Commit Graph

4229 Commits

Author SHA1 Message Date
Herman Slatman
f1a2c68f43
Merge pull request #1798 from smallstep/herman/fix-instrumented-key-manager
Add support for `kmsapi.Decrypter` to instrumented key manager
2024-04-15 15:32:56 +02:00
Mariano Cano
7df3ad05ed
Merge pull request #1797 from smallstep/mariano/init-scep
Allow custom SCEP key manager
2024-04-10 12:47:20 -07:00
Mariano Cano
4202d6673c
Remove debug statement 2024-04-10 09:32:58 -07:00
Herman Slatman
d6bbe5b06b
Add support for kmsapi.Decrypter to instrumented key manager 2024-04-10 16:38:31 +02:00
Herman Slatman
721345eea6
Merge pull request #1793 from verytrap/master
chore: fix function names in comment
2024-04-10 11:29:30 +02:00
verytrap
db92404342 chore: fix function names in comment
Signed-off-by: verytrap <wangqiuyue@outlook.com>
2024-04-10 10:35:39 +08:00
Mariano Cano
725a913f66
Allow custom SCEP key manager
This commit allows to inject a custom key manger for SCEP.
2024-04-09 18:44:29 -07:00
Herman Slatman
397877a7b6
Merge pull request #1795 from smallstep/herman/fix-scep-failinfo-oid
Prevent exposing any internal details in SCEP failure message
2024-04-10 02:11:21 +02:00
Herman Slatman
b226b6eb4c
Prevent exposing any internal details in SCEP failure message
To be on the safe side, block errors from signing operations from
being returned to the client. We should revisit, and make it return
a more informative error, but with high assurance that no sensitive
information is added to the message.
2024-04-10 01:59:56 +02:00
Herman Slatman
02956ad0e3
Merge pull request #1794 from smallstep/herman/fix-scep-failinfo-oid
Fix the `id-scep-failInfoText` OID
2024-04-10 01:53:08 +02:00
Herman Slatman
037554e774
Fix the id-scep-failInfoText OID 2024-04-10 01:19:17 +02:00
github-actions[bot]
1513152cb2
Merge pull request #1791 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.32.0
Bump github.com/newrelic/go-agent/v3 from 3.31.0 to 3.32.0
2024-04-09 11:02:14 +02:00
dependabot[bot]
c9ba31ae61
Bump github.com/newrelic/go-agent/v3 from 3.31.0 to 3.32.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.31.0 to 3.32.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.31.0...v3.32.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-09 08:36:30 +00:00
github-actions[bot]
1f69ff84a1
Merge pull request #1792 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.63.2
Bump google.golang.org/grpc from 1.62.1 to 1.63.2
2024-04-09 10:34:06 +02:00
dependabot[bot]
a76f07143b
Bump google.golang.org/grpc from 1.62.1 to 1.63.2
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.63.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-09 08:25:37 +00:00
github-actions[bot]
08ef9fe245
Merge pull request #1789 from smallstep/dependabot/go_modules/golang.org/x/net-0.24.0
Bump golang.org/x/net from 0.22.0 to 0.24.0
2024-04-09 10:21:29 +02:00
dependabot[bot]
57d628513b
Bump golang.org/x/net from 0.22.0 to 0.24.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.24.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.24.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 15:25:52 +00:00
github-actions[bot]
d5758ba3a3
Merge pull request #1784 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.31.0
Bump github.com/newrelic/go-agent/v3 from 3.30.0 to 3.31.0
2024-04-02 09:56:39 +02:00
github-actions[bot]
166c4968cf
Merge pull request #1785 from smallstep/dependabot/go_modules/google.golang.org/api-0.172.0
Bump google.golang.org/api from 0.171.0 to 0.172.0
2024-04-02 09:55:41 +02:00
Carl Tashian
1be0932a0f
Merge pull request #1786 from smallstep/carl/winget-fix
Fix winget release notes URL
2024-04-01 12:27:03 -07:00
Carl Tashian
f04a5e39c4
Fix winget release URL 2024-04-01 09:55:01 -07:00
dependabot[bot]
d1523c93bc
Bump google.golang.org/api from 0.171.0 to 0.172.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.171.0 to 0.172.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.171.0...v0.172.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 15:36:38 +00:00
dependabot[bot]
44c48a7494
Bump github.com/newrelic/go-agent/v3 from 3.30.0 to 3.31.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.30.0 to 3.31.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.30.0...v3.31.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 15:36:19 +00:00
Carl Tashian
188e4e3ff3
Add version number to winget branch name (#1783) 2024-03-29 11:12:38 -07:00
Max
395a3eeb93
Update go.step.sm/crypto (#1781) 2024-03-28 18:26:44 -07:00
Herman Slatman
4772d7cc28
Merge pull request #1780 from smallstep/herman/update-changelog-20240328
Update changelog for `v0.26.0` release
2024-03-28 17:57:12 +01:00
Herman Slatman
854288a0cb
Update changelog for v0.26.0 release 2024-03-28 11:12:37 +01:00
github-actions[bot]
4016b69b28
Merge pull request #1776 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.12.2
Bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2
2024-03-25 19:23:03 +01:00
github-actions[bot]
b5b723e835
Merge pull request #1775 from smallstep/dependabot/go_modules/google.golang.org/api-0.171.0
Bump google.golang.org/api from 0.169.0 to 0.171.0
2024-03-25 18:31:41 +01:00
github-actions[bot]
0a6e79a745
Merge pull request #1778 from smallstep/dependabot/github_actions/dependabot/fetch-metadata-2.0.0
Bump dependabot/fetch-metadata from 1.6.0 to 2.0.0
2024-03-25 18:30:53 +01:00
dependabot[bot]
9d86361ae3
Bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/vault/compare/v1.12.1...v1.12.2)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 17:30:13 +00:00
github-actions[bot]
7e053437b1
Merge pull request #1774 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.44.1
Bump go.step.sm/crypto from 0.43.1 to 0.44.1
2024-03-25 18:27:40 +01:00
dependabot[bot]
014b4ef2c0
Bump dependabot/fetch-metadata from 1.6.0 to 2.0.0
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.6.0 to 2.0.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.6.0...v2.0.0)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 15:54:53 +00:00
dependabot[bot]
21734f7742
Bump google.golang.org/api from 0.169.0 to 0.171.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.169.0 to 0.171.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.169.0...v0.171.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 15:40:11 +00:00
dependabot[bot]
927cd97bd5
Bump go.step.sm/crypto from 0.43.1 to 0.44.1
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.43.1 to 0.44.1.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.43.1...v0.44.1)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-25 15:39:52 +00:00
Herman Slatman
2650944d65
Merge pull request #1773 from smallstep/herman/cosign-2.x
Use `--yes` to acknowledge user prompts for `cosign` signing
2024-03-20 21:42:39 +01:00
Herman Slatman
7888d868ba
Use --yes to acknowledge user prompts for cosign signing 2024-03-20 21:33:09 +01:00
Joe Doss
56c4f3bdd5
Merge pull request #1772 from smallstep/jdoss/Enable_tpmkms
Enable tpmkms
2024-03-20 14:18:59 -05:00
Joe Doss
14c9de2570
Enable tpmkms. 2024-03-20 13:17:14 -05:00
github-actions[bot]
44f44e34e4
Merge pull request #1767 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.5.6
Bump cloud.google.com/go/longrunning from 0.5.5 to 0.5.6
2024-03-19 10:11:18 +01:00
github-actions[bot]
73c827c7fa
Merge pull request #1768 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.12.1
Bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.1
2024-03-19 10:10:25 +01:00
dependabot[bot]
9874214669
Bump cloud.google.com/go/longrunning from 0.5.5 to 0.5.6
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.5.5 to 0.5.6.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/longrunning/v0.5.5...longrunning/v0.5.6)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 17:18:55 +00:00
github-actions[bot]
c5a13d86ba
Merge pull request #1766 from smallstep/dependabot/go_modules/golang.org/x/net-0.22.0
Bump golang.org/x/net from 0.21.0 to 0.22.0
2024-03-18 18:17:50 +01:00
github-actions[bot]
70085fcfeb
Merge pull request #1769 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.6
Bump cloud.google.com/go/security from 1.15.5 to 1.15.6
2024-03-18 18:15:55 +01:00
dependabot[bot]
1a768ad522
Bump cloud.google.com/go/security from 1.15.5 to 1.15.6
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.15.5 to 1.15.6.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.5...kms/v1.15.6)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 15:40:55 +00:00
dependabot[bot]
4dfade10b8
Bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.1
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/vault/compare/v1.12.0...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 15:40:17 +00:00
dependabot[bot]
9a75f93250
Bump golang.org/x/net from 0.21.0 to 0.22.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.21.0 to 0.22.0.
- [Commits](https://github.com/golang/net/compare/v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-03-18 15:38:53 +00:00
Mariano Cano
fe364d5081
Merge pull request #1764 from smallstep/mariano/ra-lifetime
Let the CA determine the RA lifetime
2024-03-12 15:07:24 -07:00
Mariano Cano
0ac9023590
Fix typo in error message and comment 2024-03-12 14:58:36 -07:00
Mariano Cano
10f6a901ec
Let the CA determine the RA lifetime
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.

This commit also fixes linter warnings.

Related to #1094
2024-03-12 14:29:55 -07:00