Commit Graph

1217 Commits (79739e5073226a002f431068bb5377301f0ea569)

Author SHA1 Message Date
Herman Slatman 79739e5073
Change signature algorithm property name 9 months ago
Herman Slatman 1bf807add3
Use base64 encoded signing key format 9 months ago
Herman Slatman 1f5f756fce
Make Wire options more robust 9 months ago
Herman Slatman 6ef64b6ed6
Refactor the `Wire` option configuration 9 months ago
Herman Slatman b6fc0005d5
Add verification of maximum expiry time for Wire tokens 9 months ago
Herman Slatman acad227b25
Put Wire options in lower level `wire` struct 9 months ago
Herman Slatman 897688a831
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 9 months ago
Herman Slatman 70a2f431fa
Address review remarks 9 months ago
Herman Slatman c7892e9cd3
Remove the `rusty-jwt-cli` configuration 9 months ago
Herman Slatman 8997ce1a1e
Disable `wire-dpop-01` and `wire-oidc-01` by default 9 months ago
Herman Slatman bf8c17e3ec
Remove the Wire `oidc` and `dpop` from attestation formats 9 months ago
Herman Slatman 6a98fea1f3
Fix linter issues 9 months ago
Herman Slatman e2a2e00526
Make template use `DeviceId` for now 9 months ago
Herman Slatman 776a839a42
Fix linter issues and improve error handling 9 months ago
beltram 39bf889925
feat: remove query parameters from OIDC issuerUrl so that it allows us to use it to carry the OAuth ClientId in the Challenge.target field without at the same time undermining the idToken verification which relies on a issuer (iss) claim without this query parameter 9 months ago
Stefan Berthold 5ceed08ae0
Reorganize parsing target 9 months ago
Stefan Berthold 83ba0bdc51
Replace field access by accessor functions 9 months ago
beltram 2b1223a080
simpler 9 months ago
beltram 036a144e09
add oidc target 9 months ago
beltram d32a3e23f0
wip 9 months ago
Stefan Berthold 2208b03744
avoid panic when OIDC config is not provided 9 months ago
Stefan Berthold e6dd211637
acquire DPoP signing key from provisioner 9 months ago
Stefan Berthold 8e0e35532c
Add Wire authz and challenges (OIDC+DPOP) 9 months ago
Mariano Cano b20af51f32
Upgrade go.step.sm/crypto to use go-jose/v3 10 months ago
Max d34f0f6a97
Fix linter warnings (#1634) 10 months ago
Herman Slatman f082cbc421
Denormalize provisioner name in SCEP webhook 11 months ago
Herman Slatman 9ebc8779f5
Normalize SCEP provisioner name in webhook body 11 months ago
Herman Slatman e815864ed8
Add verification of `provisionerName` in test 11 months ago
Herman Slatman de45d66cdb
Add `provisionerName` to webhook request body 11 months ago
Mariano Cano 49045a1150
Change CommonName validator in JWK
This commit changes the common name validator in the JWK provisioner to
accept either the token subject or any of the sans in the token.
11 months ago
Max 9f84f7ce35
Allow for identity certificate signing (in sshSign) by skipping validators (#1572)
- skip urisValidator for identity certificate signing. Implemented
  by building the validator with the context in a hacky way.
1 year ago
Mariano Cano 52baf52f84
Change scep password type to string
This commit changes the type of the decrypter key password to string to
be consistent with other passwords in the ca.json
1 year ago
Herman Slatman c0fbace882
Address review remarks 1 year ago
Herman Slatman 4dc5a688fd
Set SCEP authority options once 1 year ago
Herman Slatman 15c46ebbaa
Switch logic for SCEP initialization around 1 year ago
Herman Slatman f1da256ca4
Change SCEP authority initialization 1 year ago
Herman Slatman 4554f86f16
Make SCEP decrypter properties use `omitempty` 1 year ago
Herman Slatman ffe079f31b
Merge branch 'master' into herman/scep-provisioner-decrypter 1 year ago
Mariano Cano 31da66c124
Fix webhooks signature
This commit fixes the way webhooks signatures are created. Before this
change, the signature of an empty body was prepended by the body itself.
1 year ago
Herman Slatman 3f3b67e05c
Merge branch 'herman/scep-provisioner-decrypter' into herman/scep-notifying-webhook 1 year ago
Herman Slatman ba72710e2d
Address code review remarks 1 year ago
Herman Slatman 5f8e0de1c3
Fix duplicate import in SCEP provisioner 1 year ago
Herman Slatman 4fd4227b73
Use shorter SCEP decrypter property names from linkedca 1 year ago
Herman Slatman 5fd70af2c8
Make API responses aware of the new SCEP decrypter properties 1 year ago
Herman Slatman 3ade92f8d5
Support both a decrypter key URI as well as PEM 1 year ago
Herman Slatman b6c95d7be2
Add additional properties to SCEP notify webhook request body 1 year ago
Herman Slatman 63257e0576
Add full certificate DER bytes to success notification webhook 1 year ago
Herman Slatman 52bc96760b
Add SCEP certificate issuance notification webhook 1 year ago
Herman Slatman a3c9dd796a
Merge branch 'herman/scep-provisioner-decrypter' of github.com:smallstep/certificates into herman/scep-provisioner-decrypter 1 year ago
Herman Slatman 69a53eec33
Merge branch 'master' into herman/scep-provisioner-decrypter 1 year ago