Commit Graph

4113 Commits

Author SHA1 Message Date
beltram
3eb0ff43c0
fix orderNames size 2024-01-08 20:47:51 +01:00
beltram
c41a99ad75
(finalize) have both display name & domain in SANs 2024-01-08 20:47:28 +01:00
beltram
5ba0ab3e44
fix csr domain validation in finalize 2024-01-08 20:46:48 +01:00
beltram
73ec6c89d0
fix csr org validation in finalize 2024-01-08 20:46:07 +01:00
beltram
ca01c74333
avoid manipulating the key PEM format and take a plain PEM key as input 2024-01-08 20:42:52 +01:00
beltram
74ddad69dc
fix: challenge is '.token' and not '.id' 2024-01-08 20:39:27 +01:00
beltram
83f6be1f58
print oidc options 2024-01-08 20:38:26 +01:00
Stefan Berthold
2208b03744
avoid panic when OIDC config is not provided 2024-01-08 20:37:37 +01:00
beltram
1fe61bee7b
better observability 2024-01-08 20:36:37 +01:00
Stefan Berthold
e6dd211637
acquire DPoP signing key from provisioner 2024-01-08 20:34:58 +01:00
beltram
227e932624
use json struct for challenge request payload otherwise it's a hell to craft from client side 2024-01-08 20:33:46 +01:00
Stefan Berthold
5ca744567c
simplify OIDC verification 2024-01-08 20:32:44 +01:00
Stefan Berthold
da1e64aa53
update wire challenges' status on happy end 2024-01-08 20:28:37 +01:00
Stefan Berthold
8e0e35532c
Add Wire authz and challenges (OIDC+DPOP) 2024-01-08 20:27:16 +01:00
github-actions[bot]
fc55fba5b5
Merge pull request #1664 from smallstep/dependabot/go_modules/google.golang.org/api-0.155.0
Bump google.golang.org/api from 0.154.0 to 0.155.0
2024-01-08 18:59:01 +01:00
Herman Slatman
4ba2e22b8d
Merge pull request #1663 from smallstep/herman/acme-cose-rs1-support 2024-01-08 17:20:21 +01:00
dependabot[bot]
a49d1f7dc0
Bump google.golang.org/api from 0.154.0 to 0.155.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.154.0 to 0.155.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.154.0...v0.155.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-08 15:22:05 +00:00
Herman Slatman
e52836f0ab
Add RS1 support for ACME device-attest-01 2024-01-07 21:25:36 +01:00
Herman Slatman
581db00a00
Merge pull request #1661 from smallstep/herman/acme-challenge-client-proxy
Add support for `HTTP_PROXY` and `HTTPS_PROXY` to ACME solver client
2024-01-03 19:36:48 +01:00
Herman Slatman
c59d293d26
Add support for HTTP_PROXY and HTTPS_PROXY to ACME solver client 2024-01-03 15:09:24 +01:00
github-actions[bot]
b75773e193
Merge pull request #1655 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.32.0
Bump google.golang.org/protobuf from 1.31.0 to 1.32.0
2023-12-27 13:16:20 +01:00
github-actions[bot]
5432316f2c
Merge pull request #1657 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.0.11
Bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.11
2023-12-27 13:15:01 +01:00
dependabot[bot]
a612efff5a
Bump google.golang.org/protobuf from 1.31.0 to 1.32.0
Bumps google.golang.org/protobuf from 1.31.0 to 1.32.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-27 12:11:04 +00:00
github-actions[bot]
428404870e
Merge pull request #1654 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.60.1
Bump google.golang.org/grpc from 1.60.0 to 1.60.1
2023-12-27 13:09:23 +01:00
dependabot[bot]
f3572b39c6
Bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.11
Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.0.10 to 5.0.11.
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-chi/chi/compare/v5.0.10...v5.0.11)

---
updated-dependencies:
- dependency-name: github.com/go-chi/chi/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-25 15:16:36 +00:00
dependabot[bot]
e45be31055
Bump google.golang.org/grpc from 1.60.0 to 1.60.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.60.0 to 1.60.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.60.0...v1.60.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-25 15:15:59 +00:00
github-actions[bot]
4a580f59fb
Merge pull request #1649 from smallstep/dependabot/go_modules/google.golang.org/api-0.154.0
Bump google.golang.org/api from 0.153.0 to 0.154.0
2023-12-19 13:21:03 +01:00
dependabot[bot]
56daa26900
Bump google.golang.org/api from 0.153.0 to 0.154.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.153.0 to 0.154.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.153.0...v0.154.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-19 12:15:39 +00:00
github-actions[bot]
9eecd12fc2
Merge pull request #1651 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.29.0
Bump github.com/newrelic/go-agent/v3 from 3.28.1 to 3.29.0
2023-12-19 13:12:34 +01:00
github-actions[bot]
40c58cb1ec
Merge pull request #1650 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.60.0
Bump google.golang.org/grpc from 1.59.0 to 1.60.0
2023-12-19 13:11:20 +01:00
github-actions[bot]
9780cf7b80
Merge pull request #1648 from smallstep/dependabot/go_modules/github.com/google/uuid-1.5.0
Bump github.com/google/uuid from 1.4.0 to 1.5.0
2023-12-19 11:39:20 +01:00
github-actions[bot]
0e3964ee80
Merge pull request #1652 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.17.0
Bump golang.org/x/crypto from 0.16.0 to 0.17.0
2023-12-19 10:57:57 +01:00
dependabot[bot]
5d446dedd6
Bump golang.org/x/crypto from 0.16.0 to 0.17.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.16.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-19 00:07:44 +00:00
dependabot[bot]
46237b8638
Bump github.com/newrelic/go-agent/v3 from 3.28.1 to 3.29.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.28.1 to 3.29.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.28.1...v3.29.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 15:23:29 +00:00
dependabot[bot]
33e6f2bae2
Bump google.golang.org/grpc from 1.59.0 to 1.60.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.59.0 to 1.60.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.59.0...v1.60.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 15:23:19 +00:00
dependabot[bot]
2a5a65161c
Bump github.com/google/uuid from 1.4.0 to 1.5.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 15:22:52 +00:00
Mariano Cano
62e09de2c6
Merge pull request #1647 from smallstep/go-jose
Upgrade go.step.sm/crypto to use go-jose/v3
2023-12-12 16:47:19 -08:00
Mariano Cano
b20af51f32
Upgrade go.step.sm/crypto to use go-jose/v3 2023-12-12 16:36:48 -08:00
github-actions[bot]
2c42907b4e
Merge pull request #1645 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.39.0
Bump go.step.sm/crypto from 0.38.0 to 0.39.0
2023-12-11 18:14:56 +01:00
github-actions[bot]
ecc47c8e18
Merge pull request #1646 from smallstep/dependabot/go_modules/google.golang.org/api-0.153.0
Bump google.golang.org/api from 0.152.0 to 0.153.0
2023-12-11 18:14:28 +01:00
Carl Tashian
4d0c684e88
Merge pull request #1640 from smallstep/carl/debian-bookworm
Update Dockerfile.hsm to use Debian bookworm
2023-12-11 09:02:21 -08:00
dependabot[bot]
6fcfb7a737
Bump google.golang.org/api from 0.152.0 to 0.153.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.152.0 to 0.153.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.152.0...v0.153.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-11 16:01:48 +00:00
dependabot[bot]
9aee8fde06
Bump go.step.sm/crypto from 0.38.0 to 0.39.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.38.0 to 0.39.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.38.0...v0.39.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-11 16:01:34 +00:00
Carl Tashian
bd46d94238
Merge branch 'master' into carl/debian-bookworm 2023-12-05 07:26:39 -08:00
github-actions[bot]
c25273d7a7
Merge pull request #1638 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.28.1
Bump github.com/newrelic/go-agent/v3 from 3.28.0 to 3.28.1
2023-12-05 10:55:11 +01:00
Carl Tashian
38140c5765
Update Dockerfile.hsm to use Debian bookworm 2023-12-04 18:10:39 -08:00
dependabot[bot]
439ace3086
Bump github.com/newrelic/go-agent/v3 from 3.28.0 to 3.28.1
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.28.0...v3.28.1)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-04 15:33:06 +00:00
Herman Slatman
f453323ba9
Merge pull request #1631 from smallstep/herman/fix-apple-acmeclient-invalid-signatures 2023-12-01 09:48:37 +01:00
Herman Slatman
405aae798c
Simplify the copy logic used when patching JWS signature 2023-11-30 14:27:32 +01:00
Max
7bfe11c687
Bump go.step.sm/crypto (#1635) 2023-11-28 21:24:48 -08:00