mbiryukova/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity
1716 commits 33 branches 197 tags 41 MiB
Commit graph

29 commits

Author SHA1 Message Date
Herman Slatman
9bda3c465a
Add more template data 2021-03-26 16:11:35 +01:00
Herman Slatman
b815478981
Make serving SCEP endpoints optional 
Only when a SCEP provisioner is enabled, the SCEP endpoints
will now be available.

The SCEP endpoints will be served on an "insecure" server,
without TLS, only when an additional "insecureAddress" and a
SCEP provisioner are configured for the CA.
 2021-03-26 16:05:33 +01:00
Herman Slatman
69d701062a
Fix typo 2021-03-26 15:24:27 +01:00
Herman Slatman
65aab963c9
Add validation to SCEP Options 2021-03-26 15:22:04 +01:00
Herman Slatman
b97f024f8a
Remove superfluous call to StoreCertificate 2021-03-26 14:02:52 +01:00
Herman Slatman
583d60dc0d
Address (most) PR comments 2021-03-21 16:42:41 +01:00
Herman Slatman
a4844fee7b
Make tests green 2021-03-12 16:58:52 +01:00
Herman Slatman
e30084c9a8
Make linter happy 2021-03-12 16:02:00 +01:00
Herman Slatman
3e0dac3ab4
Fix certificateChain property 2021-03-12 15:51:16 +01:00
Herman Slatman
e1cab4966f
Improve initialization of SCEP authority 2021-03-12 15:49:39 +01:00
Herman Slatman
538fe8114d
Fix linter issues 2021-03-10 22:39:20 +01:00
Herman Slatman
cc1ecb9438
Store new certificates in database 2021-03-10 22:20:02 +01:00
Herman Slatman
9902dc1079
Add signed failure responses 2021-03-10 21:13:05 +01:00
Herman Slatman
2536a08dc2
Add support for configuring capabilities (cacaps) 2021-03-07 00:50:00 +01:00
Herman Slatman
e4d7ea8fa0
Add support for challenge password 2021-03-07 00:30:37 +01:00
Herman Slatman
2d21b09d41
Remove some duplicate and unnecessary logic 2021-03-06 23:24:49 +01:00
Herman Slatman
9df5f513e7
Change to a fixed fork of go.mozilla.org/pkcs7 
Hopefully this will be a temporary change until
the fix is merged in the upstream module.
 2021-03-06 22:35:41 +01:00
Herman Slatman
3a5f633cdd
Add support for multiple SCEP provisioners 
Similarly to how ACME suppors multiple provisioners, it's
now possible to load the right provisioner based on the
URL.
 2021-03-05 12:40:42 +01:00
Herman Slatman
2fc5a7f22e
Improve SCEP API logic and error handling 2021-02-27 00:34:50 +01:00
Herman Slatman
a6d50f2fa0
Remove x509 template from API 2021-02-26 18:07:50 +01:00
Herman Slatman
311c9d767b
Add AuthorizeSign method to SCEP authority 2021-02-26 14:00:47 +01:00
Herman Slatman
4322933588
Add handling of options 2021-02-26 12:32:43 +01:00
Herman Slatman
19f0397fe9
Remove the copy of mozilla/pkcs7 
Apparently the existing library works out of the box, after all.

We'll have to see how it works out continuing forward.
 2021-02-26 00:55:37 +01:00
Herman Slatman
7ad90d10b3
Refactor initialization of SCEP authority 2021-02-26 00:32:21 +01:00
Herman Slatman
f871f8135c
Add full copy of mozilla/pkcs7 module as internal dependency 
The full contents of the git repository @432b2356ecb...
was copied. Only go.mod was removed from it.
 2021-02-25 22:28:08 +01:00
Herman Slatman
702032f2b7
Add number of certs to return and fix CR LF in CACaps 2021-02-19 12:06:24 +01:00
Herman Slatman
165f6a1ccd
Improve setup for multiple SCEP providers (slightly) 2021-02-19 11:01:19 +01:00
Herman Slatman
713b571d7a
Refactor SCEP authority initialization and clean some code 2021-02-12 17:02:39 +01:00
Herman Slatman
ffdd58ea3c
Add rudimentary (and incomplete) support for SCEP 2021-02-12 12:03:08 +01:00