Mariano Cano
2f7cb9225f
Use go.step.sm/crypto to set the permanent identifier
2 years ago
Mariano Cano
369b8f81c3
Use go.step.sm/crypto/kms
...
Fixes #975
2 years ago
Mariano Cano
e02a190fa7
Merge branch 'master' into device-attestation
2 years ago
Mariano Cano
8445c29db6
Change actions to build using Go 1.19
...
Fixes #998
2 years ago
Mariano Cano
38fb92452f
Merge pull request #993 from smallstep/ra-ids
...
RA provisioner IDs
2 years ago
Mariano Cano
821743f71e
Upgrade newrelic to v3
2 years ago
Aaron Bieber
135c481893
Update deps to bring in support for OpenBSD
...
OpenBSD support was added to the following deps:
- github.com/go-piv/piv-go in https://github.com/go-piv/piv-go/pull/101
- github.com/newrelic/go-agent in https://github.com/newrelic/go-agent/pull/455
- github.com/miekg/pkcs11 in https://github.com/miekg/pkcs11/pull/140
With these deps bumped, tests all pass on OpenBSD amd64.
2 years ago
Mariano Cano
a2f7766943
Use released version of linkedca
2 years ago
Mariano Cano
64744562c6
Send RA provisioner to linkedca.
2 years ago
Brandon Weeks
77c6d10fd6
Verify key authorization is contained within the TPM quote extraData field
2 years ago
Brandon Weeks
e1ec31c0ed
Implement TPM attestation statement verification
2 years ago
Brandon Weeks
2ac8b69da2
Add ACME permanent-identifier identifier type
2 years ago
Mariano Cano
2adf8caac7
Fix Dependabot warning on an indirect dependency
2 years ago
Erik De Lamarter
dec1067add
vault kubernetes auth
2 years ago
Herman Slatman
d1ab1d5431
Merge branch 'master' into herman/update-crypto-0.16.2
2 years ago
Herman Slatman
b75ce3acbd
Update to go.step.sm/crypto v0.16.2
...
This patch release of go.step.sm/crypto fixes an issue with
not all `Subject` names being available for usage in a template
as `ExtraNames`.
2 years ago
Herman Slatman
7030dbb7a1
Use github.com/smallstep/pkcs7 fork with patches applied
2 years ago
Herman Slatman
ed231d29e2
Update to go.step.sm/linkedca@v0.16.1
2 years ago
Herman Slatman
f0272dc717
Fix import replacement of linkedca
2 years ago
Herman Slatman
60d8b22d89
Change context retrievers to MustTFromContext
2 years ago
Herman Slatman
f2f9cb899e
Add conditional defaults to policy protobuf request bodies
2 years ago
Herman Slatman
647538e9e8
Merge branch 'herman/allow-deny' into herman/allow-deny-options
2 years ago
Herman Slatman
ad2de16299
Merge branch 'master' into herman/allow-deny
2 years ago
Herman Slatman
7f9034d22a
Add additional policy options
2 years ago
Mariano Cano
fe9c3cf753
Merge branch 'master' into ahmet2mir-feat/vault
2 years ago
Herman Slatman
d6be9450be
Merge branch 'master' into herman/allow-deny
2 years ago
Mariano Cano
674dc3c844
Rename unreleased claim to allowRenewalAfterExpiry for consistency.
2 years ago
Mariano Cano
26e40068c8
Remove unnecessary dependencies.
2 years ago
Mariano Cano
37b521ec6c
Merge branch 'master' into feat/vault
2 years ago
Mariano Cano
d4013f0df6
Update linkedca
2 years ago
Herman Slatman
7df52dbb76
Add ACME EAB policy
2 years ago
Herman Slatman
235a2c9d04
Pin to specific version of go.step.sm/linkedca
2 years ago
Herman Slatman
5daa9fc0b1
Merge branch 'master' into herman/allow-deny
2 years ago
Mariano Cano
f5bf46b950
Upgrade go.step.sm/crypto
2 years ago
Herman Slatman
2fbdf7d5b0
Merge branch 'master' into herman/allow-deny
2 years ago
Herman Slatman
1dbaa62740
Update cloud.google.com/go/kms
2 years ago
Herman Slatman
dc23fd23bf
Merge branch 'master' into herman/allow-deny-next
2 years ago
Herman Slatman
81b0c6c37c
Add API implementation for authority and provisioner policy
2 years ago
Mariano Cano
c903f00cd4
Rename claim to allowRenewAfterExpiry.
2 years ago
Mariano Cano
616490a9c6
Refactor renew after expiry token authorization
...
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
Mariano Cano
3fb5e57f12
Upgrade nosql package
...
The new version of the package allows filtering out database drivers
using Go tags.
2 years ago
Mariano Cano
6f46cdb432
Merge pull request #829 from vijayjt/new-azure-token-authz-options
...
Add subscription and object ID validation options to Azure provisioner
2 years ago
vijayjt
7a32c312bf
Update linkedca dependency version
2 years ago
max furman
9d885e6914
bump nosql for postgres support
2 years ago
Mariano Cano
c0525381eb
Merge branch 'master' into feat/vault
2 years ago
Herman Slatman
c7c5c3c94e
Merge branch 'master' into herman/scep-macos-renewal-fixes
2 years ago
Mariano Cano
09a9b3e1c8
Upgrade go.step.sm/crypto
2 years ago
Herman Slatman
3b72d241e0
Add LinkedCA integration for improved SCEP provisioner
2 years ago
Ahmet DEMIR
d957a57e24
fix: apply mariano suggestions and fixes
...
* use json.RawMessage to remote mapstructure in options
* use vault secretid structure to support multiple source aka string, file and env
* remove log prefix
* return raw cert on error on newline for cert and csr
* clean sans, commonName in createCertificate (bad copy/paste from StepCAS)
* verify authority fingerprint
* convert serial on revoke to bigint, bytes and vault dashed representation
2 years ago
Ahmet DEMIR
16390694e1
feat(vault): adding hashicorp vault cas
2 years ago
Mariano Cano
01a76445ea
Upgrade go.step.sm/crypto
2 years ago
Mariano Cano
98044cf08d
Use a tagged version of linkedca
2 years ago
Mariano Cano
6a1d0cb9f8
Add linkedca conversions.
2 years ago
Mariano Cano
9ec0276887
Update certificate set with new api.
2 years ago
Mariano Cano
32390a2964
Add initial implementation of a nebula provisioner.
...
A nebula provisioner will generate a X509 or SSH certificate with
the identities in the nebula certificate embedded in the token.
The token is signed with the private key of the nebula certificate.
2 years ago
Herman Slatman
06bb97c91e
Add logic for Account authorizations and improve tests
3 years ago
max furman
7fac8c96c3
Merge branch 'master' into max/context
3 years ago
max furman
196f6b45c9
bump cli-utils to 0.7.0
3 years ago
max furman
b5bf79b84e
bump nosql library
3 years ago
max furman
555431448c
bump version ofcli-utils
3 years ago
max furman
da74fa2eb9
Rename FullSnippet to Fragment and remove unused replace in go.mod
3 years ago
max furman
741ac64c61
change name of package cli-utils/config to cli-utils/step
3 years ago
Herman Slatman
2c05f488f6
Remove support for Go 1.15
3 years ago
Mariano Cano
62a20c7db5
Upgrade cli-utils with latest version of promptui
3 years ago
Mariano Cano
9958e0645f
Replace promptui with apache-compatible fork.
...
Promptui depends on github.com/juju/ansiterm that is licensed under
LGPL. The fork replaces ansiterm.TabWriter with the one in the
standard library.
3 years ago
Mariano Cano
0927e0d22a
Upgrade go.step.sm/crypto dependency
...
The new version removes "env" and "expandenv" sprig functions.
3 years ago
Mariano Cano
edd475b81b
Allow to configure azurekms using the URI
...
With an URI, azurekms can be configured with client credentials,
and it can define a default vault and protection level.
3 years ago
Mariano Cano
e15b5faf7d
Merge branch 'master' into keyvault
3 years ago
Mariano Cano
d8720c3723
Update linkedca package.
3 years ago
Mariano Cano
48549bf317
Initialize windows terminal on all binaries.
3 years ago
Mariano Cano
6389100325
Add unit tests for azurekms.
3 years ago
Mariano Cano
392a18465f
Add initial implementation of Azure Key Vault KMS.
...
Fixes #462
3 years ago
Mariano Cano
ad82d8a250
Upgrade go.step.sm/crypto as long with go-jose.v2
...
There was a typo in the OKP template causing bad fingerprints for
Ed25519 keys.
See a10ff54e00
Fixes #705
3 years ago
Herman Slatman
73d0a11a20
Update github.com/micromdm/scep/v2
3 years ago
Herman Slatman
611859eec4
Update go.mozilla.org/pkcs7
...
This includes the fix as described in https://github.com/mozilla-services/pkcs7/pull/59 ,
which was the reason a fork of the library was used.
3 years ago
Mariano Cano
9e7a3cd897
Update go.step.sm/crypto
3 years ago
Mariano Cano
352acf8faa
Upgrade golang.org/x/crypto
3 years ago
Mariano Cano
42fde8ba28
Merge branch 'master' into linkedca
3 years ago
max furman
2317bf183b
Nosql and badger bump
3 years ago
max furman
cc9bc9c84b
Bump Badger
3 years ago
max furman
f53f78974e
Badger bump to fix issue with caddy build
3 years ago
Mariano Cano
456ffd8806
Use linkedca v0.5.0
3 years ago
Mariano Cano
28e882c9b3
Add deployment type to export.
3 years ago
Mariano Cano
798b90c359
Move linkedca configuration to the main package.
3 years ago
Mariano Cano
de292fbed6
Use branch version of linkedca.
3 years ago
Mariano Cano
dc1ec18b52
Create a way to export ca configurations.
3 years ago
Mariano Cano
d0c1530f89
Remove replace of linkedca package.
3 years ago
Mariano Cano
4ad82a2f76
Check linkedca for revocation.
3 years ago
Mariano Cano
71f8019243
Store x509 and ssh certificates on linkedca if enabled.
3 years ago
Mariano Cano
17eef81c91
Remove linkerd replace.
3 years ago
Mariano Cano
a72eab915b
Use linkedca v0.1.0
3 years ago
Mariano Cano
8fb5340dc9
Use a token at start time to configure linkedca.
...
Instead of using `step-ca login` we will use a new token provided
as a flag to configure and start linkedca. Certificates will be kept
in memory and refreshed automatically.
3 years ago
Mariano Cano
f7e09af9df
Implement the login command.
...
The login commands creates a new certificate for the linked ca.
This certificate will be used to sync data with the linkedca
endpoint.
3 years ago
max furman
77fdfc9fa3
Merge branch 'master' into max/cert-mgr-crud
3 years ago
max furman
9fdef64709
Admin level API for provisioner mgmt v1
3 years ago
Mariano Cano
65dacc2795
Replace golint with revive
3 years ago
Mariano Cano
2a97389f1b
Upgrade dependencies.
3 years ago
Mariano Cano
072bd0dcf4
Add support for Google CAS v1
3 years ago
Herman Slatman
66a67ed691
Update to v2.0.0 of github.com/micromdm/scep
3 years ago
Herman Slatman
75cd3ab0ac
Change to a fixed fork of go.mozilla.org/pkcs7
...
Hopefully this will be a temporary change until
the fix is merged in the upstream module.
3 years ago