Mariano Cano
8200d19894
Improve CRL implementation
...
This commit adds some changes to PR #731 , some of them are:
- Add distribution point to the CRL
- Properly stop the goroutine that generates the CRLs
- CRL config validation
- Remove expired certificates from the CRL
- Require enable set to true to generate a CRL
This last point is the principal change in behaviour from the previous
implementation. The CRL will not be generated if it's not enabled, and
if it is enabled it will always be regenerated at some point, not only
if there is a revocation.
2022-10-26 18:55:24 -07:00
Raal Goff
f7df865687
refactor crl config, add some tests
2022-10-07 10:30:00 +08:00
Raal Goff
d0e81af524
Merge branch 'master' into crl-support
2022-09-30 08:45:48 +08:00
Mariano Cano
6fe0fc852a
Merge pull request #1076 from smallstep/attestation-roots
...
ACME attestation roots
2022-09-29 16:21:33 -07:00
Mariano Cano
906c5067b9
Include attestation roots on provisioner converters
2022-09-29 16:12:55 -07:00
Mariano Cano
9d4bef8cc9
Merge pull request #1072 from smallstep/name-constraints-changelog
...
Add name constraints support to changelog
2022-09-27 13:12:13 -07:00
Mariano Cano
de73a3e8de
Merge pull request #1073 from smallstep/prompt-password
...
Support to ask for key password after crypto change
2022-09-27 12:41:37 -07:00
Max
bfe29def59
Merge pull request #1065 from smallstep/max/code-scan
...
[actiono] Update workflows
2022-09-27 12:26:29 -07:00
Mariano Cano
1f4443d858
Support to ask for key password after crypto change
...
A change in crypto will remove the dependency of the ui package
used for prompting passwords.
2022-09-27 12:03:51 -07:00
Mariano Cano
a3c7e0b15b
Clarify name constraints changelog
2022-09-27 11:03:27 -07:00
Mariano Cano
d0bba915f2
Add name constraints support to changelog
2022-09-27 10:30:35 -07:00
Mariano Cano
fa7c55a0ec
Merge pull request #1061 from smallstep/name-constraints
...
Name Constraints Validation
2022-09-27 10:26:46 -07:00
Max
ea229e2ba8
Create dependabot.yml
2022-09-26 16:32:51 -07:00
max furman
2fcadce977
[action] remove extraneous new line
2022-09-26 15:48:46 -07:00
max furman
630e7fbba9
[action] Adding the libpcsclite.pc package back.
2022-09-26 15:48:21 -07:00
max furman
8e2fc8ea5a
[action] Don't need cgo enabled build for step-ca
.
2022-09-26 15:42:30 -07:00
Mariano Cano
7d46516bbf
Testing SSH signing
2022-09-26 13:02:11 -07:00
max furman
68f571645b
[action] Update code-scan-cron
2022-09-23 23:37:11 -07:00
max furman
fa4986d215
[actiono] Update workflows
2022-09-23 23:21:44 -07:00
Mariano Cano
2b19ba41fb
Merge branch 'master' into name-constraints
2022-09-23 11:07:57 -07:00
Mariano Cano
c9e7af3722
Use only name constraints in GetTLSCertificate
2022-09-23 11:04:27 -07:00
Mariano Cano
0bedd22850
Fix typos in WithX509IntermediateCerts comment
2022-09-23 10:55:20 -07:00
Mariano Cano
8374c0d26e
Fix some more extra white spaces
2022-09-23 10:52:24 -07:00
Mariano Cano
965d59c0a8
Fix comment typos and extra white spaces
2022-09-23 10:50:44 -07:00
max furman
7830c5bd72
[action] add libpcsclite-dev os-dependency
2022-09-22 15:30:27 -07:00
Mariano Cano
2eba5326db
Remove policy validation on renew
2022-09-22 12:17:16 -07:00
Mariano Cano
ccd93684c3
Remove unused variable
2022-09-22 11:54:21 -07:00
Max
bc838c3af2
Merge pull request #1064 from smallstep/max/lint
...
Fix errors.As linter warnings
2022-09-22 11:46:55 -07:00
Mariano Cano
246566a195
Change way to get hasNameConstraints
2022-09-22 11:35:11 -07:00
Mariano Cano
b94c0d09be
Set up test properly
2022-09-22 11:07:28 -07:00
Mariano Cano
0214e015a0
Clarify comments by code review
2022-09-22 11:07:22 -07:00
Mariano Cano
23045e1812
Clarify comments by code review
2022-09-22 11:05:06 -07:00
max furman
4c7a2ce3eb
Fix errors.As linter warnings
2022-09-22 00:04:31 -07:00
Mariano Cano
15dc7901e5
Fix unit tests
2022-09-21 18:46:46 -07:00
Mariano Cano
d68c765e20
Add context to errors
2022-09-21 18:46:34 -07:00
Mariano Cano
72e2c4eb2e
Render proper policy and constrains errors
2022-09-21 18:35:18 -07:00
Mariano Cano
4b79405dac
Check constraints and policy for leaf certificates too
2022-09-21 15:54:28 -07:00
Mariano Cano
a6e85cbbf6
Fix linter errors
2022-09-21 14:56:15 -07:00
Mariano Cano
325d8bca4f
Merge branch 'master' into name-constraints
2022-09-21 13:29:44 -07:00
Max
d46c5b2f40
Merge pull request #1062 from smallstep/max/lint2
...
Linter Update
2022-09-21 13:09:42 -07:00
max furman
aa3ffea07c
[action] update codeql cron
2022-09-21 12:34:08 -07:00
max furman
2d4efc8292
Fix linter warnings
2022-09-21 12:29:20 -07:00
max furman
75bb196193
Add concurrency workflow config | fix broken test due to golang ver
2022-09-21 12:26:45 -07:00
max furman
120629edab
Do not use the templateError in the BadRequestErr
2022-09-20 23:07:16 -07:00
max furman
c26d2c8328
Empty-Commit
2022-09-20 22:27:50 -07:00
max furman
89bccf7796
[action] update test and release action to use common workflows
2022-09-20 22:16:46 -07:00
max furman
ffff9af323
linting and fixing review feedback
2022-09-20 22:12:08 -07:00
max furman
7c5e5b2b87
Even more linter fixes
2022-09-20 21:48:04 -07:00
max furman
f3d1863ec6
A few more linter errors
2022-09-20 21:01:55 -07:00
max furman
6af9437875
Rebase over master and a few more linter fixes
2022-09-20 19:05:12 -07:00