161 Commits (91d51c2b8810f277a1a65805a799b6ae592129df)

Author	SHA1	Message	Date
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	3 years ago
Herman Slatman	a5f2f004e3	Change name of IP Common Name test for clarity	3 years ago
Herman Slatman	80bebda69c	Fix code style issue	3 years ago
Herman Slatman	bc0875bd7b	Disallow email address and URLs in the CSR ... Before this commit `step` would allow email addresses and URLs in the CSR. This doesn't fit nicely with the rest of ACME, in which identifiers need to be authorized before a certificate is issued.	3 years ago
Herman Slatman	13a31fd862	Merge branch 'master' into herman/ip-sans-improvements	3 years ago
Herman Slatman	ca707cbe05	Fix linting	3 years ago
Herman Slatman	a5d33512fe	Fix test	3 years ago
Herman Slatman	a2c9b5cd7e	Allow IP identifiers in subject, including authorization enforcement ... To support IPs in the subject using `step-cli`, this PR ensures that Subject Common Names that can be parsed as an IP are also checked to have been authorized before. The PR for `step-cli` is here: github.com/smallstep/cli/pull/576.	3 years ago
Herman Slatman	0524122191	Remove authorization flow for different Account private keys ... As discussed in https://github.com/smallstep/certificates/issues/767, we opted for not including this authorization flow to prevent users from getting OOMs. We can add the functionality back when the underlying data store can provide access to a long list of Authorizations more efficiently, for example when a callback is implemented.	3 years ago
Herman Slatman	004fc054d5	Fix PR comments	3 years ago
Herman Slatman	06bb97c91e	Add logic for Account authorizations and improve tests	3 years ago
Herman Slatman	bae1d256ee	Improve tests for JWK vs. KID revoke auth flow ... The logic for both test cases is fairly similar, but with some small differences. Made those clearer by means of some comments. Also added some comments to the middleware logic that decided whether to extract JWK or lookup by KID.	3 years ago
Herman Slatman	a7fbbc4748	Add tests for GetCertificateBySerial	3 years ago
Herman Slatman	4d01cf8135	Increase test code coverage	3 years ago
Herman Slatman	2d357da99b	Add tests for ACME revocation	3 years ago
Herman Slatman	ed295ca15d	Fix linting issue	3 years ago
Herman Slatman	2d50c96d99	Merge branch 'master' into hs/acme-revocation	3 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
Herman Slatman	29f9730485	Satisfy golangci-lint	3 years ago
Herman Slatman	c7a9c13060	Add tests for extractOrLookupJWK middleware	3 years ago
Herman Slatman	3151255a25	Merge branch 'master' into hs/acme-revocation	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	470b546d59	Merge pull request #557 from joejulian/http01-isv ... use InsecureSkipVerify for validation	3 years ago
max furman	a3028bbc0e	Add test for updateAddOrderIDs	3 years ago
Mariano Cano	dc5205cc72	Extract the tls error code and fail accordingly.	3 years ago
Mariano Cano	ae58a0ee4e	Make tests compatible with Go 1.17. ... With Go 1.17 tls.Dial will fail if the client and server configured protocols do not overlap. See https://golang.org/doc/go1.17#ALPN	3 years ago
Herman Slatman	258efca0fa	Improve revocation authorization	3 years ago
Herman Slatman	97165f1844	Fix test mocking for CreateCertificate	3 years ago
Herman Slatman	2b15230aa4	Add Serial to Cert ID ACME table and lookup	3 years ago
Herman Slatman	8f7e700f09	Merge branch 'master' into hs/acme-revocation	3 years ago
max furman	857a50434c	Merge branch 'master' into max/cert-mgr-crud	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Herman Slatman	16fe07d4dc	Fix mockSignAuth	3 years ago
Herman Slatman	0e56932e76	Add support for revocation using JWK	3 years ago
Herman Slatman	84e7d468f2	Improve handling of ACME revocation	3 years ago
Herman Slatman	d53bcaf830	Add base logic for ACME revoke-cert	3 years ago
Herman Slatman	8e4a4ecc1f	Refactor tests for sans	3 years ago
Herman Slatman	87b72afa25	Fix IP equality check and add more tests	3 years ago
Herman Slatman	a6d33b7d06	Add tests for sans()	3 years ago
Herman Slatman	64c15fde7e	Add tests for canonicalize function	3 years ago
Herman Slatman	c514a187b2	Fix Fail() -_-b	3 years ago
Herman Slatman	135e912ac8	Improve coverage for TLS-ALPN-01 challenge	3 years ago
Herman Slatman	218a2adb9f	Add tests for IP Order validations	3 years ago
Herman Slatman	523ae96749	Change identifier and challenge types to consts	3 years ago
Herman Slatman	84ea8bd67a	Fix PR comments	3 years ago
Herman Slatman	af4803b8b8	Fix tests	3 years ago
Herman Slatman	0c79914d0d	Improve check for single IP in TLS-ALPN-01 challenge	3 years ago
Herman Slatman	a6405e98a9	Remove fmt.	3 years ago
Herman Slatman	2f40011da8	Add support for TLS-ALPN-01 challenge	3 years ago
Herman Slatman	76dcf542d4	Fix mixed DNS and IP SANs in Order	3 years ago