Mariano Cano
2b3b2c283a
Add attestation certificate validation for Apple devices
2022-09-20 18:51:43 -07:00
Brandon Weeks
5f5315260a
iOS 16 beta 1 support
2022-09-20 16:53:08 -07:00
Brandon Weeks
de5b0ef5c2
Verify key authorization is contained within the TPM quote extraData field
2022-09-20 16:51:55 -07:00
Brandon Weeks
248da10f32
Implement TPM attestation statement verification
2022-09-20 16:50:26 -07:00
Brandon Weeks
6f2b4d3042
Add ACME permanent-identifier identifier type
2022-09-20 16:48:28 -07:00
Brandon Weeks
f3d2bd7a19
Run on plaintext HTTP to support Cloud Run
2022-09-20 16:43:30 -07:00
Mariano Cano
746ee2b6db
Upgrade go.step.sm/cli-utils
...
Fixes issue with step path
2022-09-20 16:41:39 -07:00
Mariano Cano
a795f4281c
Upgrade to go.step.sm/crypto v0.18.0
2022-09-20 16:41:10 -07:00
Herman Slatman
25cbe02b9e
Add provisioner template validation
...
Fixes #1012
2022-09-20 16:40:25 -07:00
Max
2de7d3fcf0
Update authority/provisioner/claims.go
...
Co-authored-by: Mariano Cano <mariano@smallstep.com>
2022-09-20 16:35:43 -07:00
max furman
ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors
2022-09-20 16:35:41 -07:00
Mariano Cano
fcb9d88223
Merge pull request #1058 from smallstep/acme-errors
...
Return the internal error instead of the ACME error
2022-09-19 14:31:54 -07:00
Mariano Cano
7dc2067cb2
Update acme/errors.go
...
Co-authored-by: Max <mx.furman@gmail.com>
2022-09-19 14:24:39 -07:00
Mariano Cano
226d36f66f
Fix unit tests
2022-09-19 14:17:30 -07:00
Mariano Cano
8cf6675ce4
Return the internal error instead of the ACME error
...
For ACME errors, return the internal error string instead of the
ACME one on the "Error() string" function. This way the logs will
have more information about the cause of an error.
Fixes #1057
2022-09-19 12:48:35 -07:00
Mariano Cano
6cdaaf5e0c
Merge pull request #1055 from smallstep/acme-att-info
...
Acme attestation information
2022-09-16 14:30:46 -07:00
Mariano Cano
34c6c65671
Pass attestation information to the Sign method
...
Attestation information might be useful in authorizing webhooks
2022-09-16 12:37:41 -07:00
Mariano Cano
b0d24fb801
Fix test with gcloud local credentialss
2022-09-16 12:35:09 -07:00
Mariano Cano
baeb053eca
Merge pull request #1053 from smallstep/acme-roots
...
Acme roots
2022-09-16 11:07:46 -07:00
Mariano Cano
498549c95c
Extract common function used in tests
2022-09-16 10:02:10 -07:00
Mariano Cano
829530ae90
Fix linter errors
2022-09-15 18:24:43 -07:00
Mariano Cano
6b73a020e3
Add unit tests for apple and step attestations
2022-09-15 18:19:52 -07:00
Mariano Cano
42102d88d5
Fix merge and add unit tests
2022-09-15 15:50:04 -07:00
Mariano Cano
ee7307bd41
Cherry-pick acme.go from acdfdf3
2022-09-15 14:45:14 -07:00
Mariano Cano
2505a68f69
Merge pull request #1052 from smallstep/fix-nil-pointer
...
Fix nil pointer exception
2022-09-15 13:15:00 -07:00
Mariano Cano
8fc4a58242
Fix nil pointer exception, missing error
2022-09-15 13:05:39 -07:00
max furman
25f0bf31f4
Update build status svg and link to github actions
2022-09-14 13:53:30 -04:00
Mariano Cano
df975122a0
Upgrade linkedca and add entry to changelog
2022-09-12 16:30:41 -07:00
Mariano Cano
666f695616
Merge pull request #1048 from smallstep/attest-platform
...
Attestation Formats
2022-09-12 14:09:35 -07:00
Mariano Cano
bb0210e875
Fix typo in linkedca variable
2022-09-09 14:34:32 -07:00
Mariano Cano
1e098aef5b
Fixes ACMEAttestationFormat comment
2022-09-09 10:57:32 -07:00
Mariano Cano
66407139e5
Add methods to convert attestation formats
2022-09-08 17:49:24 -07:00
Mariano Cano
0f651799d0
Reject not enabled attestation formats
2022-09-08 17:38:05 -07:00
Mariano Cano
53ad3a9dbe
Add go workspaces files to gitignore
2022-09-08 17:24:51 -07:00
Mariano Cano
ba42aaf865
Add attestationFormat property in the ACME provisioner
2022-09-08 17:16:50 -07:00
Mariano Cano
b2119e9f2c
Merge pull request #977 from smallstep/device-attestation
...
Device attestation
2022-09-08 13:26:28 -07:00
Mariano Cano
fd4e96d1f4
Rename method to IsChallengeEnabled
2022-09-08 13:22:35 -07:00
Mariano Cano
c77b4ff9c5
Fix linter errors
2022-09-08 12:49:16 -07:00
Mariano Cano
59c5219a07
Use a type for acme challenges
2022-09-08 12:34:06 -07:00
Mariano Cano
a89bea701d
Format comment
2022-09-08 11:06:17 -07:00
Mariano Cano
5df9434286
Fix old comment, device-attest-01 uses the acme payload
2022-09-08 10:59:51 -07:00
Mariano Cano
c5d3714a63
Fix acme error map
2022-09-08 10:48:17 -07:00
Mariano Cano
08815c5e90
Reneame attestation statement error
2022-09-08 10:46:58 -07:00
Mariano Cano
3cd72ac72a
Remove debug statements
2022-09-08 10:44:48 -07:00
Mariano Cano
55318efe13
Merge pull request #1043 from unreality/oidc-missing-email
...
Allow missing Email claim in OIDC tokens
2022-09-07 18:29:52 -07:00
Mariano Cano
1b68a9f961
Merge pull request #1045 from smallstep/deprecation-notice
...
Add deprecation notices to step-x-init binaries
2022-09-07 13:20:02 -07:00
Mariano Cano
bc61b23d91
Add deprecation notices to step-x-init binaries
...
Fixes #1044
2022-09-06 17:39:43 -07:00
Raal Goff
b89f210469
remove fail-email test and add ok-empty-email test
2022-09-07 07:45:27 +08:00
Mariano Cano
a2749ca8ed
Merge branch 'master' into device-attestation
2022-09-06 12:29:06 -07:00
Raal Goff
7a03c43fe2
allow missing Email claim in OIDC tokens, use subject when its missing
2022-09-05 12:43:32 +08:00
