Commit graph

2467 commits

Author SHA1 Message Date
Mariano Cano
ead394fba7 Add strategy to retry the sign operation if the key is not yet ready 2021-10-20 18:09:50 -07:00
Carl Tashian
66a8158f26
Update README.md 2021-10-20 15:53:04 -07:00
max furman
da3c6af10f changelog update 2021-10-20 14:31:33 -07:00
max furman
5c71e8a0ee [action] replace goreleaser complicated build targets with 'targets' 2021-10-20 14:10:40 -07:00
max furman
12b32b0a90 Changelog update for v0.17.5 2021-10-20 13:41:26 -07:00
Carl Tashian
6f16938774
Update README.md
* Add SCEP support
* Fix ACME tutorial URLs
2021-10-19 16:53:41 -07:00
Carl Tashian
655d7f59fd install-step-ra.sh: Properly quote the RA DNS names in ca.json 2021-10-19 16:14:41 -07:00
Carl Tashian
482482e717 install-step-ra.sh: Don't try to create a JWK provisioner, because the web app's OAuth flow doesn't support OOB with STEP_CONSOLE=true. 2021-10-19 15:22:30 -07:00
Herman Slatman
4d726d6b4c
Add pagination to ACME EAB credentials endpoint 2021-10-17 22:42:36 +02:00
Herman Slatman
bc5f0e429b
Fix gocritic remark 2021-10-17 12:53:02 +02:00
Herman Slatman
d354d55e7f
Improve handling duplicate ACME EAB references 2021-10-16 14:44:56 +02:00
Herman Slatman
bcd1240a0e
Merge branch 'master' into hs/acme-eab 2021-10-16 13:32:13 +02:00
Mariano Cano
48efd94994
Merge pull request #723 from smallstep/keep-alive
Use Golang's default keepalive.
2021-10-15 14:31:52 -07:00
Mariano Cano
36b622bfc2 Use Golang's default keep-alive.
Since Go 1.13 a net.Listen keep-alive is enabled by default if
the protocol and OS supports it. The new one is 15s to match
the net.Dial default one. Previously http.Server ListenAndServe
and ListenAndServeTLS used to add a wrapper with 3m that we
replicated.

See https://github.com/golang/go/issues/31510
2021-10-15 14:12:43 -07:00
Mariano Cano
59d8d805d5
Merge pull request #722 from smallstep/keyvault-api
Allow to configure azurekms using the URI
2021-10-13 13:09:11 -07:00
Mariano Cano
edd475b81b Allow to configure azurekms using the URI
With an URI, azurekms can be configured with client credentials,
and it can define a default vault and protection level.
2021-10-12 18:24:58 -07:00
Max
710f76cb00
Merge pull request #721 from smallstep/max/simplify-releases
[action] Simplify goreleaser targets
2021-10-12 19:43:06 -04:00
max furman
9f8ffcf196 [action] remove windows_amd64, add freebsd_amd64 2021-10-12 16:40:24 -07:00
Mariano Cano
e3220232a0
Merge pull request #717 from smallstep/keyvault
Azure Key Vault KMS
2021-10-12 15:58:32 -07:00
max furman
02d601861b [action] Simply goreleaser targets 2021-10-12 15:44:04 -07:00
Mariano Cano
44f0d61354 Fix typo. 2021-10-12 15:41:41 -07:00
Mariano Cano
a2b03083c8 Fix gocritic warnings. 2021-10-12 15:28:08 -07:00
Mariano Cano
2aee71b4c0 Fix typo. 2021-10-12 15:18:17 -07:00
Mariano Cano
e15b5faf7d Merge branch 'master' into keyvault 2021-10-12 15:15:35 -07:00
Mariano Cano
5d0bd7d155 Fix grammar in comments. 2021-10-12 15:14:01 -07:00
Herman Slatman
dd4b4b0435
Fix remaining gocritic remarks 2021-10-11 23:34:23 +02:00
Herman Slatman
a4660f73fa
Fix some of the gocritic remarks 2021-10-11 23:10:16 +02:00
Herman Slatman
94f8e58bea
Update go.step.sm/linkedca to v0.8.0 2021-10-11 23:03:30 +02:00
Herman Slatman
e0b495e4c8
Merge branch 'master' into hs/acme-eab 2021-10-09 01:06:49 +02:00
Herman Slatman
c26041f835
Add ACME EAB nosql tests 2021-10-09 01:02:00 +02:00
Mariano Cano
781d5fb6e8 Fix creation of ssh certificates on step ca init. 2021-10-08 14:25:24 -07:00
Max
04fe3126be
Merge pull request #720 from smallstep/max/lint
Introduce gocritic linter and address warnings
2021-10-08 15:55:51 -04:00
max furman
bdc9ffbe90 changelog update 2021-10-08 15:44:04 -04:00
max furman
5fc24c697c Fix a few more linter warnings and remove GOFLAGS from make lint 2021-10-08 15:26:01 -04:00
max furman
933b40a02a Introduce gocritic linter and address warnings 2021-10-08 14:59:57 -04:00
Herman Slatman
f34d68897a
Refactor retrieval of provisioner into middleware 2021-10-08 14:29:44 +02:00
Herman Slatman
0afea2e957
Improve tests for already bound EAB keys 2021-10-08 13:19:35 +02:00
Herman Slatman
9d4cafc4bd
Merge branch 'master' into hs/acme-eab 2021-10-08 10:33:09 +02:00
Mariano Cano
ca59ee43c5 Update changelog. 2021-10-07 17:41:33 -07:00
Mariano Cano
f6e69bf826 Fix typo. 2021-10-07 17:37:47 -07:00
Mariano Cano
c638c282d8 Add omitempty to KMS options. 2021-10-07 17:30:28 -07:00
Mariano Cano
ece67fefff Add support for kms in pki package.
Adding support to kms in the pki packages opens the door to use
kms implementations in `step ca init`
2021-10-07 17:28:39 -07:00
Mariano Cano
822a1e3bdb Add variable with the default implementation. 2021-10-07 17:23:56 -07:00
Mariano Cano
d8720c3723 Update linkedca package. 2021-10-07 17:21:40 -07:00
Mariano Cano
2240ebbadc Add NameValidator interface and implement it for azurekms. 2021-10-07 17:19:55 -07:00
Mariano Cano
abdb56065d Allow o specify an hsm using the uri. 2021-10-07 16:18:36 -07:00
Mariano Cano
f1ef3fb351 Add GetBool(s string) bool to URI type. 2021-10-07 15:48:11 -07:00
Mariano Cano
500b540406 Remove unused code. 2021-10-07 15:35:21 -07:00
Mariano Cano
2026787ce4 Add some extra coverage. 2021-10-07 15:01:11 -07:00
Mariano Cano
52a18e0c2d Add key name to CreateCertificateAuthority 2021-10-07 14:19:39 -07:00