certificates/cas
Mariano Cano c7f226bcec
Add support for renew when using stepcas
It supports renewing X.509 certificates when an RA is configured with stepcas.
This will only work when the renewal uses a token, and it won't work with mTLS.

The audience cannot be properly verified when an RA is used, to avoid this we
will get from the database if an RA was used to issue the initial certificate
and we will accept the renew token.

Fixes #1021 for stepcas
2022-11-04 16:42:07 -07:00
..
apiv1 Add support for renew when using stepcas 2022-11-04 16:42:07 -07:00
cloudcas Even more linter fixes 2022-09-20 21:48:04 -07:00
softcas Improve CRL implementation 2022-10-26 18:55:24 -07:00
stepcas Add support for renew when using stepcas 2022-11-04 16:42:07 -07:00
vaultcas Fix linter warning about bad error name 2022-09-20 19:05:12 -07:00
cas.go Enable default cas implementation. 2020-11-03 12:45:31 -08:00
cas_test.go Use go.step.sm/crypto/kms 2022-08-08 17:58:18 -07:00