years ago
Herman Slatman b75ce3acbd
Update to go.step.sm/crypto v0.16.2
This patch release of go.step.sm/crypto fixes an issue with
not all `Subject` names being available for usage in a template
as `ExtraNames`.
2 years ago
Herman Slatman 7030dbb7a1
Use github.com/smallstep/pkcs7 fork with patches applied 2 years ago
Herman Slatman ed231d29e2
Update to go.step.sm/linkedca@v0.16.1 2 years ago
Herman Slatman f0272dc717
Fix import replacement of linkedca 2 years ago
Herman Slatman 60d8b22d89
Change context retrievers to MustTFromContext 2 years ago
Herman Slatman f2f9cb899e
Add conditional defaults to policy protobuf request bodies 2 years ago
Herman Slatman 647538e9e8
Merge branch 'herman/allow-deny' into herman/allow-deny-options 2 years ago
Herman Slatman ad2de16299
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 7f9034d22a
Add additional policy options 2 years ago
Mariano Cano fe9c3cf753
Merge branch 'master' into ahmet2mir-feat/vault 2 years ago
Herman Slatman d6be9450be
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano 674dc3c844 Rename unreleased claim to allowRenewalAfterExpiry for consistency. 2 years ago