Commit Graph

2339 Commits (b0b2e77b0e7b8f8a1fc5f1f603382ba8a6318f51)
 

Author SHA1 Message Date
Mariano Cano b0b2e77b0e Avoid doing unauthenticated requests on the SDK
When step-ca runs with mTLS required on some endpoints, the SDK
used in autocert will fail to start because the identity certificate
is missing. This certificate is only required to retrieve all roots,
in most cases there's only one, and the SDK has access to it.
3 years ago
Herman Slatman fbd3fd2145
Merge pull request #625 from hslatman/hs/acme-revocation
ACME Certificate Revocation
3 years ago
Herman Slatman 00539d07c9
Add changelog entry for ACME revocation 3 years ago
Herman Slatman 3bc3957b06
Merge branch 'master' into hs/acme-revocation 3 years ago
Herman Slatman 0524122191
Remove authorization flow for different Account private keys
As discussed in https://github.com/smallstep/certificates/issues/767,
we opted for not including this authorization flow to prevent users
from getting OOMs. We can add the functionality back when the
underlying data store can provide access to a long list of
Authorizations more efficiently, for example when a callback is
implemented.
3 years ago
Carl Tashian 53ebd85327 Update star gif size 3 years ago
Carl Tashian c0255b7caa Update star gif 3 years ago
Carl Tashian accb0710a1 Star gif 3 years ago
Mariano Cano 94afec7e1f
Merge pull request #758 from smallstep/errors-forbidden
Forbidden errors and more
3 years ago
Mariano Cano e0fee84694 Add comment about public key validator. 3 years ago
Mariano Cano 0cebde3db5 Change fallback message on RekeySSH. 3 years ago
Herman Slatman 004fc054d5
Fix PR comments 3 years ago
Mariano Cano 9fd147f3da Change error message. 3 years ago
Herman Slatman 47a8a3c463
Add test case for ACME Revoke to Authority 3 years ago
Herman Slatman 06bb97c91e
Add logic for Account authorizations and improve tests 3 years ago
Herman Slatman bae1d256ee
Improve tests for JWK vs. KID revoke auth flow
The logic for both test cases is fairly similar, but with some
small differences. Made those clearer by means of some comments.
Also added some comments to the middleware logic that decided
whether to extract JWK or lookup by KID.
3 years ago
Herman Slatman a7fbbc4748
Add tests for GetCertificateBySerial 3 years ago
Herman Slatman 4d01cf8135
Increase test code coverage 3 years ago
Herman Slatman 2d357da99b
Add tests for ACME revocation 3 years ago
Herman Slatman ed295ca15d
Fix linting issue 3 years ago
Herman Slatman c9cd876a7d
Merge branch 'master' into hs/acme-revocation 3 years ago
Mariano Cano 78acf35bf4
Merge pull request #753 from scattered-network/docker-compose-go-mod-updates
Docker Example Fix: Remove Step Build
3 years ago
Mariano Cano d35848f7a9 Fix unit tests. 3 years ago
Mariano Cano c3f98fd04d Change some bad requests to forbidded.
Change in the sign options bad requests to forbidded if is the
provisioner the one adding a restriction, e.g. list of dns names,
validity, ...
3 years ago
JJ cbb0f40696 Revert "Update Go Modules: Fixes Docker Example"
This reverts commit 11a1297bf5.
3 years ago
JJ 3c5d1c9d3f Use smallstep/small-cli as base image, remove step cli build 3 years ago
Mariano Cano ff04873a2a Change the default error type to forbidden in Sign.
The errors will also be propagated from sign options.
3 years ago
Mariano Cano b9beab071d Fix unit tests. 3 years ago
Mariano Cano 507a272b4d Return always http errors in sign options. 3 years ago
Carl Tashian d83ca96d2a Fixes #757 3 years ago
Mariano Cano a33709ce8d Fix sign ssh options tests. 3 years ago
Mariano Cano 1da7ea6646 Return always http errors in sign ssh options. 3 years ago
Mariano Cano 031d4d7000 Return BadRequest when validating sign options. 3 years ago
Carl Tashian a067b3acad Add a note about reload-or-try-restart in systemd 3 years ago
Mariano Cano bb26799583 Modify errs.Wrap with forbidden errors. 3 years ago
Mariano Cano b5db3f5706 Modify errs.ForbiddenErr to always return an error to the cli. 3 years ago
Mariano Cano 4f84cef0cf
Merge pull request #752 from smallstep/errors-bad-request
Bad request errors
3 years ago
Carl Tashian d925bc6ba9 Fix systemd renewer to use sh 3 years ago
JJ 11a1297bf5 Update Go Modules: Fixes Docker Example
go.mod: update requirements to fix build errors in docker example
go.sum: hashes updated to match updated requirements
3 years ago
Herman Slatman 2d50c96d99
Merge branch 'master' into hs/acme-revocation 3 years ago
Mariano Cano aa3fdf8fb9 Do not overwrite errors. 3 years ago
Mariano Cano b6ebd118fc Update temporal solution for sending message to users 3 years ago
Mariano Cano 668d3ea6c7 Modify errs.Wrap() with bad request to send messages to users. 3 years ago
Mariano Cano 8c8db0d4b7 Modify errs.BadRequestErr() to always return an error to the client. 3 years ago
Mariano Cano 8ce807a6cb Modify errs.BadRequest() calls to always send an error to the client. 3 years ago
max furman 8d229b9a60 update commented template names to match reality 3 years ago
Mariano Cano 91878051c1
Merge pull request #741 from gdbelvin/ssh
Support CSR Requests from PKCS11
3 years ago
Mariano Cano febb619882 Add some extra validation and print certificate objects
This commit also changes the following flags for consistency:
  - --crt-cert to --crt-cert-obj
  - --crt-key to --crt-key-obj
3 years ago
max furman fca7de6696 changelog update for 0.18.0 3 years ago
Max de2ce5cf9f
Merge pull request #692 from smallstep/max/context
Context management
3 years ago