29 commits

Author	SHA1	Message	Date
Herman Slatman	fd546287ac	Strip base64-url padding from ACME CSR ... This commit strips the padding from a base64-url encoded CSR submitted by a client that doesn't use raw base64-url encoding.	2022-05-25 22:46:26 +02:00
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2022-04-26 13:12:16 +02:00
Herman Slatman	fb81407d6f	Fix ACME policy comments	2022-04-21 13:21:06 +02:00
Herman Slatman	a9f033ece5	Fix JSON property name for ACME policy	2022-04-15 10:58:40 +02:00
Herman Slatman	256fe113f7	Improve tests for ACME account policy	2022-04-11 15:25:55 +02:00
Herman Slatman	7df52dbb76	Add ACME EAB policy	2022-04-07 14:11:53 +02:00
Herman Slatman	2fbdf7d5b0	Merge branch 'master' into herman/allow-deny	2022-03-30 14:50:14 +02:00
Panagiotis Siatras	00634fb648	api/render, api/log: initial implementation of the packages (#860) ... * api/render: initial implementation of the package * acme/api: refactored to support api/render * authority/admin: refactored to support api/render * ca: refactored to support api/render * api: refactored to support api/render * api/render: implemented Error * api: refactored to support api/render.Error * acme/api: refactored to support api/render.Error * authority/admin: refactored to support api/render.Error * ca: refactored to support api/render.Error * ca: fixed broken tests * api/render, api/log: moved error logging to this package * acme: refactored Error so that it implements render.RenderableError * authority/admin: refactored Error so that it implements render.RenderableError * api/render: implemented RenderableError * api/render: added test coverage for Error * api/render: implemented statusCodeFromError * api: refactored RootsPEM to work with render.Error * acme, authority/admin: fixed pointer receiver name for consistency * api/render, errs: moved StatusCoder & StackTracer to the render package	2022-03-30 11:22:22 +03:00
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2022-03-24 14:55:40 +01:00
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	2022-03-21 15:53:59 +01:00
Herman Slatman	3ec9a7310c	Fix ACME order identifier allow/deny check	2022-03-08 14:17:59 +01:00
Herman Slatman	6440870a80	Clean up, improve test cases and coverage	2022-01-18 14:39:21 +01:00
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2022-01-03 12:25:24 +01:00
Herman Slatman	523ae96749	Change identifier and challenge types to consts	2021-06-18 12:39:36 +02:00
Herman Slatman	76dcf542d4	Fix mixed DNS and IP SANs in Order	2021-06-03 22:45:24 +02:00
Herman Slatman	a0e92f8e99	Verify IP identifier contains valid IP	2021-06-03 22:02:13 +02:00
Herman Slatman	6486e6016b	Make logic for which challenge types to use clearer	2021-05-29 00:37:22 +02:00
Herman Slatman	3e36522329	Add preliminary support for TLS-ALPN-01 challenge for IP identifiers	2021-05-29 00:19:14 +02:00
Herman Slatman	6d9710c88d	Add initial support for ACME IP validation	2021-05-28 16:40:46 +02:00
max furman	b1888fd34d	Use different method for unescpaed paths for the router	2021-04-14 15:11:15 -07:00
max furman	1831920363	Finish order unit tests and remove unused mocklinker	2021-03-25 13:46:51 -07:00
max furman	b6ebc0fd25	more unit tests	2021-03-25 12:05:46 -07:00
max furman	f72b2ff2c2	[acme db interface] nosql authz unit tests	2021-03-25 12:05:46 -07:00
max furman	116869ebc5	[acme db interface] wip	2021-03-25 12:05:46 -07:00
max furman	80a6640103	[acme db interface] wip	2021-03-25 12:05:46 -07:00
max furman	1135ae04fc	[acme db interface] wip	2021-03-25 12:05:46 -07:00
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	2020-05-14 17:32:54 -07:00
max furman	d368791606	Add x5c provisioner capabilities	2019-10-14 14:51:37 -07:00
max furman	e3826dd1c3	Add ACME CA capabilities	2019-09-13 15:48:33 -07:00