Commit Graph

57 Commits (8cf6675ce459432c4713e41cea951d87b3627ee8)

Author SHA1 Message Date
Mariano Cano 34c6c65671 Pass attestation information to the Sign method
Attestation information might be useful in authorizing webhooks
2 years ago
Mariano Cano 3cd72ac72a Remove debug statements 2 years ago
Mariano Cano 54d92095ac Validate proof of possession signature
On the step format, validate proof of possession of the private
key validating the signature in the attestation statement.
2 years ago
Mariano Cano 59b7603d1e Use a clientAuth only cert for device-attest-01 2 years ago
Mariano Cano 2f7cb9225f Use go.step.sm/crypto to set the permanent identifier 2 years ago
Mariano Cano 66356cff43 Add attestation certificate validation for Apple devices 2 years ago
Brandon Weeks 7e1b0bebd9 iOS 16 beta 1 support 2 years ago
Brandon Weeks 2ac8b69da2 Add ACME permanent-identifier identifier type 2 years ago
Herman Slatman 80bebda69c
Fix code style issue 3 years ago
Herman Slatman bc0875bd7b
Disallow email address and URLs in the CSR
Before this commit `step` would allow email addresses and URLs
in the CSR. This doesn't fit nicely with the rest of ACME, in which
identifiers need to be authorized before a certificate is issued.
3 years ago
Herman Slatman 13a31fd862
Merge branch 'master' into herman/ip-sans-improvements 3 years ago
Herman Slatman ca707cbe05
Fix linting 3 years ago
Herman Slatman a2c9b5cd7e
Allow IP identifiers in subject, including authorization enforcement
To support IPs in the subject using `step-cli`, this PR ensures that
Subject Common Names that can be parsed as an IP are also checked
to have been authorized before.

The PR for `step-cli` is here: github.com/smallstep/cli/pull/576.
3 years ago
Herman Slatman 06bb97c91e
Add logic for Account authorizations and improve tests 3 years ago
Herman Slatman 29f9730485
Satisfy golangci-lint 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Herman Slatman 8e4a4ecc1f
Refactor tests for sans 3 years ago
Herman Slatman 87b72afa25
Fix IP equality check and add more tests 3 years ago
Herman Slatman 64c15fde7e
Add tests for canonicalize function 3 years ago
Herman Slatman 218a2adb9f
Add tests for IP Order validations 3 years ago
Herman Slatman 84ea8bd67a
Fix PR comments 3 years ago
Herman Slatman af4803b8b8
Fix tests 3 years ago
Herman Slatman a6405e98a9
Remove fmt. 3 years ago
Herman Slatman 76dcf542d4
Fix mixed DNS and IP SANs in Order 3 years ago
Herman Slatman af615db6b5
Support DNS and IPs as SANs in single Order 3 years ago
Herman Slatman 3e36522329
Add preliminary support for TLS-ALPN-01 challenge for IP identifiers 3 years ago
Herman Slatman 6d9710c88d
Add initial support for ACME IP validation 3 years ago
max furman 440678cb62 Add markInvalid arg to storeError for invalidating challenge 4 years ago
max furman 6b8585c702 PR review fixes / updates 4 years ago
max furman 1831920363 Finish order unit tests and remove unused mocklinker 4 years ago
max furman bdf4c0f836 add acme order unit tests 4 years ago
max furman c0a9f24798 add authorization and order unit tests 4 years ago
max furman f72b2ff2c2 [acme db interface] nosql authz unit tests 4 years ago
max furman 8d2ebcfd49 [acme db interface] more unit tests 4 years ago
max furman fc395f4d69 [acme db interface] compiles! 4 years ago
max furman 80a6640103 [acme db interface] wip 4 years ago
max furman 1135ae04fc [acme db interface] wip 4 years ago
max furman 03ba229bcb [acme db interface] wip more errors 4 years ago
max furman 2ae43ef2dc [acme db interface] wip errors 4 years ago
max furman 121cc34cca [acme db interface] wip 4 years ago
max furman 461bad3fef [acme db interface] wip 4 years ago
max furman 4c48048615 Use sync.Mutex as value 4 years ago
max furman 272cce522e Fix test and change method name 4 years ago
max furman f34fb80eb6 [acme] Use lock for ordersByAccID and type to house methods 4 years ago
Mariano Cano c8d225a763 Use x509util from go.step.sm/crypto/x509util 4 years ago
Mariano Cano f1773489fc Fix comment. 4 years ago
Mariano Cano 6c64fb3ed2 Rename provisioner options structs:
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
4 years ago
Mariano Cano a7fe0104c4 Remove ACME restrictions and add proper template support. 4 years ago
max furman 1951669e13 wip 4 years ago
max furman 41a1a053d8 Always convert empty list to nil when saving orderIDs index. 4 years ago