Commit Graph

2916 Commits (b1e9d5ee86a79deea8e8f3b28f17f005de24d3a6)
 

Author SHA1 Message Date
Mariano Cano b1e9d5ee86 Revert "Run on plaintext HTTP to support Cloud Run"
This reverts commit 09b9673a60.
2 years ago
Mariano Cano 2f7cb9225f Use go.step.sm/crypto to set the permanent identifier 2 years ago
Mariano Cano 21427d5d65 Replace instead of prepend provisioner extension
With non standard SANs this will generate the SAN and provisioner
extension in the same order.
2 years ago
Mariano Cano 2ab1e6658e Fix nonce validation
The attestation certificate contains the nonce as raw bytes in the
extension 1.2.840.113635.100.8.11.1
2 years ago
Mariano Cano e02a190fa7 Merge branch 'master' into device-attestation 2 years ago
Max 3e2729e391
Merge pull request #989 from smallstep/max/disable-ssh-hosts
Add attribute to disable SSH Hosts list API
2 years ago
Mariano Cano 9f67a808cd
Merge pull request #1004 from smallstep/go-1.19
Change actions to build using Go 1.19
2 years ago
Mariano Cano f1aabaa99c Use functions from os instead of io/ioutil 2 years ago
Mariano Cano 8445c29db6 Change actions to build using Go 1.19
Fixes #998
2 years ago
max furman 99c9155467 disableSSHHostsListAPI -> disableGetSSHHosts 2 years ago
Mariano Cano 38fb92452f
Merge pull request #993 from smallstep/ra-ids
RA provisioner IDs
2 years ago
Mariano Cano 22337da18c
Merge pull request #990 from qbit/master
Update deps to bring in support for OpenBSD
2 years ago
Mariano Cano 821743f71e Upgrade newrelic to v3 2 years ago
Aaron Bieber 135c481893 Update deps to bring in support for OpenBSD
OpenBSD support was added to the following deps:
 - github.com/go-piv/piv-go in https://github.com/go-piv/piv-go/pull/101
 - github.com/newrelic/go-agent in https://github.com/newrelic/go-agent/pull/455
 - github.com/miekg/pkcs11 in https://github.com/miekg/pkcs11/pull/140

With these deps bumped, tests all pass on OpenBSD amd64.
2 years ago
Mariano Cano a2f7766943 Use released version of linkedca 2 years ago
Mariano Cano c5c7c30cc2 Fix typo in ProvisionerInfo 2 years ago
Mariano Cano 64744562c6 Send RA provisioner to linkedca. 2 years ago
Mariano Cano 6b5d3dca95 Add provisioner name to RA info 2 years ago
Mariano Cano 9648fe6b4c Remove debug statement 2 years ago
Mariano Cano a1f54921d2 Rename internal field 2 years ago
Mariano Cano f9df8ac05f Remove unused interface 2 years ago
Mariano Cano 7a1e6a0e1f Fix and extend stepcas unit tests 2 years ago
Mariano Cano 9408d0f24b Send RA provisioner information to the CA 2 years ago
Mariano Cano a8819376d3 Remove empty lines on debug information
At the start of step-ca some information about the CA is displayed,
this change remove extra lines when displaying the ssh public keys.
2 years ago
Max 87f28a7ec9
Create codeql-analysis.yml 2 years ago
Max 0efaf514d7
Create SECURITY.md 2 years ago
max furman fb7f57a8df Add attribute to disable SSH Hosts list API 2 years ago
max furman 01423e36c9 [action] combine label and triage project add in one workflow 2 years ago
Mariano Cano 66356cff43 Add attestation certificate validation for Apple devices 2 years ago
max furman 9b9c5551f6 Add changelog template 2 years ago
Carl Tashian 1d10491f7a Update README.md 2 years ago
max furman ffe7c00a10 Add changelog template 2 years ago
Carl Tashian 6814b7f5dd
Update README.md 2 years ago
Brandon Weeks 274f6ccb41 iOS 16 beta 2 support 2 years ago
Brandon Weeks 7e1b0bebd9 iOS 16 beta 1 support 2 years ago
Brandon Weeks 77c6d10fd6 Verify key authorization is contained within the TPM quote extraData field 2 years ago
Brandon Weeks e1ec31c0ed Implement TPM attestation statement verification 2 years ago
Brandon Weeks 2ac8b69da2 Add ACME permanent-identifier identifier type 2 years ago
Brandon Weeks aacd6f4cc6 Add device-attest-01 challenge type 2 years ago
Brandon Weeks 09b9673a60 Run on plaintext HTTP to support Cloud Run 2 years ago
Brandon Weeks 860baeb1c5 Verbose debug logging 2 years ago
Mariano Cano f140874e42
Merge pull request #958 from smallstep/rsa-signature-algorithm
Sign certificates with the issuer signature algorithm
2 years ago
Mariano Cano 7ecb8c32aa
Update CHANGELOG.md
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2 years ago
Mariano Cano dab2f7918d
Merge pull request #960 from smallstep/uri-1.19
Split Go 1.19 problematic with build tags
2 years ago
Mariano Cano 68a89fbb02 Split Go 1.19 problematic with build tags 2 years ago
Mariano Cano ed778b7fc1
Merge pull request #956 from shuLhan/kms-uri-test-go119
kms/uri: fix test on Parse for the next Go release
2 years ago
Shulhan 0e7257a236
kms/uri: fix test on Parse for the next Go release
The next Go release add field OmitHost to url.URL [1] which cause the
TestParse fail.
Since the CI supports two consecutive Go versions at the same times, we
copy the uri_test.go to uri_119_test.go for testing with Go 1.19.

While at it, print the got and want object using the same format
(%#v) and type (*URL) for consistency.

[1] https://go-review.googlesource.com/c/go/+/391294
2 years ago
Mariano Cano 31af1efa48 Sign certificates with the issuer signature algorithm
An RSA key can sign another certificates using the RSA PKCS#1
and the RSA-PSS scheme, this change will keep the signature
algorithm used in the issuer in the signed certificates instead
of using PKCS#1 by default.
2 years ago
Mariano Cano 34f926804d
Merge pull request #954 from shuLhan/shulhan-gofmt
all: reformat all go files with the next gofmt (Go 1.19)
2 years ago
Mariano Cano 0b748f2d03
Merge pull request #955 from shuLhan/cas-cloudcas-test-go119
cas/cloudcas: update test on createPublicKey for the next Go release
2 years ago