2681 Commits (ff8cb19b78db97674a130044fb46c6a864953587)

 

All Branches   

Search

Author	SHA1	Message	Date
Herman Slatman	a3cf6bac36	Add special handling for *json.UnmarshalTypeError	3 years ago
Herman Slatman	0475a4d26f	Refactor extraction of JSON template syntax errors	3 years ago
Mariano Cano	57f9e54151	Merge pull request #785 from smallstep/nebulous ... Add initial implementation of a nebula provisioner	3 years ago
Herman Slatman	a5455d3572	Improve errors related to template execution failures (slightly)	3 years ago
Mariano Cano	de549adf2d	Do not add extra new lines when creating nebula provisioners	3 years ago
Mariano Cano	0920224816	Fix error message.	3 years ago
Herman Slatman	ef16febf40	Refactor ACME EAB queries ... The ACME EAB keys are now also indexed by the provisioner. This solves part of the issue in which too many EAB keys may be in memory at a given time.	3 years ago
Mariano Cano	01a76445ea	Upgrade go.step.sm/crypto	3 years ago
Mariano Cano	98044cf08d	Use a tagged version of linkedca	3 years ago
Mariano Cano	449a9fdfd6	Address review comments.	3 years ago
Mariano Cano	b424aa3dc1	Add nebula header and use der version of certificate.	3 years ago
Herman Slatman	30859d3c83	Remove server-side paging logic for ExternalAccountKeys	3 years ago
Mariano Cano	f49a4b326f	Add missing comments.	3 years ago
Mariano Cano	6600f1253e	Fix error messages after review.	3 years ago
Mariano Cano	6a1d0cb9f8	Add linkedca conversions.	3 years ago
Mariano Cano	de51c2edfb	More unit tests for nebula.	3 years ago
Mariano Cano	99845d38bb	Add some extra unit tests for nebula.	3 years ago
Mariano Cano	76794ce613	Use default SANs without sans in the token. ... Fix step claim condition in SSH	3 years ago
Herman Slatman	6929e31fe0	Merge branch 'master' into hs/acme-eab	3 years ago
Herman Slatman	6bc0513468	Add more tests	3 years ago
Mariano Cano	9ec0276887	Update certificate set with new api.	3 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	3 years ago
Mariano Cano	cb72796a2d	Fix decoding of certificate.	3 years ago
Mariano Cano	32390a2964	Add initial implementation of a nebula provisioner. ... A nebula provisioner will generate a X509 or SSH certificate with the identities in the nebula certificate embedded in the token. The token is signed with the private key of the nebula certificate.	3 years ago
Herman Slatman	8fee970297	Merge pull request #779 from smallstep/herman/acme-cli-user-agent	3 years ago
Herman Slatman	11a7f01177	Simplify lookup cursor logic for ExternalAccountKeys	3 years ago
Herman Slatman	5fe9909174	Refactor AdminAuthority interface	3 years ago
Herman Slatman	22ff90f655	Merge branch 'master' into hs/acme-eab	3 years ago
Herman Slatman	07addd0cac	Fix linting issue	3 years ago
Herman Slatman	a68208a3ba	Set Step CLI User-Agent when performing ACME requests	3 years ago
Herman Slatman	8473164b41	Merge pull request #773 from smallstep/herman/ip-sans-improvements ... Improve IP SANS support	3 years ago
Herman Slatman	a5f2f004e3	Change name of IP Common Name test for clarity	3 years ago
Herman Slatman	f9ae875f9d	Use short if-style statements	3 years ago
Herman Slatman	80bebda69c	Fix code style issue	3 years ago
Mariano Cano	f7c1a328ed	Merge pull request #777 from smallstep/pkcs11-decrypter ... Implement the kms.Decrypter with PKCS#11	3 years ago
Mariano Cano	d5c6572da4	Fix typo.	3 years ago
Mariano Cano	5a32401d23	Implement the kms.Decrypter with PKCS#11 ... This interface allows the use of SCEP with PKCS#11 modules.	3 years ago
Mariano Cano	ab44fbfb3f	Merge pull request #774 from smallstep/cm-roots ... Avoid doing unauthenticated requests on the SDK	3 years ago
Mariano Cano	2c63abcf52	fix grammar	3 years ago
Mariano Cano	7c4e6dcc96	Remove duplicated code in bootstrap methods	3 years ago
Mariano Cano	64c19d4264	Fix subject in test, use ip	3 years ago
Mariano Cano	b0b2e77b0e	Avoid doing unauthenticated requests on the SDK ... When step-ca runs with mTLS required on some endpoints, the SDK used in autocert will fail to start because the identity certificate is missing. This certificate is only required to retrieve all roots, in most cases there's only one, and the SDK has access to it.	3 years ago
Herman Slatman	bc0875bd7b	Disallow email address and URLs in the CSR ... Before this commit `step` would allow email addresses and URLs in the CSR. This doesn't fit nicely with the rest of ACME, in which identifiers need to be authorized before a certificate is issued.	3 years ago
Herman Slatman	13a31fd862	Merge branch 'master' into herman/ip-sans-improvements	3 years ago
Herman Slatman	ca707cbe05	Fix linting	3 years ago
Herman Slatman	a5d33512fe	Fix test	3 years ago
Herman Slatman	a2c9b5cd7e	Allow IP identifiers in subject, including authorization enforcement ... To support IPs in the subject using `step-cli`, this PR ensures that Subject Common Names that can be parsed as an IP are also checked to have been authorized before. The PR for `step-cli` is here: github.com/smallstep/cli/pull/576.	3 years ago
Herman Slatman	5f224b729e	Add tests for Provisioner Admin API	3 years ago
Herman Slatman	43a78f495f	Add tests for Admin API	3 years ago
Herman Slatman	bd169f505f	Add Admin API Middleware tests	3 years ago