Commit Graph

61 Commits (f221232a80c8616f565b8a9c6e5920c1cecc0375)

Author SHA1 Message Date
Herman Slatman 1f5f756fce
Make Wire options more robust 9 months ago
Herman Slatman 6ef64b6ed6
Refactor the `Wire` option configuration 9 months ago
Herman Slatman acad227b25
Put Wire options in lower level `wire` struct 9 months ago
Herman Slatman 897688a831
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli 9 months ago
Herman Slatman 70a2f431fa
Address review remarks 9 months ago
Herman Slatman 776a839a42
Fix linter issues and improve error handling 9 months ago
Herman Slatman 40668ae09e
Refactor `WireID` target processing a bit 9 months ago
Herman Slatman fdea5e7db3
Fix tests for new ACME orders with Wire IDs 9 months ago
beltram 90b5347887
feat: try using the new ClientId & Handle format (i.e. plain URIs) 9 months ago
Stefan Berthold 5ceed08ae0
Reorganize parsing target 9 months ago
Stefan Berthold 83ba0bdc51
Replace field access by accessor functions 9 months ago
beltram 2b1223a080
simpler 9 months ago
beltram 036a144e09
add oidc target 9 months ago
beltram 97002040a5
fix: challenge target field was not mapped to db entity 9 months ago
beltram d32a3e23f0
wip 9 months ago
beltram 3f474f77d4
feat: change from impp prefix to just im 9 months ago
beltram 01ef526d08
change uri prefix to impp:wireapp= 9 months ago
Stefan Berthold 8e0e35532c
Add Wire authz and challenges (OIDC+DPOP) 9 months ago
Dominic Evans 231b5d8406 chore(deps): upgrade github.com/go-chi/chi to v5
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.

See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
1 year ago
Mariano Cano fd4e96d1f4 Rename method to IsChallengeEnabled 2 years ago
Mariano Cano 59c5219a07 Use a type for acme challenges 2 years ago
Mariano Cano bca311b05e Add acme property to enable challenges
Fixes #1027
2 years ago
Mariano Cano 693dc39481 Merge branch 'master' into device-attestation 2 years ago
max furman b7c2f6c482 Check for DNS name validity 2 years ago
Mariano Cano 66356cff43 Add attestation certificate validation for Apple devices 2 years ago
Brandon Weeks 7e1b0bebd9 iOS 16 beta 1 support 2 years ago
Brandon Weeks 2ac8b69da2 Add ACME permanent-identifier identifier type 2 years ago
Herman Slatman abfbbc8d49
Merge pull request #946 from smallstep/herman/acme-csr-padding
Strip base64-url padding from ACME CSR
2 years ago
Herman Slatman fd546287ac
Strip base64-url padding from ACME CSR
This commit strips the padding from a base64-url encoded CSR
submitted by a client that doesn't use raw base64-url encoding.
2 years ago
Mariano Cano d461918eb0 Merge branch 'master' into context-authority 2 years ago
Mariano Cano 6f9d847bc6 Fix panic in acme/api tests. 2 years ago
Mariano Cano d1f75f1720 Refactor ACME api. 2 years ago
Mariano Cano d13537d426 Use context in the acme handlers. 2 years ago
Herman Slatman 6e1f8dd7ab
Refactor policy engines into container 2 years ago
Herman Slatman fb81407d6f
Fix ACME policy comments 2 years ago
Herman Slatman a9f033ece5
Fix JSON property name for ACME policy 3 years ago
Herman Slatman 256fe113f7
Improve tests for ACME account policy 3 years ago
Herman Slatman 7df52dbb76
Add ACME EAB policy 3 years ago
Herman Slatman 2fbdf7d5b0
Merge branch 'master' into herman/allow-deny 3 years ago
Panagiotis Siatras 00634fb648
api/render, api/log: initial implementation of the packages (#860)
* api/render: initial implementation of the package

* acme/api: refactored to support api/render

* authority/admin: refactored to support api/render

* ca: refactored to support api/render

* api: refactored to support api/render

* api/render: implemented Error

* api: refactored to support api/render.Error

* acme/api: refactored to support api/render.Error

* authority/admin: refactored to support api/render.Error

* ca: refactored to support api/render.Error

* ca: fixed broken tests

* api/render, api/log: moved error logging to this package

* acme: refactored Error so that it implements render.RenderableError

* authority/admin: refactored Error so that it implements render.RenderableError

* api/render: implemented RenderableError

* api/render: added test coverage for Error

* api/render: implemented statusCodeFromError

* api: refactored RootsPEM to work with render.Error

* acme, authority/admin: fixed pointer receiver name for consistency

* api/render, errs: moved StatusCoder & StackTracer to the render package
3 years ago
Herman Slatman 9e0edc7b50
Add early authority policy evaluation to ACME order API 3 years ago
Herman Slatman 101ca6a2d3
Check admin subjects before changing policy 3 years ago
Herman Slatman 3ec9a7310c
Fix ACME order identifier allow/deny check 3 years ago
Herman Slatman 6440870a80
Clean up, improve test cases and coverage 3 years ago
Herman Slatman 9539729bd9
Add initial implementation of x509 and SSH allow/deny policy engine 3 years ago
Herman Slatman 523ae96749
Change identifier and challenge types to consts 3 years ago
Herman Slatman 76dcf542d4
Fix mixed DNS and IP SANs in Order 3 years ago
Herman Slatman a0e92f8e99
Verify IP identifier contains valid IP 3 years ago
Herman Slatman 6486e6016b
Make logic for which challenge types to use clearer 3 years ago
Herman Slatman 3e36522329
Add preliminary support for TLS-ALPN-01 challenge for IP identifiers 3 years ago