Herman Slatman
f1a2c68f43
Merge pull request #1798 from smallstep/herman/fix-instrumented-key-manager
...
Add support for `kmsapi.Decrypter` to instrumented key manager
2024-04-15 15:32:56 +02:00
Mariano Cano
7df3ad05ed
Merge pull request #1797 from smallstep/mariano/init-scep
...
Allow custom SCEP key manager
2024-04-10 12:47:20 -07:00
Mariano Cano
4202d6673c
Remove debug statement
2024-04-10 09:32:58 -07:00
Herman Slatman
d6bbe5b06b
Add support for kmsapi.Decrypter
to instrumented key manager
2024-04-10 16:38:31 +02:00
Herman Slatman
721345eea6
Merge pull request #1793 from verytrap/master
...
chore: fix function names in comment
2024-04-10 11:29:30 +02:00
verytrap
db92404342
chore: fix function names in comment
...
Signed-off-by: verytrap <wangqiuyue@outlook.com>
2024-04-10 10:35:39 +08:00
Mariano Cano
725a913f66
Allow custom SCEP key manager
...
This commit allows to inject a custom key manger for SCEP.
2024-04-09 18:44:29 -07:00
Herman Slatman
397877a7b6
Merge pull request #1795 from smallstep/herman/fix-scep-failinfo-oid
...
Prevent exposing any internal details in SCEP failure message
2024-04-10 02:11:21 +02:00
Herman Slatman
b226b6eb4c
Prevent exposing any internal details in SCEP failure message
...
To be on the safe side, block errors from signing operations from
being returned to the client. We should revisit, and make it return
a more informative error, but with high assurance that no sensitive
information is added to the message.
2024-04-10 01:59:56 +02:00
Herman Slatman
02956ad0e3
Merge pull request #1794 from smallstep/herman/fix-scep-failinfo-oid
...
Fix the `id-scep-failInfoText` OID
2024-04-10 01:53:08 +02:00
Herman Slatman
037554e774
Fix the id-scep-failInfoText
OID
2024-04-10 01:19:17 +02:00
github-actions[bot]
1513152cb2
Merge pull request #1791 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.32.0
...
Bump github.com/newrelic/go-agent/v3 from 3.31.0 to 3.32.0
2024-04-09 11:02:14 +02:00
dependabot[bot]
c9ba31ae61
Bump github.com/newrelic/go-agent/v3 from 3.31.0 to 3.32.0
...
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent ) from 3.31.0 to 3.32.0.
- [Release notes](https://github.com/newrelic/go-agent/releases )
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md )
- [Commits](https://github.com/newrelic/go-agent/compare/v3.31.0...v3.32.0 )
---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-09 08:36:30 +00:00
github-actions[bot]
1f69ff84a1
Merge pull request #1792 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.63.2
...
Bump google.golang.org/grpc from 1.62.1 to 1.63.2
2024-04-09 10:34:06 +02:00
dependabot[bot]
a76f07143b
Bump google.golang.org/grpc from 1.62.1 to 1.63.2
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.62.1 to 1.63.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.63.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-09 08:25:37 +00:00
github-actions[bot]
08ef9fe245
Merge pull request #1789 from smallstep/dependabot/go_modules/golang.org/x/net-0.24.0
...
Bump golang.org/x/net from 0.22.0 to 0.24.0
2024-04-09 10:21:29 +02:00
dependabot[bot]
57d628513b
Bump golang.org/x/net from 0.22.0 to 0.24.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.22.0 to 0.24.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.24.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 15:25:52 +00:00
github-actions[bot]
d5758ba3a3
Merge pull request #1784 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.31.0
...
Bump github.com/newrelic/go-agent/v3 from 3.30.0 to 3.31.0
2024-04-02 09:56:39 +02:00
github-actions[bot]
166c4968cf
Merge pull request #1785 from smallstep/dependabot/go_modules/google.golang.org/api-0.172.0
...
Bump google.golang.org/api from 0.171.0 to 0.172.0
2024-04-02 09:55:41 +02:00
Carl Tashian
1be0932a0f
Merge pull request #1786 from smallstep/carl/winget-fix
...
Fix winget release notes URL
2024-04-01 12:27:03 -07:00
Carl Tashian
f04a5e39c4
Fix winget release URL
2024-04-01 09:55:01 -07:00
dependabot[bot]
d1523c93bc
Bump google.golang.org/api from 0.171.0 to 0.172.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.171.0 to 0.172.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.171.0...v0.172.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 15:36:38 +00:00
dependabot[bot]
44c48a7494
Bump github.com/newrelic/go-agent/v3 from 3.30.0 to 3.31.0
...
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent ) from 3.30.0 to 3.31.0.
- [Release notes](https://github.com/newrelic/go-agent/releases )
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md )
- [Commits](https://github.com/newrelic/go-agent/compare/v3.30.0...v3.31.0 )
---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 15:36:19 +00:00
Carl Tashian
188e4e3ff3
Add version number to winget branch name ( #1783 )
2024-03-29 11:12:38 -07:00
Max
395a3eeb93
Update go.step.sm/crypto ( #1781 )
2024-03-28 18:26:44 -07:00
Herman Slatman
4772d7cc28
Merge pull request #1780 from smallstep/herman/update-changelog-20240328
...
Update changelog for `v0.26.0` release
2024-03-28 17:57:12 +01:00
Herman Slatman
854288a0cb
Update changelog for v0.26.0
release
2024-03-28 11:12:37 +01:00
github-actions[bot]
4016b69b28
Merge pull request #1776 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.12.2
...
Bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2
2024-03-25 19:23:03 +01:00
github-actions[bot]
b5b723e835
Merge pull request #1775 from smallstep/dependabot/go_modules/google.golang.org/api-0.171.0
...
Bump google.golang.org/api from 0.169.0 to 0.171.0
2024-03-25 18:31:41 +01:00
github-actions[bot]
0a6e79a745
Merge pull request #1778 from smallstep/dependabot/github_actions/dependabot/fetch-metadata-2.0.0
...
Bump dependabot/fetch-metadata from 1.6.0 to 2.0.0
2024-03-25 18:30:53 +01:00
dependabot[bot]
9d86361ae3
Bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.12.1...v1.12.2 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 17:30:13 +00:00
github-actions[bot]
7e053437b1
Merge pull request #1774 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.44.1
...
Bump go.step.sm/crypto from 0.43.1 to 0.44.1
2024-03-25 18:27:40 +01:00
dependabot[bot]
014b4ef2c0
Bump dependabot/fetch-metadata from 1.6.0 to 2.0.0
...
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata ) from 1.6.0 to 2.0.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases )
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.6.0...v2.0.0 )
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 15:54:53 +00:00
dependabot[bot]
21734f7742
Bump google.golang.org/api from 0.169.0 to 0.171.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.169.0 to 0.171.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.169.0...v0.171.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 15:40:11 +00:00
dependabot[bot]
927cd97bd5
Bump go.step.sm/crypto from 0.43.1 to 0.44.1
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.43.1 to 0.44.1.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.43.1...v0.44.1 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 15:39:52 +00:00
Herman Slatman
2650944d65
Merge pull request #1773 from smallstep/herman/cosign-2.x
...
Use `--yes` to acknowledge user prompts for `cosign` signing
2024-03-20 21:42:39 +01:00
Herman Slatman
7888d868ba
Use --yes
to acknowledge user prompts for cosign
signing
2024-03-20 21:33:09 +01:00
Joe Doss
56c4f3bdd5
Merge pull request #1772 from smallstep/jdoss/Enable_tpmkms
...
Enable tpmkms
2024-03-20 14:18:59 -05:00
Joe Doss
14c9de2570
Enable tpmkms.
2024-03-20 13:17:14 -05:00
github-actions[bot]
44f44e34e4
Merge pull request #1767 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.5.6
...
Bump cloud.google.com/go/longrunning from 0.5.5 to 0.5.6
2024-03-19 10:11:18 +01:00
github-actions[bot]
73c827c7fa
Merge pull request #1768 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.12.1
...
Bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.1
2024-03-19 10:10:25 +01:00
dependabot[bot]
9874214669
Bump cloud.google.com/go/longrunning from 0.5.5 to 0.5.6
...
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go ) from 0.5.5 to 0.5.6.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/longrunning/v0.5.5...longrunning/v0.5.6 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 17:18:55 +00:00
github-actions[bot]
c5a13d86ba
Merge pull request #1766 from smallstep/dependabot/go_modules/golang.org/x/net-0.22.0
...
Bump golang.org/x/net from 0.21.0 to 0.22.0
2024-03-18 18:17:50 +01:00
github-actions[bot]
70085fcfeb
Merge pull request #1769 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.6
...
Bump cloud.google.com/go/security from 1.15.5 to 1.15.6
2024-03-18 18:15:55 +01:00
dependabot[bot]
1a768ad522
Bump cloud.google.com/go/security from 1.15.5 to 1.15.6
...
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go ) from 1.15.5 to 1.15.6.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.5...kms/v1.15.6 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 15:40:55 +00:00
dependabot[bot]
4dfade10b8
Bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.1
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.12.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 15:40:17 +00:00
dependabot[bot]
9a75f93250
Bump golang.org/x/net from 0.21.0 to 0.22.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.21.0 to 0.22.0.
- [Commits](https://github.com/golang/net/compare/v0.21.0...v0.22.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 15:38:53 +00:00
Mariano Cano
fe364d5081
Merge pull request #1764 from smallstep/mariano/ra-lifetime
...
Let the CA determine the RA lifetime
2024-03-12 15:07:24 -07:00
Mariano Cano
0ac9023590
Fix typo in error message and comment
2024-03-12 14:58:36 -07:00
Mariano Cano
10f6a901ec
Let the CA determine the RA lifetime
...
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.
This commit also fixes linter warnings.
Related to #1094
2024-03-12 14:29:55 -07:00