61 Commits (master)

Author	SHA1	Message	Date
Panagiotis Siatras	dd1ff9c15b	Implementation of the Prometheus endpoint (#1669) ... Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.	4 months ago
Mariano Cano	30ce9e65f7	Write configuration only if encoding succeeds ... This commit fixes a problem when the ca.json is truncated if the encoding of the configuration fails. This can happen by adding a new provisioner with bad template data. Related to smallstep/cli#994	9 months ago
Mariano Cano	cce7d9e839	Address comments from code review	10 months ago
Mariano Cano	c7c7decd5e	Add support for the disableSmallstepExtensions claim ... This commit adds a new claim to exclude the Smallstep provisioner extension from the generated certificates. Fixes #620	10 months ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Mariano Cano	002a058807	Use idpURL in json	1 year ago
Mariano Cano	be4cd17b40	Add omit empty to IDPurl	1 year ago
foleyjohnm	d6f9b3336d	Update config.go	2 years ago
foleyjohnm	c79d4e9316	adding CRLIDP config	2 years ago
Mariano Cano	59775fff0c	Merge branch 'master' into crl-support	2 years ago
Mariano Cano	8200d19894	Improve CRL implementation ... This commit adds some changes to PR #731, some of them are: - Add distribution point to the CRL - Properly stop the goroutine that generates the CRLs - CRL config validation - Remove expired certificates from the CRL - Require enable set to true to generate a CRL This last point is the principal change in behaviour from the previous implementation. The CRL will not be generated if it's not enabled, and if it is enabled it will always be regenerated at some point, not only if there is a revocation.	2 years ago
Herman Slatman	54c560f620	Improve configuration file initialization log output	2 years ago
Herman Slatman	674206320c	Write updated CA configuration after migrating provisioners	2 years ago
Raal Goff	f7df865687	refactor crl config, add some tests	2 years ago
Raal Goff	d0e81af524	Merge branch 'master' into crl-support	2 years ago
Mariano Cano	567d96c771	Revert "Run on plaintext HTTP to support Cloud Run" ... This reverts commit 09b9673a60.	2 years ago
Brandon Weeks	f3d2bd7a19	Run on plaintext HTTP to support Cloud Run	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	4e19aa4c52	Add cache duration if crl is set	2 years ago
Mariano Cano	0829f37fe8	Define a default crl cache duration	2 years ago
Raal Goff	d2483f3a70	Merge branch 'master' into crl-support ... # Conflicts: # authority/config/config.go	2 years ago
Mariano Cano	23b8f45b37	Address gosec warnings ... Most if not all false positives	2 years ago
Mariano Cano	5e0be92273	Allow option to skip the validation of config	2 years ago
Mariano Cano	b62f4d1000	Add lgtm comments on some security warnings	2 years ago
Mariano Cano	a5439c43cd	Remove ciphersuites without Lucky13 countermeasures ... SHA-256 variants of the CBC ciphersuites don't implement any Lucky13 countermeasures. See http://www.isg.rhul.ac.uk/tls/Lucky13.html and https://www.imperialviolet.org/2013/02/04/luckythirteen.html.	2 years ago
Mariano Cano	369b8f81c3	Use go.step.sm/crypto/kms ... Fixes #975	2 years ago
max furman	99c9155467	disableSSHHostsListAPI -> disableGetSSHHosts	2 years ago
max furman	fb7f57a8df	Add attribute to disable SSH Hosts list API	2 years ago
Raal Goff	60671b07d7	Merge branch 'master' into crl-support ... # Conflicts: # api/api.go # authority/config/config.go # cas/softcas/softcas.go # db/db.go	2 years ago
Herman Slatman	ad2de16299	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	fe9c3cf753	Merge branch 'master' into ahmet2mir-feat/vault	2 years ago
Herman Slatman	abcad679ff	Merge branch 'master' into herman/allow-deny	2 years ago
Herman Slatman	d6be9450be	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	d3b6bc3c75	Merge branch 'master' into fix/adminra	2 years ago
Mariano Cano	674dc3c844	Rename unreleased claim to allowRenewalAfterExpiry for consistency.	2 years ago
Mariano Cano	37b521ec6c	Merge branch 'master' into feat/vault	2 years ago
Mariano Cano	c55b27a2fc	Refactor admin token to use with RAs.	2 years ago
Raal Goff	d417ce3232	implement changes from review	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	dc23fd23bf	Merge branch 'master' into herman/allow-deny-next	2 years ago
Mariano Cano	c903f00cd4	Rename claim to allowRenewAfterExpiry.	2 years ago
Mariano Cano	616490a9c6	Refactor renew after expiry token authorization ... This changes adds a new authority method that authorizes the renew after expiry tokens.	2 years ago
Mariano Cano	fd6a2eeb9c	Add provisioner controller ... The provisioner controller has the implementation of the identity function as well as the renew methods with renew after expiry support.	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Mariano Cano	c0525381eb	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	716b946e7a	Normalize IPv6 hostname addresses	2 years ago
Ahmet DEMIR	68b980d689	feat(authority): avoid hardcoded cn in authority csr	2 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	da2802504b	Use Default min version if not specified.	3 years ago
Mariano Cano	072ba4227c	Add deployment type to config. ... This field is ignored except for the start of the ca. If the type is linked and the token is not passed, it will fail with an error.	3 years ago