98 Commits (7426edb6d7c51925964e5732ff43ab2582cb82a4)

Author	SHA1	Message	Date
Herman Slatman	7426edb6d7	Merge branch 'master' into wire-acme-extensions	2 months ago
verytrap	db92404342	chore: fix function names in comment ... Signed-off-by: verytrap <wangqiuyue@outlook.com>	2 months ago
Herman Slatman	364566bb01	Merge branch 'master' into wire-acme-extensions	3 months ago
Herman Slatman	194341e520	Address review comments	4 months ago
Herman Slatman	a38132aa58	Fix policy check for Wire user and device identifiers	5 months ago
Herman Slatman	93ba1654ea	Fix tests to work with Wire `UserID` and `DeviceID`	5 months ago
beltram	b8eb559ee9	Update acme/order.go ... Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>	5 months ago
beltram	a3de984ee3	fix: use 2 separate identifiers for Wire	5 months ago
Herman Slatman	70a2f431fa	Address review remarks	5 months ago
Herman Slatman	776a839a42	Fix linter issues and improve error handling	5 months ago
Herman Slatman	eb9893bd21	Refactor logic for processing `WireID` identifiers in Order ... Processing `WireID` identifiers, the Wire subject, and the Wire DPoP and OIDC tokens is now conditional.	5 months ago
beltram	5fdf036a4d	fix: invalid OID for display name in CSR	5 months ago
beltram	1b32957ff6	fix: verify custom display_name extension is present	5 months ago
beltram	7b5740153d	support for oidc id token	5 months ago
beltram	8888262e45	cheat by allowing also looking up for ready orders	5 months ago
beltram	0bc530c98e	log more things	5 months ago
beltram	abe86002ee	try by storing everything in db	5 months ago
beltram	76dfcb00e4	try silencing template data for dichotomies	5 months ago
beltram	a32bb66e47	trying to pass access token to template	5 months ago
beltram	b58de27675	fix: do not convert URIs to lowercase for comparison purpose	5 months ago
beltram	3576cc30c8	forward displayName in CSR with custom OID	5 months ago
beltram	4172b69816	remove displayName validation, potentially harmful	5 months ago
beltram	79501df5a2	fix: exclude displayName from SAN DNS	5 months ago
Stefan Berthold	af31a167c6	skip empty entries for uniqueSortedLowerNames	5 months ago
beltram	cc5fd0a6a5	fix san validation	5 months ago
beltram	3eb0ff43c0	fix orderNames size	5 months ago
beltram	c41a99ad75	(finalize) have both display name & domain in SANs	5 months ago
beltram	5ba0ab3e44	fix csr domain validation in finalize	5 months ago
beltram	73ec6c89d0	fix csr org validation in finalize	5 months ago
Stefan Berthold	8e0e35532c	Add Wire authz and challenges (OIDC+DPOP)	5 months ago
Herman Slatman	9e3807eaa3	Use `SignWithContext` in the critical paths	9 months ago
Mariano Cano	6ba20209c2	Verify CSR key fingerprint with attestation certificate key ... This commit makes sure that the attestation certificate key matches the key used on the CSR on an ACME device attestation flow.	1 year ago
Herman Slatman	64d9ad7b38	Validate Subject Common Name for Orders with Permanent Identifier	1 year ago
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
max furman	f3d1863ec6	A few more linter errors	2 years ago
Mariano Cano	f0a24bd8ca	Add acme property to enable challenges ... Fixes #1027	2 years ago
Mariano Cano	191d9e8629	Use go.step.sm/crypto to set the permanent identifier	2 years ago
Mariano Cano	2b3b2c283a	Add attestation certificate validation for Apple devices	2 years ago
Brandon Weeks	5f5315260a	iOS 16 beta 1 support	2 years ago
Brandon Weeks	6f2b4d3042	Add ACME permanent-identifier identifier type	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	34c6c65671	Pass attestation information to the Sign method ... Attestation information might be useful in authorizing webhooks	2 years ago
Mariano Cano	3cd72ac72a	Remove debug statements	2 years ago
Mariano Cano	54d92095ac	Validate proof of possession signature ... On the step format, validate proof of possession of the private key validating the signature in the attestation statement.	2 years ago
Mariano Cano	59b7603d1e	Use a clientAuth only cert for device-attest-01	2 years ago
Mariano Cano	2f7cb9225f	Use go.step.sm/crypto to set the permanent identifier	2 years ago
Mariano Cano	66356cff43	Add attestation certificate validation for Apple devices	2 years ago
Brandon Weeks	7e1b0bebd9	iOS 16 beta 1 support	2 years ago
Brandon Weeks	2ac8b69da2	Add ACME permanent-identifier identifier type	2 years ago
Herman Slatman	80bebda69c	Fix code style issue	3 years ago