Commit Graph

1152 Commits (907162be44661aa64f1b74212d853695b5a1dd20)
 

Author SHA1 Message Date
Mariano Cano 907162be44 Add test for DefaultTemplates. 4 years ago
Mariano Cano f82a248617 Add test with backfill. 4 years ago
Mariano Cano ff32746312 Add test case for error executing template. 4 years ago
Mariano Cano e3ae751b57 Use templates from authority instead of config. 4 years ago
Mariano Cano a845b56283 Remove the template path if we load the defaults. 4 years ago
Mariano Cano 237baa5169 Check for required variables in templates.
Fixes smallstep/cli#232
4 years ago
Mariano Cano 6c844a0618 Load default templates if no templates are configured. 4 years ago
Mariano Cano b583d8d658 Move default templates to the template package. 4 years ago
Max 2ebfc73f77
Merge pull request #290 from smallstep/max/profileLimit
Update profileLimitDuration validator ...
4 years ago
max furman 7d5cf34ce5 Update profileLimitDuration validator ...
- respect notBefore of the provisioner
- modify/fix the reported errors
4 years ago
Mariano Cano 72bb6e159f
Merge pull request #287 from smallstep/nil-templates
Avoid nil pointer panic on step ssh config with no templates.

Fixes #289
4 years ago
max furman 54be8889cd Correct attribute names for SSH claims in provisioner docs 4 years ago
Max 6ee30c3a41
Merge pull request #288 from smallstep/max/rhel-doc
Add RHEL/Centos install documentation and a section on systemctl configuration
4 years ago
max furman aaec9931f4 Add RHEL/Centos install docs and a section on systemctl config 4 years ago
Mariano Cano 9832d1538b Avoid nil pointer panic on step ssh config with no templates. 4 years ago
Mariano Cano 91bf74551b
Merge pull request #176 from moqmar/patch/ports-below-1024
Let step-ca bind to ports < 1024

Fixes #170
4 years ago
Mariano Cano 88add85e42
Merge pull request #286 from smallstep/ksm-imports
Move load of kms to main package.
4 years ago
Mariano Cano ddb4ca7a74 Move load of kms to main package.
With this change packages that import the authority won't load by
default all the supported kms with all its dependencies.

Fixes #228
4 years ago
Miclain K Keffeler 2d45f61987
Merge pull request #1 from mkkeffeler/mkkeffeler-docs
RHEL/CentOS Example
4 years ago
Miclain K Keffeler 195cdd664a
RHEL/CentOS Example 4 years ago
Max 0b528d2507
Merge pull request #283 from smallstep/max/empty-oids-nil
Always convert empty list to nil when saving orderIDs index.
4 years ago
max furman 41a1a053d8 Always convert empty list to nil when saving orderIDs index. 4 years ago
Max 619f6f6ce0
Merge pull request #281 from smallstep/max/acmeOrders
Only retain `pending' orders in the `acme_account_orders_index`
4 years ago
max furman 704a510a2a Remove non-pending orders from the acme_orders_by_account index ...
- Each acme account has an index in this table. Before this change, the
index would grow unchecked as orders accumulate. This change removes
orders that have moved out of the 'PENDING' state.
4 years ago
max furman c4f1eea5dc Correct badger file loading mode documentation. 4 years ago
David Cowden 30bfba48d5 Merge branch 'dcow/key-change-error'
Fixes: https://github.com/smallstep/certificates/pull/276
4 years ago
max furman d9a1fb7e5d Recommend badgerV2 in badger extra options documentation. 4 years ago
David Cowden a26b5f322d acme/api: Brush up documentation on key-change
Add more specific wording describing what a 501 means and add more color
explaining how official vs unofficial error types should be handled.
4 years ago
Mariano Cano 2ca63a9ff5
Merge pull request #267 from smallstep/awskms
AWS KMS support
4 years ago
Mariano Cano 26c89cf779 Rename method. 4 years ago
Mariano Cano 7a985b1470 Fix usage, remove unsupported flag. 4 years ago
Mariano Cano df3e9c0cd6 Add full version of the license. 4 years ago
Mariano Cano 4ac51dd508
Merge pull request #274 from smallstep/oidc-raw-locals
Allow dots and other symbols in principals for OIDC
4 years ago
Mariano Cano 6c9cd7050c Add test with query strings. 4 years ago
Mariano Cano dfe8e11e44 Remove anchor from link. 4 years ago
Mariano Cano 3246a3e81f Add missing test case. 4 years ago
David Cowden b26e6e42b3 acme: Return 501 for the key-change route
RFC 8555 § 7.3.5 is not listed as optional but we do not currently
support it. Rather than 404, return a 501 to inform clients that this
functionality is not yet implemented.

The notImplmented error type is not an official error registered in the
ietf:params:acme:error namespace, so prefix if with step:acme:error. An
ACME server is allowed to return other errors and clients should display
the message detail to users.

Fixes: https://github.com/smallstep/certificates/issues/209
4 years ago
Max ab0f2aedcc
Merge pull request #268 from smallstep/max/acme-nbf
Set nbf and nbf for ACME orders even when they are not set in the request.

Closes #92
4 years ago
max furman 6e69f99310 Always set nbf and naf for new ACME orders ...
- Use the default value from the ACME provisioner if values are not
defined in the request.
4 years ago
Mariano Cano 0b5fd156e8 Add a third principal on OIDC tokens with the raw local part of the email.
For the email first.last@example.com it will create the principals
  ["firstlast", "first.last", "first.last@example.com"]

Fixes #253, #254
4 years ago
Mariano Cano 7104588fcb Fix linter error. 4 years ago
Mariano Cano f006cca87a Use Go 1.14. 4 years ago
Mariano Cano aaf71ce66a Add unit tests for awskms. 4 years ago
Mariano Cano d4cb9f4ac7 Define an interface for kms operations.
This interface will be used for unit testing.
4 years ago
Mariano Cano deac15327f Add docs for AWS KMS. 4 years ago
Mariano Cano 82fb96588e Fix unit tests. 4 years ago
Mariano Cano 5b680b2349 Add initialization script for an AWS KMS. 4 years ago
Mariano Cano c32abb76cd Add initial implementation to support AWS KMS. 4 years ago
Mariano Cano b0f768a3fb Add implementation of URIs for KMS.
Implementation is based on the PKCS #11 URI Scheme RFC
https://tools.ietf.org/html/rfc7512
4 years ago
Mariano Cano 2bc69d3edd
Merge pull request #252 from smallstep/yubikey
Yubikey support
4 years ago