Herman Slatman
0524122191
Remove authorization flow for different Account private keys
...
As discussed in https://github.com/smallstep/certificates/issues/767 ,
we opted for not including this authorization flow to prevent users
from getting OOMs. We can add the functionality back when the
underlying data store can provide access to a long list of
Authorizations more efficiently, for example when a callback is
implemented.
2021-12-08 16:28:14 +01:00
Herman Slatman
004fc054d5
Fix PR comments
2021-12-03 15:06:28 +01:00
Herman Slatman
47a8a3c463
Add test case for ACME Revoke to Authority
2021-12-02 17:11:36 +01:00
Herman Slatman
06bb97c91e
Add logic for Account authorizations and improve tests
2021-12-02 16:25:35 +01:00
Herman Slatman
bae1d256ee
Improve tests for JWK vs. KID revoke auth flow
...
The logic for both test cases is fairly similar, but with some
small differences. Made those clearer by means of some comments.
Also added some comments to the middleware logic that decided
whether to extract JWK or lookup by KID.
2021-12-02 10:59:56 +01:00
Herman Slatman
a7fbbc4748
Add tests for GetCertificateBySerial
2021-11-28 21:20:57 +01:00
Herman Slatman
4d01cf8135
Increase test code coverage
2021-11-28 20:30:36 +01:00
Herman Slatman
2d357da99b
Add tests for ACME revocation
2021-11-26 17:27:42 +01:00
Herman Slatman
ed295ca15d
Fix linting issue
2021-11-25 00:44:21 +01:00
Herman Slatman
c9cd876a7d
Merge branch 'master' into hs/acme-revocation
2021-11-25 00:40:56 +01:00
Mariano Cano
78acf35bf4
Merge pull request #753 from scattered-network/docker-compose-go-mod-updates
...
Docker Example Fix: Remove Step Build
2021-11-24 14:42:44 -08:00
JJ
cbb0f40696
Revert "Update Go Modules: Fixes Docker Example"
...
This reverts commit 11a1297bf5
2021-11-24 04:45:51 +00:00
JJ
3c5d1c9d3f
Use smallstep/small-cli as base image, remove step cli build
2021-11-24 04:44:28 +00:00
Carl Tashian
d83ca96d2a
Fixes #757
2021-11-23 18:12:31 -08:00
Carl Tashian
a067b3acad
Add a note about reload-or-try-restart in systemd
2021-11-23 17:23:24 -08:00
Mariano Cano
4f84cef0cf
Merge pull request #752 from smallstep/errors-bad-request
...
Bad request errors
2021-11-22 13:16:04 -08:00
Carl Tashian
d925bc6ba9
Fix systemd renewer to use sh
2021-11-22 11:03:05 -08:00
JJ
11a1297bf5
Update Go Modules: Fixes Docker Example
...
go.mod: update requirements to fix build errors in docker example
go.sum: hashes updated to match updated requirements
2021-11-20 17:17:21 -08:00
Herman Slatman
2d50c96d99
Merge branch 'master' into hs/acme-revocation
2021-11-19 17:00:18 +01:00
Mariano Cano
aa3fdf8fb9
Do not overwrite errors.
2021-11-18 19:03:43 -08:00
Mariano Cano
b6ebd118fc
Update temporal solution for sending message to users
2021-11-18 18:47:55 -08:00
Mariano Cano
668d3ea6c7
Modify errs.Wrap() with bad request to send messages to users.
2021-11-18 18:44:58 -08:00
Mariano Cano
8c8db0d4b7
Modify errs.BadRequestErr() to always return an error to the client.
2021-11-18 18:17:36 -08:00
Mariano Cano
8ce807a6cb
Modify errs.BadRequest() calls to always send an error to the client.
2021-11-18 15:12:44 -08:00
max furman
8d229b9a60
update commented template names to match reality
2021-11-17 21:42:53 -08:00
Mariano Cano
91878051c1
Merge pull request #741 from gdbelvin/ssh
...
Support CSR Requests from PKCS11
2021-11-17 16:07:23 -08:00
Mariano Cano
febb619882
Add some extra validation and print certificate objects
...
This commit also changes the following flags for consistency:
- --crt-cert to --crt-cert-obj
- --crt-key to --crt-key-obj
2021-11-17 15:48:52 -08:00
max furman
fca7de6696
changelog update for 0.18.0
2021-11-17 12:33:03 -08:00
Max
de2ce5cf9f
Merge pull request #692 from smallstep/max/context
...
Context management
2021-11-17 12:06:42 -08:00
Mariano Cano
440616cffa
Merge pull request #750 from smallstep/duration-errors
...
Report duration errors directly to the cli.
2021-11-17 12:06:31 -08:00
Mariano Cano
acd0bac025
Remove extra and in comment.
2021-11-17 12:03:29 -08:00
Mariano Cano
1aadd63cef
Use always badRequest on duration errors.
2021-11-17 12:00:54 -08:00
max furman
df2843657f
[action] only run codecov for go 1.17
2021-11-17 11:51:33 -08:00
Mariano Cano
41fec1577d
Report duration errors directly to the cli.
2021-11-17 11:46:57 -08:00
max furman
7fac8c96c3
Merge branch 'master' into max/context
2021-11-17 11:40:01 -08:00
Max
0a53af9efc
Merge pull request #742 from hslatman/hs/fix-golangci-lint-1.43.0
...
Pin golangci-lint to v1.43.0 and fix issues
2021-11-17 11:26:33 -08:00
max furman
196f6b45c9
bump cli-utils to 0.7.0
2021-11-16 21:49:18 -08:00
max furman
b5bf79b84e
bump nosql library
2021-11-16 21:48:43 -08:00
max furman
555431448c
bump version ofcli-utils
2021-11-16 21:48:38 -08:00
max furman
922d239171
Simplify conditional
2021-11-16 21:47:14 -08:00
max furman
a7d144996f
SSH backwards compat updates
...
- use existence of new value in data map as boolean
- add tests for backwards and forwards compatibility
- fix old tests that used static dir locations
2021-11-16 21:47:14 -08:00
max furman
d37313bef4
Use 0600 for profile defaults file.
2021-11-16 21:47:14 -08:00
max furman
507be61e8c
Use a more distint map key to indicate template version
...
- make the key a variable that can be reused on the CLI side.
2021-11-16 21:47:14 -08:00
max furman
f426c152a9
backwards compatibility for version of cli older than v0.18.0
2021-11-16 21:47:14 -08:00
max furman
c80a64d0e6
ssh/step_config.tpl context flag in wrong spot
2021-11-16 21:47:14 -08:00
max furman
fcc15174ea
Rename templates and create profileConfig dir ahead of time.
2021-11-16 21:47:14 -08:00
max furman
43cba993bb
PR fixes
...
- Line -> PrependLine
- dont' overwrite profileDefaults
- update ssh/config.tpl to always include includes file
2021-11-16 21:47:14 -08:00
max furman
3e9830e363
Use profileDefaults in PKI
...
- write profile defaults at the same time as authority defaults
2021-11-16 21:47:14 -08:00
max furman
c8560b4854
updated method name in cli-utils
2021-11-16 21:47:14 -08:00
max furman
9d4a7cf9fc
Update includes template to use STEPPATH as the replace var
2021-11-16 21:47:14 -08:00
