Commit Graph

21 Commits (b5961beba9f2004a351e58a646f755c8acf8a166)

Author SHA1 Message Date
Herman Slatman b5961beba9
Fix and/or ignore linting issues 1 year ago
Mariano Cano c7f226bcec
Add support for renew when using stepcas
It supports renewing X.509 certificates when an RA is configured with stepcas.
This will only work when the renewal uses a token, and it won't work with mTLS.

The audience cannot be properly verified when an RA is used, to avoid this we
will get from the database if an RA was used to issue the initial certificate
and we will accept the renew token.

Fixes #1021 for stepcas
2 years ago
max furman 18a648cffa
Fix linter warning about bad error name 2 years ago
Mariano Cano 8bd0174251 Rename field to IsCAServerCert 2 years ago
Mariano Cano 5df1694250 Add endpoint id for the RA certificate
In a linked RA mode, send an endpoint id to group the server
certificates.
2 years ago
Mariano Cano eb091aec54 Simplify field names for ProvisionerInfo 2 years ago
Mariano Cano 6b5d3dca95 Add provisioner name to RA info 2 years ago
Mariano Cano 9648fe6b4c Remove debug statement 2 years ago
Mariano Cano 9408d0f24b Send RA provisioner information to the CA 2 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano de719eb6f0 Add an option to avoid password prompts on step cas
When we are using `step ca init` to create a stepcas RA we don't
have access to the password for verify the provisioner.
3 years ago
Mariano Cano a9297100d8 Allow to configure the JWK using the encrypted key. 3 years ago
Mariano Cano 80542d6d9a Add JWK as an issuer for stepcas. 3 years ago
Mariano Cano 96de4e6ec8 Return a non-implemented error in stepcas.RenewCertificate. 3 years ago
Mariano Cano 348815f4f6 Fix error message. 3 years ago
Mariano Cano e7a6c46e54 Fix linting errors. 3 years ago
Mariano Cano 6fd6270e7d Remove debug statements. 3 years ago
Mariano Cano 7958f6ebb5 Add support for lifetime. 3 years ago
Mariano Cano ae4b8f58b8 Add support for emails, ips and uris. 3 years ago
Mariano Cano bcf70206ac Add support for revocation using an extra provisioner in the RA. 3 years ago
Mariano Cano a6115e29c2 Add initial implementation of StepCAS.
StepCAS allows to configure step-ca as an RA using another step-ca
as the main CA.
3 years ago