max furman
3636ba3228
wip
4 years ago
Mariano Cano
39650637d4
Merge pull request #297 from smallstep/no-bastion-bastion
...
Do not return bastion for the configured bastion host.
4 years ago
Mariano Cano
e9a0ad4ec7
Merge pull request #291 from smallstep/template-variables
...
Add support for required template variables
4 years ago
Mariano Cano
fcfc4e9b2b
Fix ssh federated template variables.
4 years ago
max furman
1951669e13
wip
4 years ago
Mariano Cano
b0fdd0b2be
Do not return bastion for the configured bastion host.
...
Fixes #296
4 years ago
Max
be030309a4
Update issue templates
4 years ago
Max
5f27b31be5
Update issue templates
4 years ago
Mariano Cano
528d0910ab
Add omitempty to requires property.
4 years ago
Mariano Cano
907162be44
Add test for DefaultTemplates.
4 years ago
Mariano Cano
f82a248617
Add test with backfill.
4 years ago
Mariano Cano
ff32746312
Add test case for error executing template.
4 years ago
Mariano Cano
e3ae751b57
Use templates from authority instead of config.
4 years ago
Mariano Cano
a845b56283
Remove the template path if we load the defaults.
4 years ago
Mariano Cano
237baa5169
Check for required variables in templates.
...
Fixes smallstep/cli#232
4 years ago
Mariano Cano
6c844a0618
Load default templates if no templates are configured.
4 years ago
Mariano Cano
b583d8d658
Move default templates to the template package.
4 years ago
Max
2ebfc73f77
Merge pull request #290 from smallstep/max/profileLimit
...
Update profileLimitDuration validator ...
4 years ago
max furman
7d5cf34ce5
Update profileLimitDuration validator ...
...
- respect notBefore of the provisioner
- modify/fix the reported errors
4 years ago
Mariano Cano
72bb6e159f
Merge pull request #287 from smallstep/nil-templates
...
Avoid nil pointer panic on step ssh config with no templates.
Fixes #289
4 years ago
max furman
54be8889cd
Correct attribute names for SSH claims in provisioner docs
4 years ago
Max
6ee30c3a41
Merge pull request #288 from smallstep/max/rhel-doc
...
Add RHEL/Centos install documentation and a section on systemctl configuration
4 years ago
max furman
aaec9931f4
Add RHEL/Centos install docs and a section on systemctl config
4 years ago
Mariano Cano
9832d1538b
Avoid nil pointer panic on step ssh config with no templates.
4 years ago
Mariano Cano
91bf74551b
Merge pull request #176 from moqmar/patch/ports-below-1024
...
Let step-ca bind to ports < 1024
Fixes #170
4 years ago
Mariano Cano
88add85e42
Merge pull request #286 from smallstep/ksm-imports
...
Move load of kms to main package.
4 years ago
Mariano Cano
ddb4ca7a74
Move load of kms to main package.
...
With this change packages that import the authority won't load by
default all the supported kms with all its dependencies.
Fixes #228
4 years ago
Miclain K Keffeler
2d45f61987
Merge pull request #1 from mkkeffeler/mkkeffeler-docs
...
RHEL/CentOS Example
4 years ago
Miclain K Keffeler
195cdd664a
RHEL/CentOS Example
4 years ago
Max
0b528d2507
Merge pull request #283 from smallstep/max/empty-oids-nil
...
Always convert empty list to nil when saving orderIDs index.
4 years ago
max furman
41a1a053d8
Always convert empty list to nil when saving orderIDs index.
4 years ago
Max
619f6f6ce0
Merge pull request #281 from smallstep/max/acmeOrders
...
Only retain `pending' orders in the `acme_account_orders_index`
4 years ago
max furman
704a510a2a
Remove non-pending orders from the acme_orders_by_account index ...
...
- Each acme account has an index in this table. Before this change, the
index would grow unchecked as orders accumulate. This change removes
orders that have moved out of the 'PENDING' state.
4 years ago
max furman
c4f1eea5dc
Correct badger file loading mode documentation.
4 years ago
David Cowden
30bfba48d5
Merge branch 'dcow/key-change-error'
...
Fixes: https://github.com/smallstep/certificates/pull/276
4 years ago
max furman
d9a1fb7e5d
Recommend badgerV2 in badger extra options documentation.
4 years ago
David Cowden
a26b5f322d
acme/api: Brush up documentation on key-change
...
Add more specific wording describing what a 501 means and add more color
explaining how official vs unofficial error types should be handled.
4 years ago
Mariano Cano
2ca63a9ff5
Merge pull request #267 from smallstep/awskms
...
AWS KMS support
4 years ago
Mariano Cano
26c89cf779
Rename method.
4 years ago
Mariano Cano
7a985b1470
Fix usage, remove unsupported flag.
4 years ago
Mariano Cano
df3e9c0cd6
Add full version of the license.
4 years ago
Mariano Cano
4ac51dd508
Merge pull request #274 from smallstep/oidc-raw-locals
...
Allow dots and other symbols in principals for OIDC
4 years ago
Mariano Cano
6c9cd7050c
Add test with query strings.
4 years ago
Mariano Cano
dfe8e11e44
Remove anchor from link.
4 years ago
Mariano Cano
3246a3e81f
Add missing test case.
4 years ago
David Cowden
b26e6e42b3
acme: Return 501 for the key-change route
...
RFC 8555 § 7.3.5 is not listed as optional but we do not currently
support it. Rather than 404, return a 501 to inform clients that this
functionality is not yet implemented.
The notImplmented error type is not an official error registered in the
ietf:params:acme:error namespace, so prefix if with step:acme:error. An
ACME server is allowed to return other errors and clients should display
the message detail to users.
Fixes: https://github.com/smallstep/certificates/issues/209
4 years ago
Max
ab0f2aedcc
Merge pull request #268 from smallstep/max/acme-nbf
...
Set nbf and nbf for ACME orders even when they are not set in the request.
Closes #92
4 years ago
max furman
6e69f99310
Always set nbf and naf for new ACME orders ...
...
- Use the default value from the ACME provisioner if values are not
defined in the request.
4 years ago
Mariano Cano
0b5fd156e8
Add a third principal on OIDC tokens with the raw local part of the email.
...
For the email first.last@example.com it will create the principals
["firstlast", "first.last", "first.last@example.com"]
Fixes #253 , #254
4 years ago
Mariano Cano
7104588fcb
Fix linter error.
4 years ago