smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
Herman Slatman	949e2fdb1c	Fix test error expectation in `TestAuthorityNew`	2 weeks ago
Herman Slatman	041b486c55	Remove usages of `Sign` without context	3 months ago
Herman Slatman	180162bd6a	Refactor SCEP provisioner and decrypter	12 months ago
Mariano Cano	ddd5057f63	Allow root and federated root bundles This commit changes the parsing of root and federated roots to support a bundle of certificates, this makes easier to configure a root rotation when using helm charts, just appending the old root.	2 years ago
Mariano Cano	8942422973	Add GetID() and add authority to initial context	2 years ago
Herman Slatman	3612eefc31	Cleanup	2 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
Mariano Cano	097a918da7	Fix tests when we create re-use a token with a new authority.	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Herman Slatman	7e82bd6ef3	Add setup for Authority tests	3 years ago
Mariano Cano	fbd2208044	Close key manager for safe reloads when a cgo module is used.	3 years ago
Mariano Cano	60515d92c5	Remove unnecessary properties.	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	b900a7a2fc	Fix error message in tests.	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	4e544344f9	Initialize the required config fields on embedded authorities. This change is to make easier the use of embedded authorities. It can be difficult for third parties to know what fields are required. The new init methods will define the minimum usable configuration.	4 years ago
Mariano Cano	b5eab009b2	Rename method to NewEmbedded	4 years ago
Mariano Cano	824374bde0	Create a method to initialize the authority without a config file. When the CA is embedded in a third party product like Caddy, the config needed to use placeholders to be valid. This change adds a new method `NewEmbeddedAuthority` that allows to create an authority with the given options, the minimum options are a root and intermediate certificate, and the intermediate key. Fixes #218	4 years ago
Mariano Cano	4eaeede77d	Fix unit tests.	4 years ago
max furman	c387b21808	Introduce generalized statusCoder errors and loads of ssh unit tests. * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
max furman	d3e74a0d2e	switch from metalinter to golangci-lint	5 years ago
Mariano Cano	9f39cb5f2a	Add test.	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	23e6de57a2	Address comments in code review.	5 years ago
Mariano Cano	54d86ca1c1	testing work in progress.	5 years ago
Mariano Cano	1671ab2590	Fix some tests.	5 years ago
Mariano Cano	98cc243a37	Add support for multiple roots.	5 years ago
Mariano Cano	7e95fc0e45	Strip ports on audience check. Services might have proxies behind them so we cannot rely on them. Fixes #17	5 years ago
Mariano Cano	d6cad2a7f3	Add provisioner option to disable renewal. Fixes smallstep/ca-component#108	6 years ago
max furman	0d9dd2d14b	provisioner issuer -> name	6 years ago
max furman	283dc42904	add unit tests for MatchOne (token audience) and Authority.New	6 years ago
max furman	ee7db4006a	change sign + authorize authority api \| add provisioners * authorize returns []interface{} - operators in this list can conform to any interface the user decides - our implementation has a combination of certificate claim validators and certificate template modifiers. * provisioners can set and enforce tls cert options	6 years ago
max furman	0b5f6487e1	change provisioners api * /provisioners -> /provisioners/jwk-set-by-issuer * /provisioners now returns a list of Provisioners	6 years ago
max furman	d773770a44	add authority.New unit tests	6 years ago
max furman	c284a2c0ab	first commit	6 years ago

36 Commits (master)