1059 Commits

Author	SHA1	Message	Date
Herman Slatman	cebb7d7ef0	Add automatic migration of provisioners ... Provisioners stored in the CA configuration file are automatically migrated to the database. Currently no cleanup of the provisioners in the configuration file yet. In certain situations this may not work as expected, for example if the CA can't write to the file. But it's probalby good to try it, so that we can keep the configuration state of the CA consistent.	2022-10-06 17:14:02 +02:00
Andrew Reed	2c5e41b093	Fix webhook controller ignoring cert type	2022-09-30 17:25:02 -05:00
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2022-09-29 19:16:26 -05:00
Mariano Cano	906c5067b9	Include attestation roots on provisioner converters	2022-09-29 16:12:55 -07:00
Mariano Cano	2b19ba41fb	Merge branch 'master' into name-constraints	2022-09-23 11:07:57 -07:00
Mariano Cano	c9e7af3722	Use only name constraints in GetTLSCertificate	2022-09-23 11:04:27 -07:00
Mariano Cano	0bedd22850	Fix typos in WithX509IntermediateCerts comment	2022-09-23 10:55:20 -07:00
Mariano Cano	8374c0d26e	Fix some more extra white spaces	2022-09-23 10:52:24 -07:00
Mariano Cano	965d59c0a8	Fix comment typos and extra white spaces	2022-09-23 10:50:44 -07:00
Mariano Cano	2eba5326db	Remove policy validation on renew	2022-09-22 12:17:16 -07:00
Mariano Cano	ccd93684c3	Remove unused variable	2022-09-22 11:54:21 -07:00
Mariano Cano	246566a195	Change way to get hasNameConstraints	2022-09-22 11:35:11 -07:00
Mariano Cano	b94c0d09be	Set up test properly	2022-09-22 11:07:28 -07:00
Mariano Cano	0214e015a0	Clarify comments by code review	2022-09-22 11:07:22 -07:00
Mariano Cano	23045e1812	Clarify comments by code review	2022-09-22 11:05:06 -07:00
max furman	4c7a2ce3eb	Fix errors.As linter warnings	2022-09-22 00:04:31 -07:00
Mariano Cano	15dc7901e5	Fix unit tests	2022-09-21 18:46:46 -07:00
Mariano Cano	d68c765e20	Add context to errors	2022-09-21 18:46:34 -07:00
Mariano Cano	72e2c4eb2e	Render proper policy and constrains errors	2022-09-21 18:35:18 -07:00
Mariano Cano	4b79405dac	Check constraints and policy for leaf certificates too	2022-09-21 15:54:28 -07:00
Mariano Cano	a6e85cbbf6	Fix linter errors	2022-09-21 14:56:15 -07:00
Mariano Cano	325d8bca4f	Merge branch 'master' into name-constraints	2022-09-21 13:29:44 -07:00
max furman	2d4efc8292	Fix linter warnings	2022-09-21 12:29:20 -07:00
max furman	75bb196193	Add concurrency workflow config | fix broken test due to golang ver	2022-09-21 12:26:45 -07:00
max furman	120629edab	Do not use the templateError in the BadRequestErr	2022-09-20 23:07:16 -07:00
max furman	7c5e5b2b87	Even more linter fixes	2022-09-20 21:48:04 -07:00
max furman	f3d1863ec6	A few more linter errors	2022-09-20 21:01:55 -07:00
max furman	1e0ea6f958	more linting fixes	2022-09-20 19:05:12 -07:00
max furman	33458c88aa	Standardize linting file and fix or ignore lots of linting errors	2022-09-20 19:05:12 -07:00
Mariano Cano	f0a24bd8ca	Add acme property to enable challenges ... Fixes #1027	2022-09-20 19:01:53 -07:00
Mariano Cano	567d96c771	Revert "Run on plaintext HTTP to support Cloud Run" ... This reverts commit 09b9673a60.	2022-09-20 18:57:46 -07:00
Mariano Cano	191d9e8629	Use go.step.sm/crypto to set the permanent identifier	2022-09-20 18:57:43 -07:00
Mariano Cano	debe565e42	Validate constraints on Sign and Renew/Rekey ... Fixes #1060	2022-09-20 18:52:47 -07:00
Mariano Cano	89b6aa924a	Normalize IPs in matchIPConstraint	2022-09-20 18:44:15 -07:00
Brandon Weeks	f3d2bd7a19	Run on plaintext HTTP to support Cloud Run	2022-09-20 16:43:30 -07:00
Herman Slatman	25cbe02b9e	Add provisioner template validation ... Fixes #1012	2022-09-20 16:40:25 -07:00
Max	2de7d3fcf0	Update authority/provisioner/claims.go ... Co-authored-by: Mariano Cano <mariano@smallstep.com>	2022-09-20 16:35:43 -07:00
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2022-09-20 16:35:41 -07:00
Mariano Cano	3f58f30b21	Name tests properly	2022-09-20 15:53:08 -07:00
Mariano Cano	75bff055fc	Add StatusCoder to ConstraintError	2022-09-20 14:45:47 -07:00
Mariano Cano	2959aa676d	Add helper ValidateCertificate	2022-09-20 13:12:34 -07:00
Mariano Cano	8b54e25f64	Allow nil engines	2022-09-20 12:33:03 -07:00
Mariano Cano	2a15e3eee1	Rename constraint.Service to constraint.Engine	2022-09-20 11:38:32 -07:00
Mariano Cano	45e594f98c	Make the constraint service public	2022-09-20 11:36:45 -07:00
Mariano Cano	7bea2f4d0e	Add more constraint unit tests	2022-09-20 11:33:36 -07:00
Mariano Cano	495494ce8f	Return a typed error	2022-09-20 10:36:44 -07:00
Mariano Cano	6686f0437d	Remove x509 prefixes	2022-09-20 10:23:51 -07:00
Mariano Cano	0263468424	Initial work on name constraints validation ... Issue #1060	2022-09-19 19:45:13 -07:00
Mariano Cano	34c6c65671	Pass attestation information to the Sign method ... Attestation information might be useful in authorizing webhooks	2022-09-16 12:37:41 -07:00
Mariano Cano	42102d88d5	Fix merge and add unit tests	2022-09-15 15:50:04 -07:00