Commit graph

  • fa4986d215
    [actiono] Update workflows max furman 2022-09-23 23:18:45 -0700
  • 2b19ba41fb Merge branch 'master' into name-constraints Mariano Cano 2022-09-23 11:07:57 -0700
  • c9e7af3722 Use only name constraints in GetTLSCertificate Mariano Cano 2022-09-23 11:04:27 -0700
  • 0bedd22850 Fix typos in WithX509IntermediateCerts comment Mariano Cano 2022-09-23 10:55:20 -0700
  • 8374c0d26e Fix some more extra white spaces Mariano Cano 2022-09-23 10:52:24 -0700
  • 965d59c0a8 Fix comment typos and extra white spaces Mariano Cano 2022-09-23 10:50:44 -0700
  • 7830c5bd72
    [action] add libpcsclite-dev os-dependency max furman 2022-09-22 15:30:27 -0700
  • 4c5945471a
    Empty-Commit max/test max furman 2022-09-22 15:27:55 -0700
  • 2eba5326db Remove policy validation on renew Mariano Cano 2022-09-22 12:17:16 -0700
  • ccd93684c3 Remove unused variable Mariano Cano 2022-09-22 11:54:21 -0700
  • bc838c3af2
    Merge pull request #1064 from smallstep/max/lint Max 2022-09-22 11:46:55 -0700
  • 246566a195 Change way to get hasNameConstraints Mariano Cano 2022-09-22 11:35:11 -0700
  • b94c0d09be Set up test properly Mariano Cano 2022-09-22 11:07:28 -0700
  • 0214e015a0 Clarify comments by code review Mariano Cano 2022-09-22 11:07:22 -0700
  • 23045e1812 Clarify comments by code review Mariano Cano 2022-09-22 11:05:06 -0700
  • 4c7a2ce3eb
    Fix errors.As linter warnings max furman 2022-09-22 00:04:31 -0700
  • 15dc7901e5 Fix unit tests Mariano Cano 2022-09-21 18:46:46 -0700
  • d68c765e20 Add context to errors Mariano Cano 2022-09-21 18:46:34 -0700
  • 72e2c4eb2e Render proper policy and constrains errors Mariano Cano 2022-09-21 18:35:18 -0700
  • 4b79405dac Check constraints and policy for leaf certificates too Mariano Cano 2022-09-21 15:54:28 -0700
  • a6e85cbbf6 Fix linter errors Mariano Cano 2022-09-21 14:56:15 -0700
  • 325d8bca4f Merge branch 'master' into name-constraints Mariano Cano 2022-09-21 13:29:44 -0700
  • d46c5b2f40
    Merge pull request #1062 from smallstep/max/lint2 Max 2022-09-21 13:09:42 -0700
  • aa3ffea07c
    [action] update codeql cron max furman 2022-09-21 12:34:08 -0700
  • 2d4efc8292
    Fix linter warnings max furman 2022-09-21 12:29:20 -0700
  • 75bb196193
    Add concurrency workflow config | fix broken test due to golang ver max furman 2022-09-21 12:26:45 -0700
  • a8125846dd
    Add TPM attestation Herman Slatman 2022-09-21 14:58:03 +0200
  • fe7db2ae02
    Fix shadowed variable herman/acme-da-roots Herman Slatman 2022-09-21 14:41:19 +0200
  • 711af6d0d6
    Fix linting issue Herman Slatman 2022-09-21 14:35:51 +0200
  • ce3215c702
    Merge branch 'master' into herman/acme-da-roots Herman Slatman 2022-09-21 14:27:57 +0200
  • 8b44c0924b
    Merge branch 'master' into herman/acme-da-roots Herman Slatman 2022-09-21 12:53:20 +0200
  • 120629edab
    Do not use the templateError in the BadRequestErr max furman 2022-09-20 23:07:16 -0700
  • c26d2c8328
    Empty-Commit max furman 2022-09-20 22:27:50 -0700
  • 89bccf7796
    [action] update test and release action to use common workflows max furman 2022-09-20 22:16:46 -0700
  • ffff9af323
    linting and fixing review feedback max furman 2022-09-20 22:12:08 -0700
  • 7c5e5b2b87
    Even more linter fixes max furman 2022-09-20 21:48:04 -0700
  • f3d1863ec6
    A few more linter errors max furman 2022-09-20 21:01:55 -0700
  • 6af9437875
    Rebase over master and a few more linter fixes max furman 2022-09-20 16:32:49 -0700
  • 18a648cffa
    Fix linter warning about bad error name max furman 2022-09-20 15:54:59 -0700
  • 1e0ea6f958
    more linting fixes max furman 2022-09-20 15:46:59 -0700
  • 33458c88aa
    Standardize linting file and fix or ignore lots of linting errors max furman 2022-08-23 12:43:48 -0700
  • 99299faeeb
    Add AuthorizeChallenge unit tests Mariano Cano 2022-08-24 12:31:09 -0700
  • f0a24bd8ca
    Add acme property to enable challenges Mariano Cano 2022-08-23 17:11:40 -0700
  • 567d96c771
    Revert "Run on plaintext HTTP to support Cloud Run" Mariano Cano 2022-08-22 17:50:14 -0700
  • 191d9e8629
    Use go.step.sm/crypto to set the permanent identifier Mariano Cano 2022-08-10 17:38:18 -0700
  • debe565e42 Validate constraints on Sign and Renew/Rekey Mariano Cano 2022-09-20 18:52:47 -0700
  • 2b3b2c283a
    Add attestation certificate validation for Apple devices Mariano Cano 2022-07-14 17:10:03 -0700
  • 89b6aa924a Normalize IPs in matchIPConstraint Mariano Cano 2022-09-20 18:44:15 -0700
  • 5f5315260a
    iOS 16 beta 1 support Brandon Weeks 2022-06-06 21:09:31 -0700
  • de5b0ef5c2
    Verify key authorization is contained within the TPM quote extraData field Brandon Weeks 2022-05-31 18:51:17 -0700
  • 248da10f32
    Implement TPM attestation statement verification Brandon Weeks 2022-04-08 20:49:11 +0000
  • 6f2b4d3042
    Add ACME permanent-identifier identifier type Brandon Weeks 2022-06-07 19:35:07 -0700
  • f3d2bd7a19
    Run on plaintext HTTP to support Cloud Run Brandon Weeks 2022-06-07 19:04:16 -0700
  • 746ee2b6db
    Upgrade go.step.sm/cli-utils Mariano Cano 2022-08-25 15:37:35 -0700
  • a795f4281c
    Upgrade to go.step.sm/crypto v0.18.0 Mariano Cano 2022-08-25 12:40:31 -0700
  • 25cbe02b9e
    Add provisioner template validation Herman Slatman 2022-08-23 16:27:11 +0200
  • 2de7d3fcf0
    Update authority/provisioner/claims.go Max 2022-08-23 21:35:11 -0700
  • ab0d2503ae
    Standardize linting file and fix or ignore lots of linting errors max furman 2022-08-23 12:43:48 -0700
  • 3f58f30b21 Name tests properly Mariano Cano 2022-09-20 15:53:08 -0700
  • 75bff055fc Add StatusCoder to ConstraintError Mariano Cano 2022-09-20 14:45:47 -0700
  • 2959aa676d Add helper ValidateCertificate Mariano Cano 2022-09-20 13:12:34 -0700
  • 8b54e25f64 Allow nil engines Mariano Cano 2022-09-20 12:33:03 -0700
  • 2a15e3eee1 Rename constraint.Service to constraint.Engine Mariano Cano 2022-09-20 11:38:32 -0700
  • 45e594f98c Make the constraint service public Mariano Cano 2022-09-20 11:36:45 -0700
  • 7bea2f4d0e Add more constraint unit tests Mariano Cano 2022-09-20 11:33:36 -0700
  • 495494ce8f Return a typed error Mariano Cano 2022-09-20 10:36:44 -0700
  • 6686f0437d Remove x509 prefixes Mariano Cano 2022-09-20 10:23:51 -0700
  • 0263468424 Initial work on name constraints validation Mariano Cano 2022-09-19 19:45:13 -0700
  • fcb9d88223
    Merge pull request #1058 from smallstep/acme-errors Mariano Cano 2022-09-19 14:31:54 -0700
  • 7dc2067cb2
    Update acme/errors.go Mariano Cano 2022-09-19 14:24:39 -0700
  • 226d36f66f Fix unit tests Mariano Cano 2022-09-19 14:17:30 -0700
  • 8cf6675ce4 Return the internal error instead of the ACME error Mariano Cano 2022-09-19 12:48:35 -0700
  • 6cdaaf5e0c
    Merge pull request #1055 from smallstep/acme-att-info Mariano Cano 2022-09-16 14:30:46 -0700
  • 34c6c65671 Pass attestation information to the Sign method Mariano Cano 2022-09-16 12:37:41 -0700
  • b0d24fb801 Fix test with gcloud local credentialss Mariano Cano 2022-09-16 12:35:09 -0700
  • baeb053eca
    Merge pull request #1053 from smallstep/acme-roots Mariano Cano 2022-09-16 11:07:46 -0700
  • 498549c95c Extract common function used in tests Mariano Cano 2022-09-16 10:02:10 -0700
  • 829530ae90 Fix linter errors Mariano Cano 2022-09-15 18:24:43 -0700
  • 6b73a020e3 Add unit tests for apple and step attestations Mariano Cano 2022-09-15 18:19:52 -0700
  • 42102d88d5 Fix merge and add unit tests Mariano Cano 2022-09-15 15:50:04 -0700
  • ee7307bd41 Cherry-pick acme.go from acdfdf3 Mariano Cano 2022-09-15 14:45:14 -0700
  • 2505a68f69
    Merge pull request #1052 from smallstep/fix-nil-pointer Mariano Cano 2022-09-15 13:15:00 -0700
  • 8fc4a58242 Fix nil pointer exception, missing error Mariano Cano 2022-09-15 13:05:39 -0700
  • 40baf73dff remove incorrect check on revoked certificate dates, add mutex lock for generating CRLs, Raal Goff 2022-09-15 15:03:42 +0800
  • 4e19aa4c52 Add cache duration if crl is set Mariano Cano 2022-09-14 12:21:52 -0700
  • 221e756f40 Use render.Error on crl endpoint Mariano Cano 2022-09-14 11:50:11 -0700
  • 0829f37fe8 Define a default crl cache duration Mariano Cano 2022-09-14 11:43:58 -0700
  • 4a4f7ca9ba Fix panic if cacheDuration is not set Mariano Cano 2022-09-14 11:16:47 -0700
  • 25f0bf31f4
    Update build status svg and link to github actions max furman 2022-09-14 13:53:30 -0400
  • df975122a0 Upgrade linkedca and add entry to changelog v0.23.0-rc.1 Mariano Cano 2022-09-12 16:30:41 -0700
  • 666f695616
    Merge pull request #1048 from smallstep/attest-platform Mariano Cano 2022-09-12 14:09:35 -0700
  • bb0210e875 Fix typo in linkedca variable Mariano Cano 2022-09-09 14:34:32 -0700
  • 1e098aef5b Fixes ACMEAttestationFormat comment Mariano Cano 2022-09-09 10:57:32 -0700
  • 66407139e5 Add methods to convert attestation formats Mariano Cano 2022-09-08 17:49:24 -0700
  • 0f651799d0 Reject not enabled attestation formats Mariano Cano 2022-09-08 17:38:05 -0700
  • 53ad3a9dbe Add go workspaces files to gitignore Mariano Cano 2022-09-08 17:24:51 -0700
  • ba42aaf865 Add attestationFormat property in the ACME provisioner Mariano Cano 2022-09-08 17:16:50 -0700
  • bffb8542d5
    Merge branch 'master' into herman/acme-da-roots Herman Slatman 2022-09-08 23:10:37 +0200
  • b2119e9f2c
    Merge pull request #977 from smallstep/device-attestation Mariano Cano 2022-09-08 13:26:28 -0700
  • fd4e96d1f4 Rename method to IsChallengeEnabled Mariano Cano 2022-09-08 13:22:35 -0700