Commit Graph

1668 Commits (8c5b12e21de229eed8e3c8c88ad3ab7ba59d12f3)
 

Author SHA1 Message Date
Herman Slatman 8c5b12e21d
Add non-TLS server and improve crypto.Decrypter interface
A server without TLS was added to serve the SCEP endpoints. According
to the RFC, SCEP has to be served via HTTP. The `sscep` client, for
example, will stop any URL that does not start with `http://` from
being used, so serving SCEP seems to be the right way to do it.

This commit adds a second server for which no TLS configuration is
configured. A distinct field in the configuration, `insecureAddress`
was added to specify the address for the insecure server.

The SCEP endpoints will also still be served via HTTPS. Some clients
may be able to work with that.

This commit also improves how the crypto.Decrypter interface is
handled for the different types of KMSes supported by step. The
apiv1.Decrypter interface was added. Currently only SoftKMS
implements this interface, providing a crypto.Decrypter required
for SCEP operations.
4 years ago
Herman Slatman efd5501aca
Merge branch 'master' into hs/scep 4 years ago
Herman Slatman 538fe8114d
Fix linter issues 4 years ago
Herman Slatman cc1ecb9438
Store new certificates in database 4 years ago
Mariano Cano a98ea5f9cd
Merge pull request #502 from smallstep/windows-ui
Add support for cli-utils with powershell support.
4 years ago
Mariano Cano d74f1fa55e Use cli-utils v0.2.0 4 years ago
Mariano Cano a1a7e38a49 Add support for cli-utils with powershell support. 4 years ago
Herman Slatman 47c2a82d3b
Merge branch 'master' into hs/scep 4 years ago
Herman Slatman 9902dc1079
Add signed failure responses 4 years ago
Carl Tashian 4d7338f763
Merge pull request #499 from smallstep/carl/readmes
Update "build from source" instructions
4 years ago
Carl Tashian 35be06f4aa Amendments to CONTRIBUTING doc 4 years ago
Herman Slatman 2536a08dc2
Add support for configuring capabilities (cacaps) 4 years ago
Herman Slatman e4d7ea8fa0
Add support for challenge password 4 years ago
Herman Slatman 2d21b09d41
Remove some duplicate and unnecessary logic 4 years ago
Herman Slatman 99654f0efe
Merge branch 'master' into hs/scep 4 years ago
Herman Slatman 9df5f513e7
Change to a fixed fork of go.mozilla.org/pkcs7
Hopefully this will be a temporary change until
the fix is merged in the upstream module.
4 years ago
Herman Slatman 3a5f633cdd
Add support for multiple SCEP provisioners
Similarly to how ACME suppors multiple provisioners, it's
now possible to load the right provisioner based on the
URL.
4 years ago
Carl Tashian c67531134a
Update CONTRIBUTING.md 4 years ago
Carl Tashian b4d2368dfe
Update README.md 4 years ago
Carl Tashian 9248cfcc95
Update README with build from source link 4 years ago
Carl Tashian a9e52405a2
Add CGO build instructions to contributing.md 4 years ago
max furman 94a895994f [action] pin to 1.15.8 not ^1.15.8
- was bumping all the way to 1.16
4 years ago
max furman aef1e8ca7b [action] build artifacts in .releases dir to match actions 4 years ago
max furman 9cfdd2f3df [action] change step-certificates to step-ca where possible 4 years ago
max furman 8a1c8b394a [action] change debian package and src name in debian build files 4 years ago
max furman 43b4e5b4f8 [action] rename debian 4 years ago
max furman ad48c8a881 [systemd file] add note about commenting sandboxing section for
troubleshooting
4 years ago
max furman 0aa96a936f [systemd] change executable location of step-ca 4 years ago
Herman Slatman 2fc5a7f22e
Improve SCEP API logic and error handling 4 years ago
Herman Slatman a6d50f2fa0
Remove x509 template from API 4 years ago
Herman Slatman 311c9d767b
Add AuthorizeSign method to SCEP authority 4 years ago
Herman Slatman 4322933588
Add handling of options 4 years ago
Herman Slatman 19f0397fe9
Remove the copy of mozilla/pkcs7
Apparently the existing library works out of the box, after all.

We'll have to see how it works out continuing forward.
4 years ago
Herman Slatman 7948f65ac0
Merge branch 'master' into hs/scep 4 years ago
Herman Slatman 7ad90d10b3
Refactor initialization of SCEP authority 4 years ago
Herman Slatman f871f8135c
Add full copy of mozilla/pkcs7 module as internal dependency
The full contents of the git repository @432b2356ecb...
was copied. Only go.mod was removed from it.
4 years ago
max furman 8b4bbd3d39 go mod tidy 4 years ago
Mariano Cano 5be86691c1 Fix unit tests in Go 1.16. 4 years ago
Max 8ead310d24
Merge pull request #485 from smallstep/max/actions
Convert to github actions
4 years ago
max furman 1748b2b6c6 [action] Rename some steps and fix version calculation for actions 4 years ago
max furman 9652a89629 [action] release housekeeping
- separate create_release, goreleaser, and debian to parallelize
- 1.15.8
- ubuntu-20.04
4 years ago
Mariano Cano abda738a12
Merge pull request #488 from smallstep/cloudkms-error
CloudKMS signer with errors
4 years ago
Mariano Cano 163eb7029c Refactor cloudkms signer to return an error on the constructor. 4 years ago
Mariano Cano cae08bff80 Validate that the signer can get the public key. 4 years ago
Herman Slatman 702032f2b7
Add number of certs to return and fix CR LF in CACaps 4 years ago
Herman Slatman 165f6a1ccd
Improve setup for multiple SCEP providers (slightly) 4 years ago
Herman Slatman 78d78580b2
Add note about using a second (unsecured) server 4 years ago
Herman Slatman 9e43dc85d8
Merge branch 'master' into hs/scep-master 4 years ago
max furman 96b38ccd55 [actions] revert build/test/lint step to 1.15.6 4 years ago
max furman f88f58440f add //nolint for new 1.16 deprecation warnings
- dsa
- pem.DecryptPEMBlock
4 years ago