Mariano Cano
|
72e2c4eb2e
|
Render proper policy and constrains errors
|
2022-09-21 18:35:18 -07:00 |
|
Mariano Cano
|
4b79405dac
|
Check constraints and policy for leaf certificates too
|
2022-09-21 15:54:28 -07:00 |
|
Mariano Cano
|
a6e85cbbf6
|
Fix linter errors
|
2022-09-21 14:56:15 -07:00 |
|
Mariano Cano
|
325d8bca4f
|
Merge branch 'master' into name-constraints
|
2022-09-21 13:29:44 -07:00 |
|
max furman
|
2d4efc8292
|
Fix linter warnings
|
2022-09-21 12:29:20 -07:00 |
|
max furman
|
75bb196193
|
Add concurrency workflow config | fix broken test due to golang ver
|
2022-09-21 12:26:45 -07:00 |
|
max furman
|
120629edab
|
Do not use the templateError in the BadRequestErr
|
2022-09-20 23:07:16 -07:00 |
|
max furman
|
7c5e5b2b87
|
Even more linter fixes
|
2022-09-20 21:48:04 -07:00 |
|
max furman
|
f3d1863ec6
|
A few more linter errors
|
2022-09-20 21:01:55 -07:00 |
|
max furman
|
1e0ea6f958
|
more linting fixes
|
2022-09-20 19:05:12 -07:00 |
|
max furman
|
33458c88aa
|
Standardize linting file and fix or ignore lots of linting errors
|
2022-09-20 19:05:12 -07:00 |
|
Mariano Cano
|
f0a24bd8ca
|
Add acme property to enable challenges
Fixes #1027
|
2022-09-20 19:01:53 -07:00 |
|
Mariano Cano
|
567d96c771
|
Revert "Run on plaintext HTTP to support Cloud Run"
This reverts commit 09b9673a60.
|
2022-09-20 18:57:46 -07:00 |
|
Mariano Cano
|
191d9e8629
|
Use go.step.sm/crypto to set the permanent identifier
|
2022-09-20 18:57:43 -07:00 |
|
Mariano Cano
|
debe565e42
|
Validate constraints on Sign and Renew/Rekey
Fixes #1060
|
2022-09-20 18:52:47 -07:00 |
|
Mariano Cano
|
89b6aa924a
|
Normalize IPs in matchIPConstraint
|
2022-09-20 18:44:15 -07:00 |
|
Brandon Weeks
|
f3d2bd7a19
|
Run on plaintext HTTP to support Cloud Run
|
2022-09-20 16:43:30 -07:00 |
|
Herman Slatman
|
25cbe02b9e
|
Add provisioner template validation
Fixes #1012
|
2022-09-20 16:40:25 -07:00 |
|
Max
|
2de7d3fcf0
|
Update authority/provisioner/claims.go
Co-authored-by: Mariano Cano <mariano@smallstep.com>
|
2022-09-20 16:35:43 -07:00 |
|
max furman
|
ab0d2503ae
|
Standardize linting file and fix or ignore lots of linting errors
|
2022-09-20 16:35:41 -07:00 |
|
Mariano Cano
|
3f58f30b21
|
Name tests properly
|
2022-09-20 15:53:08 -07:00 |
|
Mariano Cano
|
75bff055fc
|
Add StatusCoder to ConstraintError
|
2022-09-20 14:45:47 -07:00 |
|
Mariano Cano
|
2959aa676d
|
Add helper ValidateCertificate
|
2022-09-20 13:12:34 -07:00 |
|
Mariano Cano
|
8b54e25f64
|
Allow nil engines
|
2022-09-20 12:33:03 -07:00 |
|
Mariano Cano
|
2a15e3eee1
|
Rename constraint.Service to constraint.Engine
|
2022-09-20 11:38:32 -07:00 |
|
Mariano Cano
|
45e594f98c
|
Make the constraint service public
|
2022-09-20 11:36:45 -07:00 |
|
Mariano Cano
|
7bea2f4d0e
|
Add more constraint unit tests
|
2022-09-20 11:33:36 -07:00 |
|
Mariano Cano
|
495494ce8f
|
Return a typed error
|
2022-09-20 10:36:44 -07:00 |
|
Mariano Cano
|
6686f0437d
|
Remove x509 prefixes
|
2022-09-20 10:23:51 -07:00 |
|
Mariano Cano
|
0263468424
|
Initial work on name constraints validation
Issue #1060
|
2022-09-19 19:45:13 -07:00 |
|
Mariano Cano
|
34c6c65671
|
Pass attestation information to the Sign method
Attestation information might be useful in authorizing webhooks
|
2022-09-16 12:37:41 -07:00 |
|
Mariano Cano
|
42102d88d5
|
Fix merge and add unit tests
|
2022-09-15 15:50:04 -07:00 |
|
Mariano Cano
|
ee7307bd41
|
Cherry-pick acme.go from acdfdf3
|
2022-09-15 14:45:14 -07:00 |
|
Mariano Cano
|
8fc4a58242
|
Fix nil pointer exception, missing error
|
2022-09-15 13:05:39 -07:00 |
|
Mariano Cano
|
bb0210e875
|
Fix typo in linkedca variable
|
2022-09-09 14:34:32 -07:00 |
|
Mariano Cano
|
1e098aef5b
|
Fixes ACMEAttestationFormat comment
|
2022-09-09 10:57:32 -07:00 |
|
Mariano Cano
|
66407139e5
|
Add methods to convert attestation formats
|
2022-09-08 17:49:24 -07:00 |
|
Mariano Cano
|
ba42aaf865
|
Add attestationFormat property in the ACME provisioner
|
2022-09-08 17:16:50 -07:00 |
|
Mariano Cano
|
b2119e9f2c
|
Merge pull request #977 from smallstep/device-attestation
Device attestation
|
2022-09-08 13:26:28 -07:00 |
|
Mariano Cano
|
fd4e96d1f4
|
Rename method to IsChallengeEnabled
|
2022-09-08 13:22:35 -07:00 |
|
Mariano Cano
|
c77b4ff9c5
|
Fix linter errors
|
2022-09-08 12:49:16 -07:00 |
|
Mariano Cano
|
59c5219a07
|
Use a type for acme challenges
|
2022-09-08 12:34:06 -07:00 |
|
Raal Goff
|
b89f210469
|
remove fail-email test and add ok-empty-email test
|
2022-09-07 07:45:27 +08:00 |
|
Mariano Cano
|
a2749ca8ed
|
Merge branch 'master' into device-attestation
|
2022-09-06 12:29:06 -07:00 |
|
Raal Goff
|
7a03c43fe2
|
allow missing Email claim in OIDC tokens, use subject when its missing
|
2022-09-05 12:43:32 +08:00 |
|
Mariano Cano
|
1938b1bb34
|
Merge branch 'master' into herman/fix-template-validation
|
2022-08-25 13:31:33 -07:00 |
|
Mariano Cano
|
1d1e024b84
|
Upgrade to go.step.sm/crypto v0.18.0
|
2022-08-25 12:40:31 -07:00 |
|
Mariano Cano
|
f1c63bc38d
|
Fix challenge mapping
|
2022-08-24 19:30:28 -07:00 |
|
Mariano Cano
|
df96b126dc
|
Add AuthorizeChallenge unit tests
|
2022-08-24 12:31:09 -07:00 |
|
Mariano Cano
|
bca311b05e
|
Add acme property to enable challenges
Fixes #1027
|
2022-08-23 17:11:40 -07:00 |
|