28 commits

Author	SHA1	Message	Date
Carl Tashian	96c6613739	Clarify policy lockout error message	2023-02-16 15:56:57 -08:00
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2022-09-20 16:35:41 -07:00
Herman Slatman	c695b23e24	Fix check for admin not belonging to policy	2022-05-12 16:33:32 +02:00
Herman Slatman	0f4ffa504a	Fix linting issues	2022-05-06 13:23:09 +02:00
Herman Slatman	7104299119	Add full policy validation in API	2022-05-06 13:12:13 +02:00
Herman Slatman	d82e51b748	Update AllowWildcardNames configuration name	2022-04-29 15:08:19 +02:00
Herman Slatman	2b7f6931f3	Change Subject Common Name verification ... Subject Common Names can now also be configured to be allowed or denied, similar to SANs. When a Subject Common Name is not explicitly allowed or denied, its type will be determined and its value will be validated according to the constraints for that type of name (i.e. URI).	2022-04-28 14:49:23 +02:00
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2022-04-26 13:12:16 +02:00
Herman Slatman	2a7620641f	Fix more PR comments	2022-04-26 10:15:17 +02:00
Herman Slatman	76112c2da1	Improve error creation and testing for core policy engine	2022-04-26 01:47:07 +02:00
Herman Slatman	20f5d12b99	Improve test rigour for reloadPolicyEngines	2022-04-25 11:02:03 +02:00
Herman Slatman	6264e8495c	Improve policy error handling code coverage	2022-04-24 16:29:31 +02:00
Herman Slatman	c40a4d2694	Contain policy engines inside provisioner Controller	2022-04-22 01:20:38 +02:00
Herman Slatman	ef110a94df	Change pointer booleans to regular boolean configuration	2022-04-21 23:45:05 +02:00
Herman Slatman	a2cfbe3d54	Fix (part of) PR comments	2022-04-21 12:14:03 +02:00
Herman Slatman	3eecc4f7bb	Improve test coverage for reloadPolicyEngines	2022-04-19 17:10:13 +02:00
Herman Slatman	72bbe53376	Add additional policy options	2022-04-19 14:41:36 +02:00
Herman Slatman	99702d3648	Fix case of no authority policy existing	2022-04-18 21:14:30 +02:00
Herman Slatman	30d5d89a13	Improve test coverage for Policy Admin API	2022-04-15 10:43:25 +02:00
Herman Slatman	679e2945f2	Disallow name constraint wildcard notation	2022-04-04 15:35:49 +02:00
Herman Slatman	96f4c49b0c	Improve how policy errors are returned and used	2022-04-04 13:58:16 +02:00
Herman Slatman	6da243c34d	Add policy precheck for all admins	2022-03-30 15:39:03 +02:00
Herman Slatman	0e052fe299	Add authority policy API	2022-03-30 14:21:39 +02:00
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2022-03-24 14:55:40 +01:00
Herman Slatman	613c99f00f	Fix linting issues	2022-03-24 13:10:49 +01:00
Herman Slatman	6b620c8e9c	Improve protobuf unmarshaling error handling	2022-03-24 10:54:45 +01:00
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	2022-03-21 15:53:59 +01:00
Herman Slatman	81b0c6c37c	Add API implementation for authority and provisioner policy	2022-03-15 15:56:04 +01:00