max furman
99c9155467
disableSSHHostsListAPI -> disableGetSSHHosts
2 years ago
Mariano Cano
38fb92452f
Merge pull request #993 from smallstep/ra-ids
...
RA provisioner IDs
2 years ago
Mariano Cano
22337da18c
Merge pull request #990 from qbit/master
...
Update deps to bring in support for OpenBSD
2 years ago
Mariano Cano
821743f71e
Upgrade newrelic to v3
2 years ago
Aaron Bieber
135c481893
Update deps to bring in support for OpenBSD
...
OpenBSD support was added to the following deps:
- github.com/go-piv/piv-go in https://github.com/go-piv/piv-go/pull/101
- github.com/newrelic/go-agent in https://github.com/newrelic/go-agent/pull/455
- github.com/miekg/pkcs11 in https://github.com/miekg/pkcs11/pull/140
With these deps bumped, tests all pass on OpenBSD amd64.
2 years ago
Mariano Cano
a2f7766943
Use released version of linkedca
2 years ago
Mariano Cano
c5c7c30cc2
Fix typo in ProvisionerInfo
2 years ago
Mariano Cano
64744562c6
Send RA provisioner to linkedca.
2 years ago
Mariano Cano
6b5d3dca95
Add provisioner name to RA info
2 years ago
Mariano Cano
9648fe6b4c
Remove debug statement
2 years ago
Mariano Cano
a1f54921d2
Rename internal field
2 years ago
Mariano Cano
f9df8ac05f
Remove unused interface
2 years ago
Mariano Cano
7a1e6a0e1f
Fix and extend stepcas unit tests
2 years ago
Mariano Cano
9408d0f24b
Send RA provisioner information to the CA
2 years ago
Mariano Cano
a8819376d3
Remove empty lines on debug information
...
At the start of step-ca some information about the CA is displayed,
this change remove extra lines when displaying the ssh public keys.
2 years ago
Max
87f28a7ec9
Create codeql-analysis.yml
2 years ago
Max
0efaf514d7
Create SECURITY.md
2 years ago
max furman
fb7f57a8df
Add attribute to disable SSH Hosts list API
2 years ago
max furman
01423e36c9
[action] combine label and triage project add in one workflow
2 years ago
Raal Goff
9fa5f46213
add minor doco, Test_CRLGeneration(), fix some issues from merge
2 years ago
Raal Goff
60671b07d7
Merge branch 'master' into crl-support
...
# Conflicts:
# api/api.go
# authority/config/config.go
# cas/softcas/softcas.go
# db/db.go
2 years ago
max furman
ffe7c00a10
Add changelog template
2 years ago
Carl Tashian
6814b7f5dd
Update README.md
2 years ago
Mariano Cano
f140874e42
Merge pull request #958 from smallstep/rsa-signature-algorithm
...
Sign certificates with the issuer signature algorithm
2 years ago
Mariano Cano
7ecb8c32aa
Update CHANGELOG.md
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2 years ago
Mariano Cano
dab2f7918d
Merge pull request #960 from smallstep/uri-1.19
...
Split Go 1.19 problematic with build tags
2 years ago
Mariano Cano
68a89fbb02
Split Go 1.19 problematic with build tags
2 years ago
Mariano Cano
ed778b7fc1
Merge pull request #956 from shuLhan/kms-uri-test-go119
...
kms/uri: fix test on Parse for the next Go release
2 years ago
Shulhan
0e7257a236
kms/uri: fix test on Parse for the next Go release
...
The next Go release add field OmitHost to url.URL [1] which cause the
TestParse fail.
Since the CI supports two consecutive Go versions at the same times, we
copy the uri_test.go to uri_119_test.go for testing with Go 1.19.
While at it, print the got and want object using the same format
(%#v) and type (*URL) for consistency.
[1] https://go-review.googlesource.com/c/go/+/391294
2 years ago
Mariano Cano
31af1efa48
Sign certificates with the issuer signature algorithm
...
An RSA key can sign another certificates using the RSA PKCS#1
and the RSA-PSS scheme, this change will keep the signature
algorithm used in the issuer in the signed certificates instead
of using PKCS#1 by default.
2 years ago
Mariano Cano
34f926804d
Merge pull request #954 from shuLhan/shulhan-gofmt
...
all: reformat all go files with the next gofmt (Go 1.19)
2 years ago
Mariano Cano
0b748f2d03
Merge pull request #955 from shuLhan/cas-cloudcas-test-go119
...
cas/cloudcas: update test on createPublicKey for the next Go release
2 years ago
Shulhan
ee53530d1f
cas/cloudcas: update test on createPublicKey for the next Go release
...
The next Go release call panic on elliptic.Marshal [1][2], which
affect the test case fail_ec_marshal on createPublicKey.
This changes fix this by initializing the P and B in test case
PublicKey CurveParams to prevent panic.
[1] https://github.com/golang/go/issues/50975
[2] a218b3520a
2 years ago
Shulhan
fe04f93d7f
all: reformat all go files with the next gofmt (Go 1.19)
...
There are some changes that manually edited, for example using '-' as
default list and grouping imports.
2 years ago
Mariano Cano
304cc5a70f
Merge pull request #950 from gdbelvin/pinsrc
...
step-pkcs11-init pin-file support
2 years ago
Gary Belvin
fed09047f9
pinfile
2 years ago
Max
34d141e4d5
Merge pull request #945 from smallstep/changelog-update
...
Update changelog
2 years ago
max furman
5e56a7b4ec
Changelog update for 0.20.0
...
- added line for new WithOptions on authority Init
2 years ago
Herman Slatman
b4b9893fcd
Update changelog
2 years ago
Mariano Cano
6d580a69e8
Update changelog
2 years ago
Mariano Cano
de00e01f1b
Merge pull request #947 from smallstep/fix-ssh-revocation
...
Fix SSH certificate revocation
2 years ago
Mariano Cano
2adf8caac7
Fix Dependabot warning on an indirect dependency
2 years ago
Mariano Cano
9c049eec5a
Add revoke ssh unit test
2 years ago
Mariano Cano
ce9a23a0f7
Fix SSH certificate revocation
2 years ago
Herman Slatman
abfbbc8d49
Merge pull request #946 from smallstep/herman/acme-csr-padding
...
Strip base64-url padding from ACME CSR
2 years ago
Herman Slatman
fd546287ac
Strip base64-url padding from ACME CSR
...
This commit strips the padding from a base64-url encoded CSR
submitted by a client that doesn't use raw base64-url encoding.
2 years ago
Herman Slatman
a564b4f32e
Merge pull request #944 from smallstep/herman/tls-wasm-client
...
Set nil dial context for js/wasm runtime
2 years ago
Herman Slatman
a7dd3a986f
Set nil dial context for js/wasm runtime
2 years ago
Mariano Cano
911cec21da
Merge pull request #943 from smallstep/ssh-renew-provisioner
...
Add provisioner to SSH renewals
2 years ago
Mariano Cano
94f5b92513
Use proper context in authority package
2 years ago