79 commits

Author	SHA1	Message	Date
Herman Slatman	bc5f0e429b	Fix gocritic remark	2021-10-17 12:53:02 +02:00
Herman Slatman	d354d55e7f	Improve handling duplicate ACME EAB references	2021-10-16 14:44:56 +02:00
Herman Slatman	dd4b4b0435	Fix remaining gocritic remarks	2021-10-11 23:34:23 +02:00
Herman Slatman	e0b495e4c8	Merge branch 'master' into hs/acme-eab	2021-10-09 01:06:49 +02:00
Herman Slatman	c26041f835	Add ACME EAB nosql tests	2021-10-09 01:02:00 +02:00
max furman	933b40a02a	Introduce gocritic linter and address warnings	2021-10-08 14:59:57 -04:00
Herman Slatman	f34d68897a	Refactor retrieval of provisioner into middleware	2021-10-08 14:29:44 +02:00
max furman	2d5bfd3485	fix comment	2021-09-22 11:56:52 -07:00
Herman Slatman	c2bc1351c6	Add provisioner to remove endpoint and clear reference index on delete	2021-09-17 17:48:09 +02:00
Herman Slatman	746c5c9fd9	Disallow creation of EAB keys with non-unique references	2021-09-17 17:25:19 +02:00
Herman Slatman	9c0020352b	Add lookup by reference and make reference optional	2021-09-17 17:08:02 +02:00
Herman Slatman	02cd3b6b3b	Fix PR comments	2021-09-16 23:09:24 +02:00
Herman Slatman	f11c0cdc0c	Add endpoint for listing ACME EAB keys	2021-08-27 16:58:04 +02:00
Herman Slatman	9d09f5e575	Add support for deleting ACME EAB keys	2021-08-27 14:10:00 +02:00
Herman Slatman	1dba8698e3	Use LinkedCA.EABKey type in ACME EAB API	2021-08-27 12:39:37 +02:00
Herman Slatman	492256f2d7	Add first test cases for EAB and make provisioner unique per EAB ... Before this commit, EAB keys could be used CA-wide, meaning that an EAB credential could be used at any ACME provisioner. This commit changes that behavior, so that EAB credentials are now intended to be used with a specific ACME provisioner. I think that makes sense, because from the perspective of an ACME client the provisioner is like a distinct CA. Besides that this commit also includes the first tests for EAB. The logic for creating the EAB JWS as a client has been taken from github.com/mholt/acmez. This logic may be moved or otherwise sourced (i.e. from a vendor) as soon as the step client also (needs to) support(s) EAB with ACME.	2021-08-09 10:37:32 +02:00
Herman Slatman	7dad7038c3	Fix missing ACME EAB API endpoints	2021-07-23 15:41:24 +02:00
Herman Slatman	c6a4c4ecba	Change ACME EAB endpoint	2021-07-23 15:16:11 +02:00
Herman Slatman	c6bfc6eac2	Fix PR comments	2021-07-22 23:48:41 +02:00
Herman Slatman	b65a588d5b	Make authentication work for /admin/eak	2021-07-22 22:43:21 +02:00
Herman Slatman	f81d49d963	Add first working version of External Account Binding	2021-07-17 17:35:44 +02:00
max furman	1df21b9b6a	Addressing comments in PR review ... - added a bit of validation to admin create and update - using protojson where possible in admin api - fixing a few instances of admin -> acme in errors	2021-07-06 17:14:13 -07:00
max furman	5679c9933d	Fixes from PR review	2021-07-03 12:08:30 -07:00
max furman	9fdef64709	Admin level API for provisioner mgmt v1	2021-07-02 19:05:17 -07:00
max furman	1726076ea2	wip	2021-05-25 16:52:06 -07:00
max furman	423942da44	wip	2021-05-24 13:38:24 -07:00
max furman	9bfb1c2e7b	wip	2021-05-21 13:31:41 -07:00
max furman	4f3e5ef64d	wip	2021-05-19 15:20:16 -07:00
max furman	5d09d04d14	wip	2021-05-19 15:20:16 -07:00