1219 Commits (fix-1637)

Author	SHA1	Message	Date
Mariano Cano	73b31585c4	Merge branch 'master' into fix-1637	2 months ago
Mariano Cano	0ac9023590	Fix typo in error message and comment	3 months ago
Mariano Cano	10f6a901ec	Let the CA determine the RA lifetime ... When the RA mode with StepCAS is used, let the CA decide which lifetime the RA should get instead of requiring always 24h. This commit also fixes linter warnings. Related to #1094	3 months ago
Herman Slatman	b8510dd5b2	Make the `requestid` an exported middleware	3 months ago
Herman Slatman	10aa48c74a	Merge pull request #1743 from smallstep/herman/improve-request-id ... Improve end-to-end request ID propagation	3 months ago
Herman Slatman	d392c169fc	Improve functional coverage of request ID integration test	3 months ago
Herman Slatman	7e5f10927f	Decouple request ID middleware from logging middleware	3 months ago
Panagiotis Siatras	fb4cd6fe81	fix: Webhook-related instruments ... * fix: also instrument webhooks that do not reach the wire * fix: register the webhook instrumentation	3 months ago
Herman Slatman	041b486c55	Remove usages of `Sign` without context	3 months ago
Herman Slatman	c16a0b70ee	Remove `smallstep/assert` and `pkg/errors` from webhook tests	3 months ago
Herman Slatman	9689508709	Add tests for webhook request IDs	3 months ago
Herman Slatman	2a8b80a3e1	Merge branch 'master' into herman/webhook-request-id	3 months ago
Herman Slatman	bb296c9d19	Merge pull request #1708 from smallstep/herman/csr-expires-header ... Add `Expires` header to CRL endpoint	4 months ago
Mariano Cano	ac773ff44e	Merge branch 'master' into allow_external_x509_ca_service_intf	4 months ago
Remi Vichery	ee44ac104d	fixup! Add AWS ca-west-1 identity document certificate	4 months ago
Remi Vichery	283d46d9a7	Add AWS ca-west-1 identity document certificate	4 months ago
Herman Slatman	69f5f8d8ea	Use `stretchr/testify` instead of `smallstep/assert` for tests	4 months ago
Herman Slatman	d1deb7f930	Add `Expires` header to CRL response	4 months ago
Panagiotis Siatras	dd1ff9c15b	Implementation of the Prometheus endpoint (#1669) ... Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.	4 months ago
Venky Gopal	fbc1e895c2	Allow x509 Service CA implementation to be injected through ca and authority options	4 months ago
Herman Slatman	25c109e75d	Change error message for CSR validation	5 months ago
Mariano Cano	508b6e8668	Check cnf claim with CSR or SSH public key fingerprint ... This commit allows tying tokens with the provided CSR or SSH public key. Tokens with a confirmation claim kid (cnf.kid) will validate that the provided fingerprint (kid) matches the CSR or SSH public key. This check will only be present in JWK and X5C provisioners. Fixes #1637	5 months ago
Mariano Cano	b20af51f32	Upgrade go.step.sm/crypto to use go-jose/v3	6 months ago
Max	d34f0f6a97	Fix linter warnings (#1634)	6 months ago
Herman Slatman	f082cbc421	Denormalize provisioner name in SCEP webhook	7 months ago
Herman Slatman	9ebc8779f5	Normalize SCEP provisioner name in webhook body	7 months ago
Herman Slatman	e815864ed8	Add verification of `provisionerName` in test	7 months ago
Herman Slatman	de45d66cdb	Add `provisionerName` to webhook request body	7 months ago
Mariano Cano	49045a1150	Change CommonName validator in JWK ... This commit changes the common name validator in the JWK provisioner to accept either the token subject or any of the sans in the token.	7 months ago
Max	9f84f7ce35	Allow for identity certificate signing (in sshSign) by skipping validators (#1572) ... - skip urisValidator for identity certificate signing. Implemented by building the validator with the context in a hacky way.	8 months ago
Mariano Cano	52baf52f84	Change scep password type to string ... This commit changes the type of the decrypter key password to string to be consistent with other passwords in the ca.json	8 months ago
Herman Slatman	c0fbace882	Address review remarks	8 months ago
Herman Slatman	4dc5a688fd	Set SCEP authority options once	8 months ago
Herman Slatman	15c46ebbaa	Switch logic for SCEP initialization around	8 months ago
Herman Slatman	f1da256ca4	Change SCEP authority initialization	8 months ago
Herman Slatman	4554f86f16	Make SCEP decrypter properties use `omitempty`	8 months ago
Herman Slatman	ffe079f31b	Merge branch 'master' into herman/scep-provisioner-decrypter	8 months ago
Mariano Cano	31da66c124	Fix webhooks signature ... This commit fixes the way webhooks signatures are created. Before this change, the signature of an empty body was prepended by the body itself.	8 months ago
Herman Slatman	3f3b67e05c	Merge branch 'herman/scep-provisioner-decrypter' into herman/scep-notifying-webhook	8 months ago
Herman Slatman	ba72710e2d	Address code review remarks	8 months ago
Herman Slatman	5f8e0de1c3	Fix duplicate import in SCEP provisioner	8 months ago
Herman Slatman	4fd4227b73	Use shorter SCEP decrypter property names from linkedca	8 months ago
Herman Slatman	5fd70af2c8	Make API responses aware of the new SCEP decrypter properties	8 months ago
Herman Slatman	3ade92f8d5	Support both a decrypter key URI as well as PEM	8 months ago
Herman Slatman	b6c95d7be2	Add additional properties to SCEP notify webhook request body	8 months ago
Herman Slatman	63257e0576	Add full certificate DER bytes to success notification webhook	8 months ago
Herman Slatman	52bc96760b	Add SCEP certificate issuance notification webhook	8 months ago
Herman Slatman	a3c9dd796a	Merge branch 'herman/scep-provisioner-decrypter' of github.com:smallstep/certificates into herman/scep-provisioner-decrypter	8 months ago
Herman Slatman	69a53eec33	Merge branch 'master' into herman/scep-provisioner-decrypter	8 months ago
Dominic Evans	231b5d8406	chore(deps): upgrade github.com/go-chi/chi to v5 ... Upgrade chi to the v5 module path to avoid deprecation warning about v4 and earlier on the old module path. See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4 Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>	9 months ago