53 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	b20af51f32	Upgrade go.step.sm/crypto to use go-jose/v3	5 months ago
Mariano Cano	d8eeebfd51	Fix error string in tests ... This commit fixes a test checking an error string from an external dependency.	9 months ago
Herman Slatman	c952e9fc9d	Use `NewDetailedError` instead	10 months ago
Herman Slatman	f3c24fe875	Change how multiple identifiers are printed in errors	10 months ago
Herman Slatman	9a52675865	Return descriptive error when using unsupported format	10 months ago
Herman Slatman	0d3338ff3a	Return consistent ACME error types for specific cases	10 months ago
Herman Slatman	dd9bf1e915	Add error details for the `step` format	10 months ago
Herman Slatman	9cbbd1d575	Add error details to ACME `tpm` format validation errors	10 months ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Herman Slatman	d9aa2c110f	Increase test coverage for AK certificate properties	1 year ago
Mariano Cano	6ba20209c2	Verify CSR key fingerprint with attestation certificate key ... This commit makes sure that the attestation certificate key matches the key used on the CSR on an ACME device attestation flow.	1 year ago
Herman Slatman	3a6fc5e0b4	Remove dependency on `smallstep/assert` in ACME challenge tests	1 year ago
Herman Slatman	0f9128c873	Fix linting issue and order of test SUT	1 year ago
Herman Slatman	2ab9beb7ed	Add tests for `deviceAttest01Validate`	1 year ago
Mariano Cano	e27c6c529b	Add support for custom acme ports ... This change adds the flags --acme-http-port, --acme-tls-port, that combined with --insecure can be used to set custom ports for ACME http-01 and tls-alpn-01 challenges. These flags should only be used for testing purposes. Fixes #1015	2 years ago
Mariano Cano	a7e597450a	Update acme/challenge_test.go ... Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>	2 years ago
Mariano Cano	7a78c76199	Add test simulating YubiKey v5.2.4 ... There are YubiKeys v5.2.4 where the attestation intermediate (f9) does not have a basic constraint extension, so that certificate is not marked as a CA. The test and CA in this commit imitates that use case. Currently the test case returns an error as we don't support it. But if we change the verification to support this use case, the test should change accordingly.	2 years ago
Mariano Cano	21666ba887	Revert "Set timestamp when marking an acme challenge invalid" ... This reverts commit 5f130895f3.	2 years ago
Mariano Cano	5f130895f3	Set timestamp when marking an acme challenge invalid	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	498549c95c	Extract common function used in tests	2 years ago
Mariano Cano	829530ae90	Fix linter errors	2 years ago
Mariano Cano	6b73a020e3	Add unit tests for apple and step attestations	2 years ago
Brandon Weeks	aacd6f4cc6	Add device-attest-01 challenge type	2 years ago
Mariano Cano	2ab7dc6f9d	Fix acme tests.	2 years ago
Herman Slatman	479c6d2bf5	Fix ACME IPv6 HTTP-01 challenges ... Fixes #890	2 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	ae58a0ee4e	Make tests compatible with Go 1.17. ... With Go 1.17 tls.Dial will fail if the client and server configured protocols do not overlap. See https://golang.org/doc/go1.17#ALPN	3 years ago
Herman Slatman	64c15fde7e	Add tests for canonicalize function	3 years ago
Herman Slatman	c514a187b2	Fix Fail() -_-b	3 years ago
Herman Slatman	135e912ac8	Improve coverage for TLS-ALPN-01 challenge	3 years ago
Herman Slatman	af4803b8b8	Fix tests	3 years ago
max furman	440678cb62	Add markInvalid arg to storeError for invalidating challenge	3 years ago
max furman	b6ebc0fd25	more unit tests	3 years ago
max furman	a58466589f	add tls-alpn-01 validate unit tests	3 years ago
max furman	a8e4bbf715	start Validate unit tests	3 years ago
max furman	1fb0f1d7d9	add storeError unit tests	3 years ago
max furman	8b4a5a6d8b	add unit tests for dns01 validate	3 years ago
max furman	3612a0b990	gethttp01 validate unit tests working	3 years ago
max furman	bb8d54e596	[acme db interface] unit tests compiling	3 years ago
max furman	20f8d950c4	Fix broken ValidateChallenge test	3 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	4 years ago
Ivan Bertona	cb46a8b741	Small test fixes.	4 years ago
Ivan Bertona	200cfd2433	Add test for missing TLS certificates in response.	4 years ago
Ivan Bertona	157686e338	Tiny finishes.	4 years ago
Ivan Bertona	6843408d42	Reject obsolete id-pe-acmeIdentifier.	4 years ago
Ivan Bertona	6b5a2b17b5	Add challenge unmarshal test cases.	4 years ago
Ivan Bertona	b8208ec401	Add test case for failed came-tls/1 protocol negotiation.	4 years ago