540 Commits (b6c95d7be27fbcf5f0c9a3456f76d695c298e755)

Author	SHA1	Message	Date
Herman Slatman	b6c95d7be2	Add additional properties to SCEP notify webhook request body	9 months ago
Herman Slatman	63257e0576	Add full certificate DER bytes to success notification webhook	9 months ago
Herman Slatman	52bc96760b	Add SCEP certificate issuance notification webhook	9 months ago
Herman Slatman	33e661ce7d	Add a dummy CSR to SCEP request body tests	10 months ago
Herman Slatman	36f1dd70bf	Add CSR to `SCEPCHALLENGE` webhook request body	10 months ago
Herman Slatman	98d015b5c3	Fix linting issues	10 months ago
Herman Slatman	d9f56cdbdc	Merge branch 'master' into herman/scep-provisioner-decrypter	10 months ago
Herman Slatman	9d3b78ae49	Add `excludeIntermediate` to SCEP provisioner	10 months ago
Remi Vichery	82b8e16d7f	Add all AWS identity document certificates ... * move to use embed instead of a multi-line string * add test to ensure all certificates are valid * add test to ensure validity (no expired certificate)	10 months ago
Herman Slatman	645b6ffc18	Ensure no prompt is fired for loading provisioner decrypter	11 months ago
Herman Slatman	e2e9bf5494	Clarify some SCEP properties	11 months ago
Herman Slatman	c0a1837cd9	Verify full decrypter/signer configuration at usage time ... When changing the SCEP configuration it is possible that one or both of the decrypter configurations required are not available or have been provided in a way that's not usable for actual SCEP requests. Instead of failing hard when provisioners are loaded, which could result in the CA not starting properly, this type of problematic configuration errors will now be handled at usage time instead.	11 months ago
Herman Slatman	569a1be12c	Merge branch 'master' into herman/scep-provisioner-decrypter	11 months ago
Mariano Cano	cce7d9e839	Address comments from code review	11 months ago
Mariano Cano	c7c7decd5e	Add support for the disableSmallstepExtensions claim ... This commit adds a new claim to exclude the Smallstep provisioner extension from the generated certificates. Fixes #620	11 months ago
Herman Slatman	1ce80cf740	Merge branch 'master' into herman/scep-provisioner-decrypter	11 months ago
Herman Slatman	567fc25404	Use the RSA decryption configuration for signing responses too	11 months ago
Mariano Cano	7061147885	Use step.Abs to load the certificate templates ... step.Abs has been removed from crypto and they need to be set when those methods are used	11 months ago
Mariano Cano	95887ebf40	Merge pull request #1481 from smallstep/remove-user-regex ... Remove OIDC user regexp check	11 months ago
Josh Drake	ff424fa944	Fix tests.	11 months ago
Josh Drake	904f416d20	Include authorization principal in provisioner webhooks.	11 months ago
Mariano Cano	5bfe96d8c7	Send X5C leaf certificate to webhooks ... This commit adds a new property that will be sent to authorizing and enriching webhooks when signing certificates using the X5C provisioner.	11 months ago
Mariano Cano	7fa97bedec	Remove OIDC user regexp check ... This commit removes the regular expression check on OIDC usernames. Although it is not recommended to use any character in a username, it is possible to create and use them. The tool useradd has the flag --badname and adduser has --allow-badname and --allow-all-names to create new users with any character. Moreover, it is possible to create any username with the rest of provisioners. Fixes #1436	11 months ago
Herman Slatman	6985b4be62	Clean up the SCEP authority and provisioner	1 year ago
Herman Slatman	a1f187e3df	Merge branch 'master' into herman/scep-provisioner-decrypter	1 year ago
Herman Slatman	180162bd6a	Refactor SCEP provisioner and decrypter	1 year ago
Herman Slatman	0377fe559b	Add basic version of provisioner specific SCEP decrypter	1 year ago
Mariano Cano	71fcdf8a0a	Fix linter errors from #1404	1 year ago
Ruslan Nugmanov	1031324273	add AWS public certificates for me-central-1 and ap-southeast-3 ... As per https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/verify-signature.html	1 year ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Herman Slatman	0153ff4377	Remove superfluous `GetChallengePassword`	1 year ago
Herman Slatman	f9ec62f46c	Merge branch 'master' into herman/improve-scep-marshaling	1 year ago
Herman Slatman	c73f157ea4	Remove unused error from challenge validation controller creator	1 year ago
Herman Slatman	e8c1e8719d	Refactor SCEP webhook validation	1 year ago
Herman Slatman	419478d1e5	Make SCEP webhook validation look better	1 year ago
Herman Slatman	dfc56f21b8	Merge branch 'master' into herman/acme-da-tpm	1 year ago
Mariano Cano	ac35f3489c	Remove unused certificate validators and modifiers ... With the introduction of certificate templates some certificate validators and modifiers are not used anymore. This commit deletes the ones that are not used.	1 year ago
Remi Vichery	09cbe8ba65	fixup! Add identity token for all Azure cloud environments	1 year ago
Herman Slatman	6297bace1a	Merge branch 'master' into herman/acme-da-tpm	1 year ago
Remi Vichery	b2c2eec76b	Add identity token for all Azure cloud environments ... * Azure Public Cloud (default) * Azure China Cloud * Azure US Gov Cloud * Azure German Cloud	1 year ago
Herman Slatman	59462e826c	Improve testing errors for OIDC `authorizeToken` function	1 year ago
Herman Slatman	10958a124b	Add email address to error message returned for OIDC validation	1 year ago
Herman Slatman	f1724ea8c5	Merge branch 'master' into herman/acme-da-tpm	1 year ago
Mariano Cano	5d87201abc	Ignore principals validations with OIDC ... This commit will ignore principals validation when an OIDC provisioner is used. When the principals in the server does not match the principals given the validation was failing, even if the proper principals were set by templates or webhooks. With this change OIDC will not validate the principals and just set the default ones (name, name@example.org) plus the ones in the templates. This commit also includes a change in the templates to allow to pass a provisioner to the $(step path)/ssh/config template Related to #807	2 years ago
Herman Slatman	c365d8580e	Move provisioner marshaling logic to api package	2 years ago
Herman Slatman	f2e1c56c6c	Improve SCEP provisioner marshaling	2 years ago
Herman Slatman	85cd9a1277	Fix some ACME DA doc strings (slightly)	2 years ago
Herman Slatman	b9f238ad4d	Add additional ACME `meta` properties to provisioner configuration	2 years ago
Herman Slatman	cbc0864370	Remove TODO and clarify ACME revoke authorization method docs	2 years ago
max furman	7203739369	Fix err assert linter warnings - upgrade outdated package	2 years ago