smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
max furman	116869ebc5	[acme db interface] wip	3 years ago
max furman	80a6640103	[acme db interface] wip	3 years ago
max furman	1135ae04fc	[acme db interface] wip	3 years ago
max furman	2ae43ef2dc	[acme db interface] wip errors	3 years ago
Mariano Cano	c94a1c51be	Merge branch 'master' into ssh-cert-templates	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
max furman	55bf5a4526	Add cert logging for acme/certificate api	4 years ago
David Cowden	a26b5f322d	acme/api: Brush up documentation on key-change Add more specific wording describing what a 501 means and add more color explaining how official vs unofficial error types should be handled.	4 years ago
David Cowden	b26e6e42b3	acme: Return 501 for the key-change route RFC 8555 § 7.3.5 is not listed as optional but we do not currently support it. Rather than 404, return a 501 to inform clients that this functionality is not yet implemented. The notImplmented error type is not an official error registered in the ietf:params:acme:error namespace, so prefix if with step:acme:error. An ACME server is allowed to return other errors and clients should display the message detail to users. Fixes: https://github.com/smallstep/certificates/issues/209	4 years ago
max furman	6e69f99310	Always set nbf and naf for new ACME orders ... - Use the default value from the ACME provisioner if values are not defined in the request.	4 years ago
max furman	e1409349f3	Allow relative URL for all links in ACME api ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	4 years ago
Clive Jevons	639993bd09	Read host and protocol information from request for links When constructing links we want to read the required host and protocol information in a dynamic manner from the request for constructing ACME links such as the directory information. This way, if the server is running behind a proxy, and we don't know what the exposed URL should be at runtime, we can construct the required information from the host, tls and X-Forwarded-Proto fields in the HTTP request. Inspired by the LetsEncrypt Boulder project (web/relative.go).	4 years ago
max furman	4cb777bdc1	ACME accountUpdate ignore fields not recognized by the server.	4 years ago
max furman	c255274572	Should be returning status code 400 for ACME Account Not Found. Issue #173	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
max furman	7aec7c2612	Create ACME database tables when initializing ACME autority.	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago

1 2 3 4

168 Commits (b20af51f322cb67e9b3d9cc09cc48f0f34524c1f)