Commit Graph

16 Commits (b5961beba9f2004a351e58a646f755c8acf8a166)

Author SHA1 Message Date
Herman Slatman b5961beba9
Fix and/or ignore linting issues 1 year ago
Mariano Cano c7f226bcec
Add support for renew when using stepcas
It supports renewing X.509 certificates when an RA is configured with stepcas.
This will only work when the renewal uses a token, and it won't work with mTLS.

The audience cannot be properly verified when an RA is used, to avoid this we
will get from the database if an RA was used to issue the initial certificate
and we will accept the renew token.

Fixes #1021 for stepcas
2 years ago
Mariano Cano 8bd0174251 Rename field to IsCAServerCert 2 years ago
Mariano Cano 5df1694250 Add endpoint id for the RA certificate
In a linked RA mode, send an endpoint id to group the server
certificates.
2 years ago
Mariano Cano eb091aec54 Simplify field names for ProvisionerInfo 2 years ago
Mariano Cano f1aabaa99c Use functions from os instead of io/ioutil 2 years ago
Mariano Cano 7a1e6a0e1f Fix and extend stepcas unit tests 2 years ago
Herman Slatman e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues 3 years ago
Mariano Cano de719eb6f0 Add an option to avoid password prompts on step cas
When we are using `step ca init` to create a stepcas RA we don't
have access to the password for verify the provisioner.
3 years ago
Mariano Cano a9297100d8 Allow to configure the JWK using the encrypted key. 3 years ago
Mariano Cano edc7c4d90e Add support for password encrypted files 3 years ago
Mariano Cano 80542d6d9a Add JWK as an issuer for stepcas. 3 years ago
Mariano Cano 96de4e6ec8 Return a non-implemented error in stepcas.RenewCertificate. 3 years ago
Mariano Cano 08e75b614e Do not depend on Go 1.16. 3 years ago
Mariano Cano ae4b8f58b8 Add support for emails, ips and uris. 3 years ago
Mariano Cano dbb48ecf8d Add tests for stepcas. 3 years ago