Mariano Cano
ab44fbfb3f
Merge pull request #774 from smallstep/cm-roots
...
Avoid doing unauthenticated requests on the SDK
3 years ago
Mariano Cano
2c63abcf52
fix grammar
3 years ago
Mariano Cano
7c4e6dcc96
Remove duplicated code in bootstrap methods
3 years ago
Mariano Cano
64c19d4264
Fix subject in test, use ip
3 years ago
Mariano Cano
b0b2e77b0e
Avoid doing unauthenticated requests on the SDK
...
When step-ca runs with mTLS required on some endpoints, the SDK
used in autocert will fail to start because the identity certificate
is missing. This certificate is only required to retrieve all roots,
in most cases there's only one, and the SDK has access to it.
3 years ago
Herman Slatman
fbd3fd2145
Merge pull request #625 from hslatman/hs/acme-revocation
...
ACME Certificate Revocation
3 years ago
Herman Slatman
00539d07c9
Add changelog entry for ACME revocation
3 years ago
Herman Slatman
3bc3957b06
Merge branch 'master' into hs/acme-revocation
3 years ago
Herman Slatman
0524122191
Remove authorization flow for different Account private keys
...
As discussed in https://github.com/smallstep/certificates/issues/767 ,
we opted for not including this authorization flow to prevent users
from getting OOMs. We can add the functionality back when the
underlying data store can provide access to a long list of
Authorizations more efficiently, for example when a callback is
implemented.
3 years ago
Carl Tashian
53ebd85327
Update star gif size
3 years ago
Carl Tashian
c0255b7caa
Update star gif
3 years ago
Carl Tashian
accb0710a1
Star gif
3 years ago
Mariano Cano
94afec7e1f
Merge pull request #758 from smallstep/errors-forbidden
...
Forbidden errors and more
3 years ago
Mariano Cano
e0fee84694
Add comment about public key validator.
3 years ago
Mariano Cano
0cebde3db5
Change fallback message on RekeySSH.
3 years ago
Herman Slatman
004fc054d5
Fix PR comments
3 years ago
Mariano Cano
9fd147f3da
Change error message.
3 years ago
Herman Slatman
47a8a3c463
Add test case for ACME Revoke to Authority
3 years ago
Herman Slatman
06bb97c91e
Add logic for Account authorizations and improve tests
3 years ago
Herman Slatman
bae1d256ee
Improve tests for JWK vs. KID revoke auth flow
...
The logic for both test cases is fairly similar, but with some
small differences. Made those clearer by means of some comments.
Also added some comments to the middleware logic that decided
whether to extract JWK or lookup by KID.
3 years ago
Herman Slatman
a7fbbc4748
Add tests for GetCertificateBySerial
3 years ago
Herman Slatman
4d01cf8135
Increase test code coverage
3 years ago
Herman Slatman
2d357da99b
Add tests for ACME revocation
3 years ago
Herman Slatman
ed295ca15d
Fix linting issue
3 years ago
Herman Slatman
c9cd876a7d
Merge branch 'master' into hs/acme-revocation
3 years ago
Mariano Cano
78acf35bf4
Merge pull request #753 from scattered-network/docker-compose-go-mod-updates
...
Docker Example Fix: Remove Step Build
3 years ago
Mariano Cano
d35848f7a9
Fix unit tests.
3 years ago
Mariano Cano
c3f98fd04d
Change some bad requests to forbidded.
...
Change in the sign options bad requests to forbidded if is the
provisioner the one adding a restriction, e.g. list of dns names,
validity, ...
3 years ago
JJ
cbb0f40696
Revert "Update Go Modules: Fixes Docker Example"
...
This reverts commit 11a1297bf5
.
3 years ago
JJ
3c5d1c9d3f
Use smallstep/small-cli as base image, remove step cli build
3 years ago
Mariano Cano
ff04873a2a
Change the default error type to forbidden in Sign.
...
The errors will also be propagated from sign options.
3 years ago
Mariano Cano
b9beab071d
Fix unit tests.
3 years ago
Mariano Cano
507a272b4d
Return always http errors in sign options.
3 years ago
Carl Tashian
d83ca96d2a
Fixes #757
3 years ago
Mariano Cano
a33709ce8d
Fix sign ssh options tests.
3 years ago
Mariano Cano
1da7ea6646
Return always http errors in sign ssh options.
3 years ago
Mariano Cano
031d4d7000
Return BadRequest when validating sign options.
3 years ago
Carl Tashian
a067b3acad
Add a note about reload-or-try-restart in systemd
3 years ago
Mariano Cano
bb26799583
Modify errs.Wrap with forbidden errors.
3 years ago
Mariano Cano
b5db3f5706
Modify errs.ForbiddenErr to always return an error to the cli.
3 years ago
Mariano Cano
4f84cef0cf
Merge pull request #752 from smallstep/errors-bad-request
...
Bad request errors
3 years ago
Carl Tashian
d925bc6ba9
Fix systemd renewer to use sh
3 years ago
JJ
11a1297bf5
Update Go Modules: Fixes Docker Example
...
go.mod: update requirements to fix build errors in docker example
go.sum: hashes updated to match updated requirements
3 years ago
Herman Slatman
2d50c96d99
Merge branch 'master' into hs/acme-revocation
3 years ago
Mariano Cano
aa3fdf8fb9
Do not overwrite errors.
3 years ago
Mariano Cano
b6ebd118fc
Update temporal solution for sending message to users
3 years ago
Mariano Cano
668d3ea6c7
Modify errs.Wrap() with bad request to send messages to users.
3 years ago
Mariano Cano
8c8db0d4b7
Modify errs.BadRequestErr() to always return an error to the client.
3 years ago
Mariano Cano
8ce807a6cb
Modify errs.BadRequest() calls to always send an error to the client.
3 years ago
max furman
8d229b9a60
update commented template names to match reality
3 years ago