Derrick Lyndon Pallas
7a5c4a1112
authority/provisioners: fix overflow on 32-bit systems
...
In Go, len returns signed ints, not unsigned ints; consequently, this code
comparison overflows on 32-bit systems, like ARM.
2019-01-28 00:54:15 +00:00
max furman
2c72ada610
remove dead code
2019-01-20 21:37:12 -08:00
max furman
6dc89f46d8
make Duration public
2019-01-20 21:33:14 -08:00
max furman
0615f7eb11
don't wrap time.Duration
2019-01-18 12:08:18 -08:00
max furman
4b742042ee
make Duration wrapper publicly accessible
2019-01-18 10:39:12 -08:00
Mariano Cano
e8ac3f4888
Add comment to differentiate GetRootCertificates and GetRoots.
2019-01-14 18:11:55 -08:00
Mariano Cano
6e620073f5
Rename method Empties to HasEmpties
2019-01-14 18:11:55 -08:00
max furman
cfbb2a6f41
method documentation grammar fix
2019-01-14 17:55:01 -08:00
Mariano Cano
518b597535
Remove mTLS client requirement in /roots and /federation
2019-01-11 19:08:08 -08:00
Mariano Cano
1763ede99d
Add tests for new methods.
2019-01-10 13:19:51 -08:00
Mariano Cano
d296cf95a9
Add mTLS request to get all the root CAs, not the federated ones.
2019-01-07 17:48:56 -08:00
Mariano Cano
98cc243a37
Add support for multiple roots.
2019-01-07 15:30:28 -08:00
Mariano Cano
722bcb7e7a
Add initial support for federated root certificates.
2019-01-04 17:51:32 -08:00
Mariano Cano
7e95fc0e45
Strip ports on audience check.
...
Services might have proxies behind them so we cannot rely on them.
Fixes #17
2018-12-21 15:27:22 -08:00
Mariano Cano
9b87e08faf
Do not require the port in the audience check.
...
Fixes #17
2018-12-21 14:04:22 -08:00
Mariano Cano
7da1d1adc2
Fix typo.
2018-11-01 15:51:20 -07:00
Mariano Cano
d6cad2a7f3
Add provisioner option to disable renewal.
...
Fixes smallstep/ca-component#108
2018-11-01 15:43:24 -07:00
max furman
c74fcd57a7
ca-component -> certificates
...
* fix redundant error check
* add README
2018-10-31 21:36:01 -07:00
Mariano Cano
428661f472
Use name instead of issuer in error message.
2018-10-30 15:25:52 -07:00
max furman
0d9dd2d14b
provisioner issuer -> name
2018-10-29 18:00:30 -07:00
Mariano Cano
ea0307239a
Fix dead code and add missing error check.
2018-10-26 15:05:37 -07:00
Mariano Cano
d574545d94
Format code with gofmt -s
2018-10-26 15:01:02 -07:00
max furman
7fa06643b2
change step provisioner OID and ASN1 representation
2018-10-26 14:24:16 -07:00
max furman
b457b15292
fix: omit empty claims in AuthConfig
2018-10-26 10:51:40 -07:00
max furman
ca6087145f
fix unit test
2018-10-25 23:55:31 -07:00
max furman
a4a461466b
withProvisionerOID and unit test
2018-10-25 23:49:23 -07:00
max furman
283dc42904
add unit tests for MatchOne (token audience) and Authority.New
2018-10-25 15:17:22 -07:00
Mariano Cano
0ccf775f2e
Add support for cursors in the api.
2018-10-25 18:53:13 -07:00
Mariano Cano
1de8eb4bfa
Fix provisioner package move.
2018-10-25 17:27:40 -07:00
Mariano Cano
1db177b80d
Add backend support for provisioners with cursors.
...
Fixes #83
2018-10-25 15:40:12 -07:00
max furman
d2872564b4
accidentally removed DisableIssuedAtCheck during merge
2018-10-25 00:15:17 -07:00
max furman
ee7db4006a
change sign + authorize authority api | add provisioners
...
* authorize returns []interface{}
- operators in this list can conform to any interface the user decides
- our implementation has a combination of certificate claim validators
and certificate template modifiers.
* provisioners can set and enforce tls cert options
2018-10-18 22:26:39 -07:00
Mariano Cano
1c1ac1b3fb
Add disableIssuedAt check functionality
...
Fixes #86
2018-10-24 18:59:48 -07:00
Mariano Cano
69da47a727
Set audience using the sign url.
2018-10-19 18:25:59 -07:00
max furman
0b5f6487e1
change provisioners api
...
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
2018-10-11 23:03:00 -07:00
max furman
f1dc00c810
add Provisioner config validation
2018-10-08 23:25:18 -07:00
max furman
0e904989d2
add unit tests for authority.Provisioners api
2018-10-08 22:40:07 -07:00
max furman
d773770a44
add authority.New unit tests
2018-10-08 21:48:44 -07:00
max furman
c284a2c0ab
first commit
2018-10-05 21:48:36 +00:00
