mbiryukova/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity
3058 commits 33 branches 197 tags 41 MiB
Commit graph

1045 commits

Author SHA1 Message Date
Mariano Cano
0214e015a0 Clarify comments by code review 2022-09-22 11:07:22 -07:00
Mariano Cano
23045e1812 Clarify comments by code review 2022-09-22 11:05:06 -07:00
Mariano Cano
15dc7901e5 Fix unit tests 2022-09-21 18:46:46 -07:00
Mariano Cano
d68c765e20 Add context to errors 2022-09-21 18:46:34 -07:00
Mariano Cano
72e2c4eb2e Render proper policy and constrains errors 2022-09-21 18:35:18 -07:00
Mariano Cano
4b79405dac Check constraints and policy for leaf certificates too 2022-09-21 15:54:28 -07:00
Mariano Cano
a6e85cbbf6 Fix linter errors 2022-09-21 14:56:15 -07:00
Mariano Cano
325d8bca4f Merge branch 'master' into name-constraints 2022-09-21 13:29:44 -07:00
max furman
2d4efc8292
Fix linter warnings 2022-09-21 12:29:20 -07:00
max furman
75bb196193
Add concurrency workflow config | fix broken test due to golang ver 2022-09-21 12:26:45 -07:00
max furman
120629edab
Do not use the templateError in the BadRequestErr 2022-09-20 23:07:16 -07:00
max furman
7c5e5b2b87
Even more linter fixes 2022-09-20 21:48:04 -07:00
max furman
f3d1863ec6
A few more linter errors 2022-09-20 21:01:55 -07:00
max furman
1e0ea6f958
more linting fixes 2022-09-20 19:05:12 -07:00
max furman
33458c88aa
Standardize linting file and fix or ignore lots of linting errors 2022-09-20 19:05:12 -07:00
Mariano Cano
f0a24bd8ca
Add acme property to enable challenges 
Fixes #1027
 2022-09-20 19:01:53 -07:00
Mariano Cano
567d96c771
Revert "Run on plaintext HTTP to support Cloud Run" 
This reverts commit 09b9673a60.
 2022-09-20 18:57:46 -07:00
Mariano Cano
191d9e8629
Use go.step.sm/crypto to set the permanent identifier 2022-09-20 18:57:43 -07:00
Mariano Cano
debe565e42 Validate constraints on Sign and Renew/Rekey 
Fixes #1060
 2022-09-20 18:52:47 -07:00
Mariano Cano
89b6aa924a Normalize IPs in matchIPConstraint 2022-09-20 18:44:15 -07:00
Brandon Weeks
f3d2bd7a19
Run on plaintext HTTP to support Cloud Run 2022-09-20 16:43:30 -07:00
Herman Slatman
25cbe02b9e
Add provisioner template validation 
Fixes #1012
 2022-09-20 16:40:25 -07:00
Max
2de7d3fcf0
Update authority/provisioner/claims.go 
Co-authored-by: Mariano Cano <mariano@smallstep.com>
 2022-09-20 16:35:43 -07:00
max furman
ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2022-09-20 16:35:41 -07:00
Mariano Cano
3f58f30b21 Name tests properly 2022-09-20 15:53:08 -07:00
Mariano Cano
75bff055fc Add StatusCoder to ConstraintError 2022-09-20 14:45:47 -07:00
Mariano Cano
2959aa676d Add helper ValidateCertificate 2022-09-20 13:12:34 -07:00
Mariano Cano
8b54e25f64 Allow nil engines 2022-09-20 12:33:03 -07:00
Mariano Cano
2a15e3eee1 Rename constraint.Service to constraint.Engine 2022-09-20 11:38:32 -07:00
Mariano Cano
45e594f98c Make the constraint service public 2022-09-20 11:36:45 -07:00
Mariano Cano
7bea2f4d0e Add more constraint unit tests 2022-09-20 11:33:36 -07:00
Mariano Cano
495494ce8f Return a typed error 2022-09-20 10:36:44 -07:00
Mariano Cano
6686f0437d Remove x509 prefixes 2022-09-20 10:23:51 -07:00
Mariano Cano
0263468424 Initial work on name constraints validation 
Issue #1060
 2022-09-19 19:45:13 -07:00
Mariano Cano
34c6c65671 Pass attestation information to the Sign method 
Attestation information might be useful in authorizing webhooks
 2022-09-16 12:37:41 -07:00
Mariano Cano
42102d88d5 Fix merge and add unit tests 2022-09-15 15:50:04 -07:00
Mariano Cano
ee7307bd41 Cherry-pick acme.go from acdfdf3 2022-09-15 14:45:14 -07:00
Mariano Cano
8fc4a58242 Fix nil pointer exception, missing error 2022-09-15 13:05:39 -07:00
Mariano Cano
bb0210e875 Fix typo in linkedca variable 2022-09-09 14:34:32 -07:00
Mariano Cano
1e098aef5b Fixes ACMEAttestationFormat comment 2022-09-09 10:57:32 -07:00
Mariano Cano
66407139e5 Add methods to convert attestation formats 2022-09-08 17:49:24 -07:00
Mariano Cano
ba42aaf865 Add attestationFormat property in the ACME provisioner 2022-09-08 17:16:50 -07:00
Mariano Cano
b2119e9f2c
Merge pull request #977 from smallstep/device-attestation 
Device attestation
 2022-09-08 13:26:28 -07:00
Mariano Cano
fd4e96d1f4 Rename method to IsChallengeEnabled 2022-09-08 13:22:35 -07:00
Mariano Cano
c77b4ff9c5 Fix linter errors 2022-09-08 12:49:16 -07:00
Mariano Cano
59c5219a07 Use a type for acme challenges 2022-09-08 12:34:06 -07:00
Raal Goff
b89f210469 remove fail-email test and add ok-empty-email test 2022-09-07 07:45:27 +08:00
Mariano Cano
a2749ca8ed Merge branch 'master' into device-attestation 2022-09-06 12:29:06 -07:00
Raal Goff
7a03c43fe2 allow missing Email claim in OIDC tokens, use subject when its missing 2022-09-05 12:43:32 +08:00
Mariano Cano
1938b1bb34 Merge branch 'master' into herman/fix-template-validation 2022-08-25 13:31:33 -07:00