Commit graph

  • c77b4ff9c5 Fix linter errors Mariano Cano 2022-09-08 12:49:16 -0700
  • 59c5219a07 Use a type for acme challenges Mariano Cano 2022-09-08 12:34:06 -0700
  • a89bea701d Format comment Mariano Cano 2022-09-08 11:06:17 -0700
  • 5df9434286 Fix old comment, device-attest-01 uses the acme payload Mariano Cano 2022-09-08 10:59:51 -0700
  • c5d3714a63 Fix acme error map Mariano Cano 2022-09-08 10:48:17 -0700
  • 08815c5e90 Reneame attestation statement error Mariano Cano 2022-09-08 10:46:58 -0700
  • 3cd72ac72a Remove debug statements Mariano Cano 2022-09-08 10:44:48 -0700
  • 924082bb49 fix linter errors Raal Goff 2022-09-08 10:09:37 +0800
  • d2483f3a70 Merge branch 'master' into crl-support Raal Goff 2022-09-08 09:45:04 +0800
  • 55318efe13
    Merge pull request #1043 from unreality/oidc-missing-email Mariano Cano 2022-09-07 18:29:52 -0700
  • 1b68a9f961
    Merge pull request #1045 from smallstep/deprecation-notice Mariano Cano 2022-09-07 13:20:02 -0700
  • bc61b23d91 Add deprecation notices to step-x-init binaries Mariano Cano 2022-09-06 17:38:51 -0700
  • b89f210469 remove fail-email test and add ok-empty-email test Raal Goff 2022-09-07 07:45:27 +0800
  • a2749ca8ed Merge branch 'master' into device-attestation Mariano Cano 2022-09-06 12:29:06 -0700
  • 7a03c43fe2 allow missing Email claim in OIDC tokens, use subject when its missing Raal Goff 2022-09-05 12:43:32 +0800
  • acdfdf3451
    Add tpm attestation with configurable roots Herman Slatman 2022-09-02 19:01:50 +0200
  • e75e7e7cd6 Fix linter warnings Mariano Cano 2022-09-01 16:18:13 -0700
  • 54d92095ac Validate proof of possession signature Mariano Cano 2022-09-01 10:45:31 -0700
  • 45af68b244 Upgrade go.step.sm/crypto Mariano Cano 2022-08-31 11:36:07 -0700
  • d718c69ad3 Prepare changelog for release v0.22.1 Mariano Cano 2022-08-30 21:10:18 -0700
  • b8162d5954
    Merge pull request #1034 from smallstep/fix-1033 Mariano Cano 2022-08-30 21:03:22 -0700
  • a7fcfe0e4e Verify with roots and intermediates Mariano Cano 2022-08-30 17:11:44 -0700
  • 30c54a555d Add entry in changelog Mariano Cano 2022-08-30 16:57:31 -0700
  • ea8579f3df Fix bad signature algorithm on EC+RSA PKI Mariano Cano 2022-08-30 16:49:56 -0700
  • 59b7603d1e Use a clientAuth only cert for device-attest-01 Mariano Cano 2022-08-30 16:09:44 -0700
  • 6db631df51 Upgrade go.step.sm/crypto@attest Mariano Cano 2022-08-30 15:49:10 -0700
  • ca412e77cc Return error on attestation validation Mariano Cano 2022-08-29 20:03:34 -0700
  • ab5f916bd3 Define ErrorBadAttestationStatement Mariano Cano 2022-08-29 20:02:43 -0700
  • 735c9d49b0 Add support for yubikey attestation Mariano Cano 2022-08-29 19:37:30 -0700
  • ebce40e9b6 Add new method ACMEClient.ValidateWithPayload Mariano Cano 2022-08-29 19:35:52 -0700
  • a893d6e7f7 Upgrade go.step.sm/cli-utils v0.22.0 Mariano Cano 2022-08-25 15:37:35 -0700
  • 432477aa91
    Merge pull request #1030 from smallstep/herman/fix-template-validation Mariano Cano 2022-08-25 14:51:39 -0700
  • 1938b1bb34 Merge branch 'master' into herman/fix-template-validation Mariano Cano 2022-08-25 13:31:33 -0700
  • 1d1e024b84 Upgrade to go.step.sm/crypto v0.18.0 Mariano Cano 2022-08-25 12:40:31 -0700
  • f1c63bc38d Fix challenge mapping Mariano Cano 2022-08-24 19:30:28 -0700
  • 2a44972830 Run go mod tidy Mariano Cano 2022-08-24 19:23:31 -0700
  • df96b126dc Add AuthorizeChallenge unit tests Mariano Cano 2022-08-24 12:31:09 -0700
  • bca311b05e Add acme property to enable challenges Mariano Cano 2022-08-23 17:11:40 -0700
  • ae8d4d8757 Fix unit test Mariano Cano 2022-08-23 17:01:15 -0700
  • 6b7b989988
    Add provisioner template validation Herman Slatman 2022-08-23 16:27:11 +0200
  • 693dc39481 Merge branch 'master' into device-attestation Mariano Cano 2022-08-22 17:59:17 -0700
  • b1e9d5ee86 Revert "Run on plaintext HTTP to support Cloud Run" Mariano Cano 2022-08-22 17:50:14 -0700
  • dd6f59b538
    Merge pull request #1024 from smallstep/gosec Mariano Cano 2022-08-22 14:19:50 -0700
  • 23b8f45b37 Address gosec warnings Mariano Cano 2022-08-18 17:46:20 -0700
  • 713dfad884
    Merge pull request #1019 from smallstep/head-middleware Mariano Cano 2022-08-16 16:21:19 -0700
  • 8f88740a5a
    Merge pull request #1014 from smallstep/max/dns-id Max 2022-08-16 16:20:12 -0700
  • 6cab4d328e Add a middleware to automatically route HEAD requests to GET Mariano Cano 2022-08-16 16:10:29 -0700
  • c040e4b459 Add unit tests max furman 2022-08-16 15:48:23 -0700
  • 85fc837dc3
    Merge pull request #1018 from smallstep/ra-config Mariano Cano 2022-08-16 15:24:01 -0700
  • 3c88a9ccc2 Fixed changelog Mariano Cano 2022-08-16 15:11:49 -0700
  • 8e08f0dea3 Add entries to changelog Mariano Cano 2022-08-16 14:48:03 -0700
  • 0c7467ceb2 Allow to automatically configure and linked RA Mariano Cano 2022-08-16 14:39:02 -0700
  • 5e0be92273 Allow option to skip the validation of config Mariano Cano 2022-08-16 14:04:04 -0700
  • b7c2f6c482 Check for DNS name validity max furman 2022-08-15 23:03:18 -0700
  • ae76d943c9
    Merge pull request #1009 from smallstep/code-ql Mariano Cano 2022-08-11 18:53:30 -0700
  • 2db15e4eb5 Remove unnecessary log entries Mariano Cano 2022-08-11 18:14:36 -0700
  • 759aa26a57 Fix linter warning Mariano Cano 2022-08-11 17:47:58 -0700
  • 90d2785776 Sanitize log entries in logging package Mariano Cano 2022-08-11 17:44:31 -0700
  • b62f4d1000 Add lgtm comments on some security warnings Mariano Cano 2022-08-11 17:32:57 -0700
  • a5439c43cd Remove ciphersuites without Lucky13 countermeasures Mariano Cano 2022-08-11 17:11:04 -0700
  • d6baad443b
    Merge pull request #1008 from smallstep/endpoint-id Mariano Cano 2022-08-11 15:18:47 -0700
  • 8bd0174251 Rename field to IsCAServerCert Mariano Cano 2022-08-11 15:14:26 -0700
  • 5df1694250 Add endpoint id for the RA certificate Mariano Cano 2022-08-11 14:47:11 -0700
  • 20784c7a00
    Merge pull request #1006 from smallstep/max/revoke-serial-validation Max 2022-08-11 09:45:26 -0700
  • 1dd0d7d0ee Update bad serial error to be more specific max furman 2022-08-11 09:34:04 -0700
  • 73ba411e1d [action] parameterize golangci-lint version max furman 2022-08-10 21:45:10 -0700
  • eb091aec54 Simplify field names for ProvisionerInfo Mariano Cano 2022-08-10 17:44:14 -0700
  • 2f7cb9225f Use go.step.sm/crypto to set the permanent identifier Mariano Cano 2022-08-10 17:38:18 -0700
  • a65adc032b
    Merge pull request #1005 from smallstep/crypto-kms Mariano Cano 2022-08-10 09:57:26 -0700
  • 21427d5d65 Replace instead of prepend provisioner extension Mariano Cano 2022-08-09 16:48:00 -0700
  • 2ab1e6658e Fix nonce validation Mariano Cano 2022-08-09 15:06:52 -0700
  • 7052a32c2c Validate revocation serial number max furman 2022-08-09 11:04:00 -0700
  • 4985ab1d62 Remove kms package Mariano Cano 2022-08-08 18:01:10 -0700
  • 369b8f81c3 Use go.step.sm/crypto/kms Mariano Cano 2022-08-08 17:58:18 -0700
  • e02a190fa7 Merge branch 'master' into device-attestation Mariano Cano 2022-08-08 17:29:59 -0700
  • 3e2729e391
    Merge pull request #989 from smallstep/max/disable-ssh-hosts Max 2022-08-08 14:15:35 -0700
  • 9f67a808cd
    Merge pull request #1004 from smallstep/go-1.19 Mariano Cano 2022-08-08 12:35:49 -0700
  • f1aabaa99c Use functions from os instead of io/ioutil Mariano Cano 2022-08-08 12:12:53 -0700
  • 8445c29db6 Change actions to build using Go 1.19 Mariano Cano 2022-08-08 12:01:18 -0700
  • 99c9155467 disableSSHHostsListAPI -> disableGetSSHHosts max furman 2022-08-04 18:44:44 -0700
  • 38fb92452f
    Merge pull request #993 from smallstep/ra-ids Mariano Cano 2022-08-04 11:26:59 -0700
  • 22337da18c
    Merge pull request #990 from qbit/master Mariano Cano 2022-08-04 11:26:37 -0700
  • 821743f71e Upgrade newrelic to v3 Mariano Cano 2022-08-04 11:16:11 -0700
  • 135c481893 Update deps to bring in support for OpenBSD Aaron Bieber 2022-07-28 11:09:34 -0600
  • a2f7766943 Use released version of linkedca Mariano Cano 2022-08-04 10:31:57 -0700
  • c5c7c30cc2 Fix typo in ProvisionerInfo Mariano Cano 2022-08-04 10:07:20 -0700
  • 64744562c6 Send RA provisioner to linkedca. Mariano Cano 2022-08-03 18:44:25 -0700
  • 6b5d3dca95 Add provisioner name to RA info Mariano Cano 2022-08-03 18:44:04 -0700
  • 9648fe6b4c Remove debug statement Mariano Cano 2022-08-03 15:32:39 -0700
  • a1f54921d2 Rename internal field Mariano Cano 2022-08-03 12:07:45 -0700
  • f9df8ac05f Remove unused interface Mariano Cano 2022-08-03 12:03:49 -0700
  • 7a1e6a0e1f Fix and extend stepcas unit tests Mariano Cano 2022-08-03 11:57:42 -0700
  • 9408d0f24b Send RA provisioner information to the CA Mariano Cano 2022-08-02 19:28:49 -0700
  • a8819376d3 Remove empty lines on debug information Mariano Cano 2022-08-02 16:05:04 -0700
  • 87f28a7ec9
    Create codeql-analysis.yml Max 2022-08-01 11:16:08 -0700
  • 0efaf514d7
    Create SECURITY.md Max 2022-07-29 15:17:05 -0700
  • fb7f57a8df Add attribute to disable SSH Hosts list API max furman 2022-07-27 23:30:00 -0700
  • 01423e36c9 [action] combine label and triage project add in one workflow max furman 2022-07-24 22:38:34 -0700
  • 66356cff43 Add attestation certificate validation for Apple devices Mariano Cano 2022-07-14 17:10:03 -0700
  • 9fa5f46213 add minor doco, Test_CRLGeneration(), fix some issues from merge Raal Goff 2022-07-13 08:56:47 +0800