3129 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Mariano Cano	c5d3714a63	Fix acme error map	2022-09-08 10:48:17 -07:00
Mariano Cano	08815c5e90	Reneame attestation statement error	2022-09-08 10:46:58 -07:00
Mariano Cano	3cd72ac72a	Remove debug statements	2022-09-08 10:44:48 -07:00
Mariano Cano	55318efe13	Merge pull request #1043 from unreality/oidc-missing-email ... Allow missing Email claim in OIDC tokens	2022-09-07 18:29:52 -07:00
Mariano Cano	1b68a9f961	Merge pull request #1045 from smallstep/deprecation-notice ... Add deprecation notices to step-x-init binaries	2022-09-07 13:20:02 -07:00
Mariano Cano	bc61b23d91	Add deprecation notices to step-x-init binaries ... Fixes #1044	2022-09-06 17:39:43 -07:00
Raal Goff	b89f210469	remove fail-email test and add ok-empty-email test	2022-09-07 07:45:27 +08:00
Mariano Cano	a2749ca8ed	Merge branch 'master' into device-attestation	2022-09-06 12:29:06 -07:00
Raal Goff	7a03c43fe2	allow missing Email claim in OIDC tokens, use subject when its missing	2022-09-05 12:43:32 +08:00
Mariano Cano	e75e7e7cd6	Fix linter warnings	2022-09-01 16:18:13 -07:00
Mariano Cano	54d92095ac	Validate proof of possession signature ... On the step format, validate proof of possession of the private key validating the signature in the attestation statement.	2022-09-01 10:45:31 -07:00
Mariano Cano	45af68b244	Upgrade go.step.sm/crypto	2022-08-31 11:36:07 -07:00
Mariano Cano	d718c69ad3	Prepare changelog for release	2022-08-30 21:10:18 -07:00
Mariano Cano	b8162d5954	Merge pull request #1034 from smallstep/fix-1033 ... Fixes signature algorithm	2022-08-30 21:03:22 -07:00
Mariano Cano	a7fcfe0e4e	Verify with roots and intermediates	2022-08-30 17:11:44 -07:00
Mariano Cano	30c54a555d	Add entry in changelog	2022-08-30 16:57:31 -07:00
Mariano Cano	ea8579f3df	Fix bad signature algorithm on EC+RSA PKI ... When the root certificate has an EC key and he intermediate has an RSA key, the signature algorithm of the leafs should be the default one, SHA256WithRSA, instead of the one that the intermediate has. Fixes #1033	2022-08-30 16:49:56 -07:00
Mariano Cano	59b7603d1e	Use a clientAuth only cert for device-attest-01	2022-08-30 16:09:44 -07:00
Mariano Cano	6db631df51	Upgrade go.step.sm/crypto@attest	2022-08-30 15:49:10 -07:00
Mariano Cano	ca412e77cc	Return error on attestation validation ... The method storeError returns a nil error	2022-08-29 20:03:34 -07:00
Mariano Cano	ab5f916bd3	Define ErrorBadAttestationStatement	2022-08-29 20:02:43 -07:00
Mariano Cano	735c9d49b0	Add support for yubikey attestation	2022-08-29 19:37:30 -07:00
Mariano Cano	ebce40e9b6	Add new method ACMEClient.ValidateWithPayload ... This new method will be used to validate to validate the device attestation payload.	2022-08-29 19:35:52 -07:00
Mariano Cano	a893d6e7f7	Upgrade go.step.sm/cli-utils ... Fixes issue with step path	2022-08-25 15:37:35 -07:00
Mariano Cano	432477aa91	Merge pull request #1030 from smallstep/herman/fix-template-validation ... Add provisioner template validation	2022-08-25 14:51:39 -07:00
Mariano Cano	1938b1bb34	Merge branch 'master' into herman/fix-template-validation	2022-08-25 13:31:33 -07:00
Mariano Cano	1d1e024b84	Upgrade to go.step.sm/crypto v0.18.0	2022-08-25 12:40:31 -07:00
Mariano Cano	f1c63bc38d	Fix challenge mapping	2022-08-24 19:30:28 -07:00
Mariano Cano	2a44972830	Run go mod tidy	2022-08-24 19:23:31 -07:00
Mariano Cano	df96b126dc	Add AuthorizeChallenge unit tests	2022-08-24 12:31:09 -07:00
Mariano Cano	bca311b05e	Add acme property to enable challenges ... Fixes #1027	2022-08-23 17:11:40 -07:00
Mariano Cano	ae8d4d8757	Fix unit test	2022-08-23 17:01:15 -07:00
Herman Slatman	6b7b989988	Add provisioner template validation ... Fixes #1012	2022-08-23 16:27:49 +02:00
Mariano Cano	693dc39481	Merge branch 'master' into device-attestation	2022-08-22 17:59:17 -07:00
Mariano Cano	b1e9d5ee86	Revert "Run on plaintext HTTP to support Cloud Run" ... This reverts commit 09b9673a60.	2022-08-22 17:50:14 -07:00
Mariano Cano	dd6f59b538	Merge pull request #1024 from smallstep/gosec ... Address gosec warnings	2022-08-22 14:19:50 -07:00
Mariano Cano	23b8f45b37	Address gosec warnings ... Most if not all false positives	2022-08-18 17:46:20 -07:00
Mariano Cano	713dfad884	Merge pull request #1019 from smallstep/head-middleware ... Add a middleware to automatically route HEAD requests to GET	2022-08-16 16:21:19 -07:00
Max	8f88740a5a	Merge pull request #1014 from smallstep/max/dns-id ... Check for DNS name validity	2022-08-16 16:20:12 -07:00
Mariano Cano	6cab4d328e	Add a middleware to automatically route HEAD requests to GET ... Fixes #992	2022-08-16 16:10:29 -07:00
max furman	c040e4b459	Add unit tests	2022-08-16 15:48:23 -07:00
Mariano Cano	85fc837dc3	Merge pull request #1018 from smallstep/ra-config ... Ra config	2022-08-16 15:24:01 -07:00
Mariano Cano	3c88a9ccc2	Fixed changelog	2022-08-16 15:11:49 -07:00
Mariano Cano	8e08f0dea3	Add entries to changelog	2022-08-16 14:48:03 -07:00
Mariano Cano	0c7467ceb2	Allow to automatically configure and linked RA	2022-08-16 14:39:02 -07:00
Mariano Cano	5e0be92273	Allow option to skip the validation of config	2022-08-16 14:04:04 -07:00
max furman	b7c2f6c482	Check for DNS name validity	2022-08-16 00:12:31 -07:00
Mariano Cano	ae76d943c9	Merge pull request #1009 from smallstep/code-ql ... Code QL	2022-08-11 18:53:30 -07:00
Mariano Cano	2db15e4eb5	Remove unnecessary log entries ... These log entries add CodeQL warnings and are not necessary because our default http.ResponseWriter allows adding log entries.	2022-08-11 18:14:36 -07:00
Mariano Cano	759aa26a57	Fix linter warning	2022-08-11 17:47:58 -07:00