Commit Graph

3129 Commits (7a78c76199bd2d45430bb479a4596c3e5561e140)
 

Author SHA1 Message Date
Mariano Cano 7a78c76199
Add test simulating YubiKey v5.2.4
There are YubiKeys v5.2.4 where the attestation intermediate (f9)
does not have a basic constraint extension, so that certificate
is not marked as a CA. The test and CA in this commit imitates
that use case. Currently the test case returns an error as we
don't support it. But if we change the verification to support
this use case, the test should change accordingly.
2 years ago
Herman Slatman 90cdcdd2eb
Merge pull request #1097 from smallstep/herman/update-nosql-v0.5.0
Update `github.com/smallstep/nosql` to v0.5.0
2 years ago
Herman Slatman aa4e5bed76
Update changelog with `smallstep/nosql@v0.5.0` fixes 2 years ago
Herman Slatman 764b7bb02f
Update `github.com/smallstep/nosql` to v0.5.0
This version of `nosql` includes some fixes for MySQL DSNs. The
tag is backdated a bit, as to not include the most recent
changes, which may have a bigger impact.

Also ran `go mod tidy`, `go mod vendor`
2 years ago
Mariano Cano a8f9b07aae
Merge pull request #1096 from smallstep/attestation-info
Attestation data
2 years ago
Mariano Cano bd1938b0da
Add support for storing or sending attestation data to linkedca 2 years ago
Max 139e115f6f
Merge pull request #1091 from smallstep/max/pat
[action] replace secrets.PAT with more specific secrets
2 years ago
max furman c66218330a
[action] replace secrets.PAT with more specific secrets 2 years ago
Max a258ea3e2d
Merge pull request #1090 from smallstep/max/contextcheck
No longer need to ignore context warnings when context in request
2 years ago
max furman 66858a3870
No longer need to ignore context warnings when context in request
- after upgrade to golangci-lint 1.50.0
2 years ago
Max 72b6cb6d31
Merge pull request #1081 from smallstep/max/action-update
[action] updates and first pass at goreleaser deb
2 years ago
max furman 97cc09e26c
Remove deprecated binaries for awskms and cloudkms 2 years ago
max furman 4c687efb17
[action] updates and first pass at goreleaser deb 2 years ago
Mariano Cano 818dffe6fe
Merge pull request #1089 from smallstep/attestation-error
Revert ValidatedAt
2 years ago
Mariano Cano 21666ba887
Revert "Set timestamp when marking an acme challenge invalid"
This reverts commit 5f130895f3.
2 years ago
Mariano Cano 8538ff06b7
Add missing error case. 2 years ago
Max 37e80964ae
Merge pull request #1088 from smallstep/max/secrets
[action] remove gitleaks secret, add codecov secret and inheritance
2 years ago
Mariano Cano c071907cd1
Merge pull request #1087 from smallstep/acme-validated-at
Set Challenge ValidateAt
2 years ago
max furman 505c411a67
[action] remove gitleaks secret, add codecov secret and inheritance 2 years ago
Mariano Cano 5f130895f3
Set timestamp when marking an acme challenge invalid 2 years ago
Max a4f6b1ba0f
Merge pull request #1086 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.3.0
Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.1.0 to 0.3.0
2 years ago
Max 87079a87d6
Merge pull request #1085 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.8.0
Bump cloud.google.com/go/security from 1.7.0 to 1.8.0
2 years ago
dependabot[bot] 3abb42dd1d
Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.1.0 to 0.3.0
Bumps [github.com/hashicorp/vault/api/auth/kubernetes](https://github.com/hashicorp/vault) from 0.1.0 to 0.3.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.1.0...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/kubernetes
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Max b1c396c829
Merge pull request #1083 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.19.2
Bump github.com/newrelic/go-agent/v3 from 3.18.0 to 3.19.2
2 years ago
dependabot[bot] eba73d2aea
Bump github.com/newrelic/go-agent/v3 from 3.18.0 to 3.19.2
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.18.0 to 3.19.2.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.18.0...v3.19.2)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Max 32feef3275
Merge pull request #1084 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.3.0
Bump github.com/hashicorp/vault/api/auth/approle from 0.1.1 to 0.3.0
2 years ago
Max f2628697db
Merge pull request #1082 from smallstep/dependabot/go_modules/github.com/rs/xid-1.4.0
Bump github.com/rs/xid from 1.2.1 to 1.4.0
2 years ago
Max 2ef5c98384
Merge pull request #1067 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.10
Bump github.com/urfave/cli from 1.22.4 to 1.22.10
2 years ago
dependabot[bot] 5f0fa57844
Bump cloud.google.com/go/security from 1.7.0 to 1.8.0
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/asset/v1.7.0...redis/v1.8.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] 211b1c01c0
Bump github.com/hashicorp/vault/api/auth/approle from 0.1.1 to 0.3.0
Bumps [github.com/hashicorp/vault/api/auth/approle](https://github.com/hashicorp/vault) from 0.1.1 to 0.3.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.1.1...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/approle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] 510122f026
Bump github.com/rs/xid from 1.2.1 to 1.4.0
Bumps [github.com/rs/xid](https://github.com/rs/xid) from 1.2.1 to 1.4.0.
- [Release notes](https://github.com/rs/xid/releases)
- [Commits](https://github.com/rs/xid/compare/v1.2.1...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/rs/xid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Andrew Reed 9b02b03293
Merge pull request #1079 from smallstep/areed/fix-webhook-type
Fix webhook controller ignoring cert type
2 years ago
Andrew Reed 2c5e41b093
Fix webhook controller ignoring cert type 2 years ago
Max 70abbdfc70
Merge pull request #1068 from smallstep/dependabot/go_modules/go.step.sm/cli-utils-0.7.5
Bump go.step.sm/cli-utils from 0.7.4 to 0.7.5
2 years ago
Max 8139179084
Merge pull request #1069 from smallstep/dependabot/go_modules/github.com/google/go-cmp-0.5.9
Bump github.com/google/go-cmp from 0.5.8 to 0.5.9
2 years ago
Max af4183df18
Merge pull request #1077 from smallstep/dependabot/go_modules/google.golang.org/api-0.98.0
Bump google.golang.org/api from 0.96.0 to 0.98.0
2 years ago
Max e5c5b0cb49
Merge pull request #1070 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.6.1
Bump github.com/slackhq/nebula from 1.5.2 to 1.6.1
2 years ago
dependabot[bot] ef75d4f3c6
Bump go.step.sm/cli-utils from 0.7.4 to 0.7.5
Bumps [go.step.sm/cli-utils](https://github.com/smallstep/cli-utils) from 0.7.4 to 0.7.5.
- [Release notes](https://github.com/smallstep/cli-utils/releases)
- [Commits](https://github.com/smallstep/cli-utils/compare/v0.7.4...v0.7.5)

---
updated-dependencies:
- dependency-name: go.step.sm/cli-utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] 3faa8717b3
Bump google.golang.org/api from 0.96.0 to 0.98.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.96.0 to 0.98.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.96.0...v0.98.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] 0027f93fb9
Bump github.com/google/go-cmp from 0.5.8 to 0.5.9
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Andrew Reed 7101fbb0ee
Provisioner webhooks (#1001) 2 years ago
dependabot[bot] 132b32b5a5
Bump github.com/urfave/cli from 1.22.4 to 1.22.10
Bumps [github.com/urfave/cli](https://github.com/urfave/cli) from 1.22.4 to 1.22.10.
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/urfave/cli/compare/v1.22.4...v1.22.10)

---
updated-dependencies:
- dependency-name: github.com/urfave/cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
dependabot[bot] 7420172d63
Bump github.com/slackhq/nebula from 1.5.2 to 1.6.1
Bumps [github.com/slackhq/nebula](https://github.com/slackhq/nebula) from 1.5.2 to 1.6.1.
- [Release notes](https://github.com/slackhq/nebula/releases)
- [Changelog](https://github.com/slackhq/nebula/blob/master/CHANGELOG.md)
- [Commits](https://github.com/slackhq/nebula/compare/v1.5.2...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/slackhq/nebula
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Mariano Cano 6fe0fc852a
Merge pull request #1076 from smallstep/attestation-roots
ACME attestation roots
2 years ago
Mariano Cano 906c5067b9
Include attestation roots on provisioner converters 2 years ago
Mariano Cano 9d4bef8cc9
Merge pull request #1072 from smallstep/name-constraints-changelog
Add name constraints support to changelog
2 years ago
Mariano Cano de73a3e8de
Merge pull request #1073 from smallstep/prompt-password
Support to ask for key password after crypto change
2 years ago
Max bfe29def59
Merge pull request #1065 from smallstep/max/code-scan
[actiono] Update workflows
2 years ago
Mariano Cano 1f4443d858
Support to ask for key password after crypto change
A change in crypto will remove the dependency of the ui package
used for prompting passwords.
2 years ago
Mariano Cano a3c7e0b15b
Clarify name constraints changelog 2 years ago