879 Commits (d6be9450be48e9e6f2c243141cbffc05141cd78c)

Author	SHA1	Message	Date
Herman Slatman	d6be9450be	Merge branch 'master' into herman/allow-deny	2 years ago
Herman Slatman	30d5d89a13	Improve test coverage for Policy Admin API	2 years ago
Mariano Cano	674dc3c844	Rename unreleased claim to allowRenewalAfterExpiry for consistency.	3 years ago
Herman Slatman	256fe113f7	Improve tests for ACME account policy	3 years ago
Panagiotis Siatras	f2cf9cf828	authority/status: removed the package (#892)	3 years ago
Herman Slatman	0bb15e16f9	Fix missing ACME provisioner option	3 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	3 years ago
Mariano Cano	b7e11da480	Merge branch 'master' into feat/linkedra	3 years ago
Herman Slatman	034b7943fe	Merge branch 'master' into herman/allow-deny	3 years ago
Herman Slatman	7df52dbb76	Add ACME EAB policy	3 years ago
Carl Tashian	150eee70df	Updates based on Herman's feedback	3 years ago
Carl Tashian	4b9f44982d	Merge branch 'master' into startup-info	3 years ago
Carl Tashian	43f2c655b9	More info on startup	3 years ago
Herman Slatman	679e2945f2	Disallow name constraint wildcard notation	3 years ago
Herman Slatman	96f4c49b0c	Improve how policy errors are returned and used	3 years ago
Herman Slatman	d8776d8f7f	Add K8sSA SSH user policy back ... According to the docs, the K8sSA provisioner can be configured to issue SSH user certs.	3 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	3 years ago
Carl Tashian	1ba1584c7a	Formatted.	3 years ago
Carl Tashian	a13e58e340	Update GetAuthorityInfo -> GetInfo	3 years ago
Carl Tashian	90cb6315b1	Progress.	3 years ago
Carl Tashian	055e75f394	Progress?	3 years ago
Herman Slatman	bfa4d809fd	Improve middleware test coverage	3 years ago
Herman Slatman	6da243c34d	Add policy precheck for all admins	3 years ago
Herman Slatman	628d7448de	Don't return policy in provisioner JSON	3 years ago
Herman Slatman	2fbdf7d5b0	Merge branch 'master' into herman/allow-deny	3 years ago
Herman Slatman	0e052fe299	Add authority policy API	3 years ago
Panagiotis Siatras	00634fb648	api/render, api/log: initial implementation of the packages (#860) ... * api/render: initial implementation of the package * acme/api: refactored to support api/render * authority/admin: refactored to support api/render * ca: refactored to support api/render * api: refactored to support api/render * api/render: implemented Error * api: refactored to support api/render.Error * acme/api: refactored to support api/render.Error * authority/admin: refactored to support api/render.Error * ca: refactored to support api/render.Error * ca: fixed broken tests * api/render, api/log: moved error logging to this package * acme: refactored Error so that it implements render.RenderableError * authority/admin: refactored Error so that it implements render.RenderableError * api/render: implemented RenderableError * api/render: added test coverage for Error * api/render: implemented statusCodeFromError * api: refactored RootsPEM to work with render.Error * acme, authority/admin: fixed pointer receiver name for consistency * api/render, errs: moved StatusCoder & StackTracer to the render package	3 years ago
Mariano Cano	955d4cf80d	Add authority.WithX509SignerFunc ... This change adds a new authority option that allows to pass a callback that returns the certificate chain and signer used to sign X.509 certificates. This option will be used by Caddy, they renew the intermediate certificate weekly and there's no other way to replace it without re-creating the embedded CA. Fixes #874	3 years ago
Mariano Cano	6851842841	Fix unit tests.	3 years ago
Mariano Cano	580a9c1476	Get linked RA configuration using the linked ca client.	3 years ago
vijayjt	37207793f9	Pass in the resource name regardless of if its a VM or managed identity	3 years ago
vijayjt	7e47c70af2	Remove redundant parameter type declaration	3 years ago
vijayjt	7b605b2d16	Support Azure tokens from managed identities not associated with a VM	3 years ago
Mariano Cano	5ab79f53be	Fix linter errors	3 years ago
Herman Slatman	b49307f326	Fix ACME order tests with mock ACME CA	3 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	3 years ago
Herman Slatman	613c99f00f	Fix linting issues	3 years ago
Herman Slatman	dc23fd23bf	Merge branch 'master' into herman/allow-deny-next	3 years ago
Herman Slatman	6b620c8e9c	Improve protobuf unmarshaling error handling	3 years ago
Mariano Cano	082734474b	Merge pull request #845 from vijayjt/azure-user-mi-token ... WIP: Support Azure tokens generated by managed identities	3 years ago
Carl Tashian	25cc9a1728	Update authority/authority.go ... Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>	3 years ago
Mariano Cano	9d027c17d0	Send current provisioner on PostCertificate	3 years ago
Mariano Cano	b401376829	Add current provisioner to AuthorizeSign SignOptions. ... The original provisioner cannot be retrieved from a certificate if a linked ra is used.	3 years ago
vijayjt	24a963766e	Pass in the resource name regardless of if its a VM or managed identity	3 years ago
Carl Tashian	baf3c40fef	Print some basic configuration info on startup	3 years ago
Mariano Cano	ad8a813abe	Fix linter errors	3 years ago
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	3 years ago
Panagiotis Siatras	4fb38afc57	authority/admin/api: refactored to use the read package	3 years ago
Herman Slatman	81b0c6c37c	Add API implementation for authority and provisioner policy	3 years ago
Mariano Cano	6d532045dc	Fix validity check for sshpop provisioner.	3 years ago