33 Commits

Author	SHA1	Message	Date
Mariano Cano	6b73a020e3	Add unit tests for apple and step attestations	2022-09-15 18:19:52 -07:00
Mariano Cano	0f651799d0	Reject not enabled attestation formats	2022-09-08 17:38:05 -07:00
Mariano Cano	fd4e96d1f4	Rename method to IsChallengeEnabled	2022-09-08 13:22:35 -07:00
Mariano Cano	c77b4ff9c5	Fix linter errors	2022-09-08 12:49:16 -07:00
Mariano Cano	59c5219a07	Use a type for acme challenges	2022-09-08 12:34:06 -07:00
Mariano Cano	bca311b05e	Add acme property to enable challenges ... Fixes #1027	2022-08-23 17:11:40 -07:00
Mariano Cano	d461918eb0	Merge branch 'master' into context-authority	2022-05-06 13:21:41 -07:00
Mariano Cano	d1f75f1720	Refactor ACME api.	2022-04-28 19:15:18 -07:00
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2022-03-24 14:55:40 +01:00
Herman Slatman	3ec9a7310c	Fix ACME order identifier allow/deny check	2022-03-08 14:17:59 +01:00
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2022-01-03 12:25:24 +01:00
Herman Slatman	2d357da99b	Add tests for ACME revocation	2021-11-26 17:27:42 +01:00
Herman Slatman	258efca0fa	Improve revocation authorization	2021-07-10 00:28:31 +02:00
Herman Slatman	8f7e700f09	Merge branch 'master' into hs/acme-revocation	2021-07-09 11:22:25 +02:00
max furman	9fdef64709	Admin level API for provisioner mgmt v1	2021-07-02 19:05:17 -07:00
Herman Slatman	d53bcaf830	Add base logic for ACME revoke-cert	2021-07-02 22:51:15 +02:00
max furman	440678cb62	Add markInvalid arg to storeError for invalidating challenge	2021-03-29 22:58:26 -07:00
max furman	6b8585c702	PR review fixes / updates	2021-03-29 12:04:14 -07:00
max furman	80a6640103	[acme db interface] wip	2021-03-25 12:05:46 -07:00
max furman	03ba229bcb	[acme db interface] wip more errors	2021-03-25 12:05:46 -07:00
max furman	2ae43ef2dc	[acme db interface] wip errors	2021-03-25 12:05:46 -07:00
max furman	461bad3fef	[acme db interface] wip	2021-03-25 12:05:45 -07:00
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	2020-08-24 14:44:11 -07:00
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	2020-08-10 11:26:51 -07:00
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	2020-07-22 18:24:45 -07:00
Mariano Cano	0c8376a7f6	Fix existing unit tests.	2020-07-21 14:21:54 -07:00
Mariano Cano	a7fe0104c4	Remove ACME restrictions and add proper template support.	2020-07-21 14:18:06 -07:00
max furman	6e69f99310	Always set nbf and naf for new ACME orders ... ... - Use the default value from the ACME provisioner if values are not defined in the request.	2020-05-22 10:31:58 -07:00
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	2020-05-14 17:32:54 -07:00
Max	0a96062b76	Merge pull request #128 from jkralik/returnCertChain ... Change api of functions Authority.Sign, Authority.Renew	2019-10-18 14:00:18 -07:00
max furman	7aec7c2612	Create ACME database tables when initializing ACME autority.	2019-10-14 14:51:03 -07:00
Jozef Kralik	bc6074f596	Change api of functions Authority.Sign, Authority.Renew ... Returns certificate chain instead of 2 members. Implements #126	2019-10-09 22:23:00 +02:00
max furman	e3826dd1c3	Add ACME CA capabilities	2019-09-13 15:48:33 -07:00