Commit Graph

3054 Commits (72e2c4eb2e7a943a59b8de401bf678ed6043e3da)
 

Author SHA1 Message Date
Mariano Cano 1938b1bb34 Merge branch 'master' into herman/fix-template-validation 2 years ago
Mariano Cano 1d1e024b84 Upgrade to go.step.sm/crypto v0.18.0 2 years ago
Mariano Cano f1c63bc38d Fix challenge mapping 2 years ago
Mariano Cano 2a44972830 Run go mod tidy 2 years ago
Mariano Cano df96b126dc Add AuthorizeChallenge unit tests 2 years ago
Mariano Cano bca311b05e Add acme property to enable challenges
Fixes #1027
2 years ago
Mariano Cano ae8d4d8757 Fix unit test 2 years ago
Herman Slatman 6b7b989988
Add provisioner template validation
Fixes #1012
2 years ago
Mariano Cano 693dc39481 Merge branch 'master' into device-attestation 2 years ago
Mariano Cano b1e9d5ee86 Revert "Run on plaintext HTTP to support Cloud Run"
This reverts commit 09b9673a60.
2 years ago
Mariano Cano dd6f59b538
Merge pull request #1024 from smallstep/gosec
Address gosec warnings
2 years ago
Mariano Cano 23b8f45b37 Address gosec warnings
Most if not all false positives
2 years ago
Mariano Cano 713dfad884
Merge pull request #1019 from smallstep/head-middleware
Add a middleware to automatically route HEAD requests to GET
2 years ago
Max 8f88740a5a
Merge pull request #1014 from smallstep/max/dns-id
Check for DNS name validity
2 years ago
Mariano Cano 6cab4d328e Add a middleware to automatically route HEAD requests to GET
Fixes #992
2 years ago
max furman c040e4b459 Add unit tests 2 years ago
Mariano Cano 85fc837dc3
Merge pull request #1018 from smallstep/ra-config
Ra config
2 years ago
Mariano Cano 3c88a9ccc2 Fixed changelog 2 years ago
Mariano Cano 8e08f0dea3 Add entries to changelog 2 years ago
Mariano Cano 0c7467ceb2 Allow to automatically configure and linked RA 2 years ago
Mariano Cano 5e0be92273 Allow option to skip the validation of config 2 years ago
max furman b7c2f6c482 Check for DNS name validity 2 years ago
Mariano Cano ae76d943c9
Merge pull request #1009 from smallstep/code-ql
Code QL
2 years ago
Mariano Cano 2db15e4eb5 Remove unnecessary log entries
These log entries add CodeQL warnings and are not necessary because
our default http.ResponseWriter allows adding log entries.
2 years ago
Mariano Cano 759aa26a57 Fix linter warning 2 years ago
Mariano Cano 90d2785776 Sanitize log entries in logging package 2 years ago
Mariano Cano b62f4d1000 Add lgtm comments on some security warnings 2 years ago
Mariano Cano a5439c43cd Remove ciphersuites without Lucky13 countermeasures
SHA-256 variants of the CBC ciphersuites don't implement any Lucky13
countermeasures. See http://www.isg.rhul.ac.uk/tls/Lucky13.html and
https://www.imperialviolet.org/2013/02/04/luckythirteen.html.
2 years ago
Mariano Cano d6baad443b
Merge pull request #1008 from smallstep/endpoint-id
Endpoint ID
2 years ago
Mariano Cano 8bd0174251 Rename field to IsCAServerCert 2 years ago
Mariano Cano 5df1694250 Add endpoint id for the RA certificate
In a linked RA mode, send an endpoint id to group the server
certificates.
2 years ago
Max 20784c7a00
Merge pull request #1006 from smallstep/max/revoke-serial-validation
Validate revocation serial number
2 years ago
max furman 1dd0d7d0ee Update bad serial error to be more specific 2 years ago
max furman 73ba411e1d [action] parameterize golangci-lint version 2 years ago
Mariano Cano eb091aec54 Simplify field names for ProvisionerInfo 2 years ago
Mariano Cano 2f7cb9225f Use go.step.sm/crypto to set the permanent identifier 2 years ago
Mariano Cano a65adc032b
Merge pull request #1005 from smallstep/crypto-kms
Use go.step.sm/crypto/kms
2 years ago
Mariano Cano 21427d5d65 Replace instead of prepend provisioner extension
With non standard SANs this will generate the SAN and provisioner
extension in the same order.
2 years ago
Mariano Cano 2ab1e6658e Fix nonce validation
The attestation certificate contains the nonce as raw bytes in the
extension 1.2.840.113635.100.8.11.1
2 years ago
max furman 7052a32c2c Validate revocation serial number 2 years ago
Mariano Cano 4985ab1d62 Remove kms package 2 years ago
Mariano Cano 369b8f81c3 Use go.step.sm/crypto/kms
Fixes #975
2 years ago
Mariano Cano e02a190fa7 Merge branch 'master' into device-attestation 2 years ago
Max 3e2729e391
Merge pull request #989 from smallstep/max/disable-ssh-hosts
Add attribute to disable SSH Hosts list API
2 years ago
Mariano Cano 9f67a808cd
Merge pull request #1004 from smallstep/go-1.19
Change actions to build using Go 1.19
2 years ago
Mariano Cano f1aabaa99c Use functions from os instead of io/ioutil 2 years ago
Mariano Cano 8445c29db6 Change actions to build using Go 1.19
Fixes #998
2 years ago
max furman 99c9155467 disableSSHHostsListAPI -> disableGetSSHHosts 2 years ago
Mariano Cano 38fb92452f
Merge pull request #993 from smallstep/ra-ids
RA provisioner IDs
2 years ago
Mariano Cano 22337da18c
Merge pull request #990 from qbit/master
Update deps to bring in support for OpenBSD
2 years ago