Commit graph

3332 commits

Author SHA1 Message Date
Mariano Cano
23045e1812 Clarify comments by code review 2022-09-22 11:05:06 -07:00
max furman
4c7a2ce3eb
Fix errors.As linter warnings 2022-09-22 00:04:31 -07:00
Mariano Cano
15dc7901e5 Fix unit tests 2022-09-21 18:46:46 -07:00
Mariano Cano
d68c765e20 Add context to errors 2022-09-21 18:46:34 -07:00
Mariano Cano
72e2c4eb2e Render proper policy and constrains errors 2022-09-21 18:35:18 -07:00
Mariano Cano
4b79405dac Check constraints and policy for leaf certificates too 2022-09-21 15:54:28 -07:00
Mariano Cano
a6e85cbbf6 Fix linter errors 2022-09-21 14:56:15 -07:00
Mariano Cano
325d8bca4f Merge branch 'master' into name-constraints 2022-09-21 13:29:44 -07:00
Max
d46c5b2f40
Merge pull request #1062 from smallstep/max/lint2
Linter Update
2022-09-21 13:09:42 -07:00
max furman
aa3ffea07c
[action] update codeql cron 2022-09-21 12:34:08 -07:00
max furman
2d4efc8292
Fix linter warnings 2022-09-21 12:29:20 -07:00
max furman
75bb196193
Add concurrency workflow config | fix broken test due to golang ver 2022-09-21 12:26:45 -07:00
max furman
120629edab
Do not use the templateError in the BadRequestErr 2022-09-20 23:07:16 -07:00
max furman
c26d2c8328
Empty-Commit 2022-09-20 22:27:50 -07:00
max furman
89bccf7796
[action] update test and release action to use common workflows 2022-09-20 22:16:46 -07:00
max furman
ffff9af323
linting and fixing review feedback 2022-09-20 22:12:08 -07:00
max furman
7c5e5b2b87
Even more linter fixes 2022-09-20 21:48:04 -07:00
max furman
f3d1863ec6
A few more linter errors 2022-09-20 21:01:55 -07:00
max furman
6af9437875
Rebase over master and a few more linter fixes 2022-09-20 19:05:12 -07:00
max furman
18a648cffa
Fix linter warning about bad error name 2022-09-20 19:05:12 -07:00
max furman
1e0ea6f958
more linting fixes 2022-09-20 19:05:12 -07:00
max furman
33458c88aa
Standardize linting file and fix or ignore lots of linting errors 2022-09-20 19:05:12 -07:00
Mariano Cano
99299faeeb
Add AuthorizeChallenge unit tests 2022-09-20 19:03:03 -07:00
Mariano Cano
f0a24bd8ca
Add acme property to enable challenges
Fixes #1027
2022-09-20 19:01:53 -07:00
Mariano Cano
567d96c771
Revert "Run on plaintext HTTP to support Cloud Run"
This reverts commit 09b9673a60.
2022-09-20 18:57:46 -07:00
Mariano Cano
191d9e8629
Use go.step.sm/crypto to set the permanent identifier 2022-09-20 18:57:43 -07:00
Mariano Cano
debe565e42 Validate constraints on Sign and Renew/Rekey
Fixes #1060
2022-09-20 18:52:47 -07:00
Mariano Cano
2b3b2c283a
Add attestation certificate validation for Apple devices 2022-09-20 18:51:43 -07:00
Mariano Cano
89b6aa924a Normalize IPs in matchIPConstraint 2022-09-20 18:44:15 -07:00
Brandon Weeks
5f5315260a
iOS 16 beta 1 support 2022-09-20 16:53:08 -07:00
Brandon Weeks
de5b0ef5c2
Verify key authorization is contained within the TPM quote extraData field 2022-09-20 16:51:55 -07:00
Brandon Weeks
248da10f32
Implement TPM attestation statement verification 2022-09-20 16:50:26 -07:00
Brandon Weeks
6f2b4d3042
Add ACME permanent-identifier identifier type 2022-09-20 16:48:28 -07:00
Brandon Weeks
f3d2bd7a19
Run on plaintext HTTP to support Cloud Run 2022-09-20 16:43:30 -07:00
Mariano Cano
746ee2b6db
Upgrade go.step.sm/cli-utils
Fixes issue with step path
2022-09-20 16:41:39 -07:00
Mariano Cano
a795f4281c
Upgrade to go.step.sm/crypto v0.18.0 2022-09-20 16:41:10 -07:00
Herman Slatman
25cbe02b9e
Add provisioner template validation
Fixes #1012
2022-09-20 16:40:25 -07:00
Max
2de7d3fcf0
Update authority/provisioner/claims.go
Co-authored-by: Mariano Cano <mariano@smallstep.com>
2022-09-20 16:35:43 -07:00
max furman
ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2022-09-20 16:35:41 -07:00
Mariano Cano
3f58f30b21 Name tests properly 2022-09-20 15:53:08 -07:00
Mariano Cano
75bff055fc Add StatusCoder to ConstraintError 2022-09-20 14:45:47 -07:00
Mariano Cano
2959aa676d Add helper ValidateCertificate 2022-09-20 13:12:34 -07:00
Mariano Cano
8b54e25f64 Allow nil engines 2022-09-20 12:33:03 -07:00
Mariano Cano
2a15e3eee1 Rename constraint.Service to constraint.Engine 2022-09-20 11:38:32 -07:00
Mariano Cano
45e594f98c Make the constraint service public 2022-09-20 11:36:45 -07:00
Mariano Cano
7bea2f4d0e Add more constraint unit tests 2022-09-20 11:33:36 -07:00
Mariano Cano
495494ce8f Return a typed error 2022-09-20 10:36:44 -07:00
Mariano Cano
6686f0437d Remove x509 prefixes 2022-09-20 10:23:51 -07:00
Mariano Cano
0263468424 Initial work on name constraints validation
Issue #1060
2022-09-19 19:45:13 -07:00
Mariano Cano
fcb9d88223
Merge pull request #1058 from smallstep/acme-errors
Return the internal error instead of the ACME error
2022-09-19 14:31:54 -07:00