Mariano Cano
d68c765e20
Add context to errors
2022-09-21 18:46:34 -07:00
Mariano Cano
72e2c4eb2e
Render proper policy and constrains errors
2022-09-21 18:35:18 -07:00
Mariano Cano
4b79405dac
Check constraints and policy for leaf certificates too
2022-09-21 15:54:28 -07:00
Mariano Cano
a6e85cbbf6
Fix linter errors
2022-09-21 14:56:15 -07:00
Mariano Cano
325d8bca4f
Merge branch 'master' into name-constraints
2022-09-21 13:29:44 -07:00
Max
d46c5b2f40
Merge pull request #1062 from smallstep/max/lint2
...
Linter Update
2022-09-21 13:09:42 -07:00
max furman
aa3ffea07c
[action] update codeql cron
2022-09-21 12:34:08 -07:00
max furman
2d4efc8292
Fix linter warnings
2022-09-21 12:29:20 -07:00
max furman
75bb196193
Add concurrency workflow config | fix broken test due to golang ver
2022-09-21 12:26:45 -07:00
max furman
120629edab
Do not use the templateError in the BadRequestErr
2022-09-20 23:07:16 -07:00
max furman
c26d2c8328
Empty-Commit
2022-09-20 22:27:50 -07:00
max furman
89bccf7796
[action] update test and release action to use common workflows
2022-09-20 22:16:46 -07:00
max furman
ffff9af323
linting and fixing review feedback
2022-09-20 22:12:08 -07:00
max furman
7c5e5b2b87
Even more linter fixes
2022-09-20 21:48:04 -07:00
max furman
f3d1863ec6
A few more linter errors
2022-09-20 21:01:55 -07:00
max furman
6af9437875
Rebase over master and a few more linter fixes
2022-09-20 19:05:12 -07:00
max furman
18a648cffa
Fix linter warning about bad error name
2022-09-20 19:05:12 -07:00
max furman
1e0ea6f958
more linting fixes
2022-09-20 19:05:12 -07:00
max furman
33458c88aa
Standardize linting file and fix or ignore lots of linting errors
2022-09-20 19:05:12 -07:00
Mariano Cano
99299faeeb
Add AuthorizeChallenge unit tests
2022-09-20 19:03:03 -07:00
Mariano Cano
f0a24bd8ca
Add acme property to enable challenges
...
Fixes #1027
2022-09-20 19:01:53 -07:00
Mariano Cano
567d96c771
Revert "Run on plaintext HTTP to support Cloud Run"
...
This reverts commit 09b9673a60
.
2022-09-20 18:57:46 -07:00
Mariano Cano
191d9e8629
Use go.step.sm/crypto to set the permanent identifier
2022-09-20 18:57:43 -07:00
Mariano Cano
debe565e42
Validate constraints on Sign and Renew/Rekey
...
Fixes #1060
2022-09-20 18:52:47 -07:00
Mariano Cano
2b3b2c283a
Add attestation certificate validation for Apple devices
2022-09-20 18:51:43 -07:00
Mariano Cano
89b6aa924a
Normalize IPs in matchIPConstraint
2022-09-20 18:44:15 -07:00
Brandon Weeks
5f5315260a
iOS 16 beta 1 support
2022-09-20 16:53:08 -07:00
Brandon Weeks
de5b0ef5c2
Verify key authorization is contained within the TPM quote extraData field
2022-09-20 16:51:55 -07:00
Brandon Weeks
248da10f32
Implement TPM attestation statement verification
2022-09-20 16:50:26 -07:00
Brandon Weeks
6f2b4d3042
Add ACME permanent-identifier identifier type
2022-09-20 16:48:28 -07:00
Brandon Weeks
f3d2bd7a19
Run on plaintext HTTP to support Cloud Run
2022-09-20 16:43:30 -07:00
Mariano Cano
746ee2b6db
Upgrade go.step.sm/cli-utils
...
Fixes issue with step path
2022-09-20 16:41:39 -07:00
Mariano Cano
a795f4281c
Upgrade to go.step.sm/crypto v0.18.0
2022-09-20 16:41:10 -07:00
Herman Slatman
25cbe02b9e
Add provisioner template validation
...
Fixes #1012
2022-09-20 16:40:25 -07:00
Max
2de7d3fcf0
Update authority/provisioner/claims.go
...
Co-authored-by: Mariano Cano <mariano@smallstep.com>
2022-09-20 16:35:43 -07:00
max furman
ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors
2022-09-20 16:35:41 -07:00
Mariano Cano
3f58f30b21
Name tests properly
2022-09-20 15:53:08 -07:00
Mariano Cano
75bff055fc
Add StatusCoder to ConstraintError
2022-09-20 14:45:47 -07:00
Mariano Cano
2959aa676d
Add helper ValidateCertificate
2022-09-20 13:12:34 -07:00
Mariano Cano
8b54e25f64
Allow nil engines
2022-09-20 12:33:03 -07:00
Mariano Cano
2a15e3eee1
Rename constraint.Service to constraint.Engine
2022-09-20 11:38:32 -07:00
Mariano Cano
45e594f98c
Make the constraint service public
2022-09-20 11:36:45 -07:00
Mariano Cano
7bea2f4d0e
Add more constraint unit tests
2022-09-20 11:33:36 -07:00
Mariano Cano
495494ce8f
Return a typed error
2022-09-20 10:36:44 -07:00
Mariano Cano
6686f0437d
Remove x509 prefixes
2022-09-20 10:23:51 -07:00
Mariano Cano
0263468424
Initial work on name constraints validation
...
Issue #1060
2022-09-19 19:45:13 -07:00
Mariano Cano
fcb9d88223
Merge pull request #1058 from smallstep/acme-errors
...
Return the internal error instead of the ACME error
2022-09-19 14:31:54 -07:00
Mariano Cano
7dc2067cb2
Update acme/errors.go
...
Co-authored-by: Max <mx.furman@gmail.com>
2022-09-19 14:24:39 -07:00
Mariano Cano
226d36f66f
Fix unit tests
2022-09-19 14:17:30 -07:00
Mariano Cano
8cf6675ce4
Return the internal error instead of the ACME error
...
For ACME errors, return the internal error string instead of the
ACME one on the "Error() string" function. This way the logs will
have more information about the cause of an error.
Fixes #1057
2022-09-19 12:48:35 -07:00