Commit Graph

2180 Commits (9f8ffcf19625d7952f570af748afbece63481a3f)
 

Author SHA1 Message Date
Mariano Cano 07f7316851 Add bastion to export. 3 years ago
Mariano Cano 0730a165fd Add collection of files and authority template. 3 years ago
Mariano Cano c7f8516142 Add to export all the information in the ca.json 3 years ago
Mariano Cano 887423ee6e Update TLS cipher suites. 3 years ago
Carl Tashian 53d08e1f5c
Remove microbadger.com (the website is gone) 3 years ago
Carl Tashian 8f4c833845
Update README.md 3 years ago
Mariano Cano dc1ec18b52 Create a way to export ca configurations. 3 years ago
Mariano Cano d0c1530f89 Remove replace of linkedca package. 3 years ago
Mariano Cano 3a00b6b396 Properly marshal a certificate when we send it to linkedca. 3 years ago
Mariano Cano 4ad82a2f76 Check linkedca for revocation. 3 years ago
Mariano Cano f7542a5bd9 Move check of ssh revocation from provisioner to the authority. 3 years ago
Carl Tashian cff19691b3
Merge pull request #654 from smallstep/needs-renewal
Fix needs-renewal condition and switch to using ExecCondition
3 years ago
Carl Tashian 09b554f855
Merge pull request #609 from smallstep/discord
update gitter to discord
3 years ago
Carl Tashian 22ef324534 Fix needs-renewal condition and switch to using ExecCondition 3 years ago
Mariano Cano 71f8019243 Store x509 and ssh certificates on linkedca if enabled. 3 years ago
Mariano Cano 17eef81c91 Remove linkerd replace. 3 years ago
Mariano Cano a72eab915b Use linkedca v0.1.0 3 years ago
Mariano Cano 7c0faab73e Remove now unused step-ca login. 3 years ago
Carl Tashian f8c137af4f
Update provisioners.md 3 years ago
Carl Tashian 28acc1b7d2
Merge pull request #653 from smallstep/needs-renewal
systemd cert renewer can now use 'step certificate needs-renewal'
3 years ago
Mariano Cano 8fb5340dc9 Use a token at start time to configure linkedca.
Instead of using `step-ca login` we will use a new token provided
as a flag to configure and start linkedca. Certificates will be kept
in memory and refreshed automatically.
3 years ago
Carl Tashian 0dd6564b1e
README link fixes 3 years ago
Carl Tashian 3e5b90b6fa systemd cert renewer can now use 'step certificate needs-renewal' 3 years ago
max furman bd51b1f85b Updates for new issue page 3 years ago
max furman a3af991261 Update pull request labeler action 3 years ago
max furman b71ff09a08 UI updates for certificates new issue page 3 years ago
Mariano Cano 4aa529605d
Merge pull request #641 from hillu/quote-serial
Log certificate's serial number as stringified decimal number
3 years ago
Mariano Cano 76413b845e
Merge pull request #644 from hslatman/hs/fix-provisioner-name-log
Fix logging provisioner name as string
3 years ago
Herman Slatman 9210a6740b
Fix logging provisioner name as string 3 years ago
Hilko Bengen edb01bc9f2 Log certificate's serial number as stringified decimal number
Using a JSON string fixes a common issue with JSON parsers that
deserialize all numbers to a 64-bit IEEE-754 floats. (Certificate
serial numbers are usually 128 bit values.)

This change is consistent with existing log entries for revocation
requests.

See also: #630, #631
3 years ago
Mariano Cano dd9850ce4c Add working implementation of the linkedca.
Replaces the authority adminDB with a new impmentation that users the
linkedca client to retrieve the data.

Note that this implementation still hardcodes the endpoint to localhost.
3 years ago
Mariano Cano 49c1427d15 Use authorityId instead of authorityID.
In json or javascript world authorityId, userId, ... are more common
than authorityID, ...
3 years ago
Mariano Cano f7e09af9df Implement the login command.
The login commands creates a new certificate for the linked ca.
This certificate will be used to sync data with the linkedca
endpoint.
3 years ago
Max b9743b36e1
Merge pull request #599 from smallstep/max/cert-mgr-crud
certificate manager
3 years ago
max furman 857a50434c Merge branch 'master' into max/cert-mgr-crud 3 years ago
Max 517fab1b54
Merge pull request #602 from hslatman/hs/ip-verification
IP Identifier Validation [RFC8738]
3 years ago
max furman 681226a798 Merge branch 'master' into max/cert-mgr-crud 3 years ago
max furman 1df21b9b6a Addressing comments in PR review
- added a bit of validation to admin create and update
- using protojson where possible in admin api
- fixing a few instances of admin -> acme in errors
3 years ago
Mariano Cano bc14341387 Fix bootstrap command. 3 years ago
max furman 5679c9933d Fixes from PR review 3 years ago
max furman 77fdfc9fa3 Merge branch 'master' into max/cert-mgr-crud 3 years ago
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
Kevin Chen 9d4e6e315a update readme page 3 years ago
Herman Slatman 8e4a4ecc1f
Refactor tests for sans 3 years ago
Herman Slatman 87b72afa25
Fix IP equality check and add more tests 3 years ago
Herman Slatman a6d33b7d06
Add tests for sans() 3 years ago
Herman Slatman 64c15fde7e
Add tests for canonicalize function 3 years ago
Herman Slatman 7843c90c4c
Merge branch 'master' of github.com:smallstep/certificates into hs/ip-verification 3 years ago
max furman 6476eb45a7 Need RELEASE variable defined in make debian 3 years ago
Mariano Cano 856f08b1c5
Merge pull request #605 from smallstep/casv1
Add support for Google CAS v1
3 years ago