Commit graph

3113 commits

Author SHA1 Message Date
Mariano Cano
8200d19894
Improve CRL implementation
This commit adds some changes to PR #731, some of them are:
- Add distribution point to the CRL
- Properly stop the goroutine that generates the CRLs
- CRL config validation
- Remove expired certificates from the CRL
- Require enable set to true to generate a CRL

This last point is the principal change in behaviour from the previous
implementation. The CRL will not be generated if it's not enabled, and
if it is enabled it will always be regenerated at some point, not only
if there is a revocation.
2022-10-26 18:55:24 -07:00
Raal Goff
f7df865687 refactor crl config, add some tests 2022-10-07 10:30:00 +08:00
Raal Goff
d0e81af524 Merge branch 'master' into crl-support 2022-09-30 08:45:48 +08:00
Mariano Cano
6fe0fc852a
Merge pull request #1076 from smallstep/attestation-roots
ACME attestation roots
2022-09-29 16:21:33 -07:00
Mariano Cano
906c5067b9
Include attestation roots on provisioner converters 2022-09-29 16:12:55 -07:00
Mariano Cano
9d4bef8cc9
Merge pull request #1072 from smallstep/name-constraints-changelog
Add name constraints support to changelog
2022-09-27 13:12:13 -07:00
Mariano Cano
de73a3e8de
Merge pull request #1073 from smallstep/prompt-password
Support to ask for key password after crypto change
2022-09-27 12:41:37 -07:00
Max
bfe29def59
Merge pull request #1065 from smallstep/max/code-scan
[actiono] Update workflows
2022-09-27 12:26:29 -07:00
Mariano Cano
1f4443d858
Support to ask for key password after crypto change
A change in crypto will remove the dependency of the ui package
used for prompting passwords.
2022-09-27 12:03:51 -07:00
Mariano Cano
a3c7e0b15b
Clarify name constraints changelog 2022-09-27 11:03:27 -07:00
Mariano Cano
d0bba915f2
Add name constraints support to changelog 2022-09-27 10:30:35 -07:00
Mariano Cano
fa7c55a0ec
Merge pull request #1061 from smallstep/name-constraints
Name Constraints Validation
2022-09-27 10:26:46 -07:00
Max
ea229e2ba8
Create dependabot.yml 2022-09-26 16:32:51 -07:00
max furman
2fcadce977
[action] remove extraneous new line 2022-09-26 15:48:46 -07:00
max furman
630e7fbba9
[action] Adding the libpcsclite.pc package back. 2022-09-26 15:48:21 -07:00
max furman
8e2fc8ea5a
[action] Don't need cgo enabled build for step-ca. 2022-09-26 15:42:30 -07:00
Mariano Cano
7d46516bbf
Testing SSH signing 2022-09-26 13:02:11 -07:00
max furman
68f571645b
[action] Update code-scan-cron 2022-09-23 23:37:11 -07:00
max furman
fa4986d215
[actiono] Update workflows 2022-09-23 23:21:44 -07:00
Mariano Cano
2b19ba41fb Merge branch 'master' into name-constraints 2022-09-23 11:07:57 -07:00
Mariano Cano
c9e7af3722 Use only name constraints in GetTLSCertificate 2022-09-23 11:04:27 -07:00
Mariano Cano
0bedd22850 Fix typos in WithX509IntermediateCerts comment 2022-09-23 10:55:20 -07:00
Mariano Cano
8374c0d26e Fix some more extra white spaces 2022-09-23 10:52:24 -07:00
Mariano Cano
965d59c0a8 Fix comment typos and extra white spaces 2022-09-23 10:50:44 -07:00
max furman
7830c5bd72
[action] add libpcsclite-dev os-dependency 2022-09-22 15:30:27 -07:00
Mariano Cano
2eba5326db Remove policy validation on renew 2022-09-22 12:17:16 -07:00
Mariano Cano
ccd93684c3 Remove unused variable 2022-09-22 11:54:21 -07:00
Max
bc838c3af2
Merge pull request #1064 from smallstep/max/lint
Fix errors.As linter warnings
2022-09-22 11:46:55 -07:00
Mariano Cano
246566a195 Change way to get hasNameConstraints 2022-09-22 11:35:11 -07:00
Mariano Cano
b94c0d09be Set up test properly 2022-09-22 11:07:28 -07:00
Mariano Cano
0214e015a0 Clarify comments by code review 2022-09-22 11:07:22 -07:00
Mariano Cano
23045e1812 Clarify comments by code review 2022-09-22 11:05:06 -07:00
max furman
4c7a2ce3eb
Fix errors.As linter warnings 2022-09-22 00:04:31 -07:00
Mariano Cano
15dc7901e5 Fix unit tests 2022-09-21 18:46:46 -07:00
Mariano Cano
d68c765e20 Add context to errors 2022-09-21 18:46:34 -07:00
Mariano Cano
72e2c4eb2e Render proper policy and constrains errors 2022-09-21 18:35:18 -07:00
Mariano Cano
4b79405dac Check constraints and policy for leaf certificates too 2022-09-21 15:54:28 -07:00
Mariano Cano
a6e85cbbf6 Fix linter errors 2022-09-21 14:56:15 -07:00
Mariano Cano
325d8bca4f Merge branch 'master' into name-constraints 2022-09-21 13:29:44 -07:00
Max
d46c5b2f40
Merge pull request #1062 from smallstep/max/lint2
Linter Update
2022-09-21 13:09:42 -07:00
max furman
aa3ffea07c
[action] update codeql cron 2022-09-21 12:34:08 -07:00
max furman
2d4efc8292
Fix linter warnings 2022-09-21 12:29:20 -07:00
max furman
75bb196193
Add concurrency workflow config | fix broken test due to golang ver 2022-09-21 12:26:45 -07:00
max furman
120629edab
Do not use the templateError in the BadRequestErr 2022-09-20 23:07:16 -07:00
max furman
c26d2c8328
Empty-Commit 2022-09-20 22:27:50 -07:00
max furman
89bccf7796
[action] update test and release action to use common workflows 2022-09-20 22:16:46 -07:00
max furman
ffff9af323
linting and fixing review feedback 2022-09-20 22:12:08 -07:00
max furman
7c5e5b2b87
Even more linter fixes 2022-09-20 21:48:04 -07:00
max furman
f3d1863ec6
A few more linter errors 2022-09-20 21:01:55 -07:00
max furman
6af9437875
Rebase over master and a few more linter fixes 2022-09-20 19:05:12 -07:00