Commit Graph

24 Commits (master)

Author SHA1 Message Date
Herman Slatman 041b486c55
Remove usages of `Sign` without context 3 months ago
Herman Slatman 8c53dc9029
Use `require.NoError` where appropriate in provisioner tests 1 year ago
Herman Slatman f2e1c56c6c
Improve SCEP provisioner marshaling 1 year ago
Mariano Cano c7f226bcec
Add support for renew when using stepcas
It supports renewing X.509 certificates when an RA is configured with stepcas.
This will only work when the renewal uses a token, and it won't work with mTLS.

The audience cannot be properly verified when an RA is used, to avoid this we
will get from the database if an RA was used to issue the initial certificate
and we will accept the renew token.

Fixes #1021 for stepcas
2 years ago
max furman 7203739369
Fix err assert linter warnings - upgrade outdated package 2 years ago
Andrew Reed 7101fbb0ee
Provisioner webhooks (#1001) 2 years ago
Mariano Cano 1d1e095447 Add tests for LoadProvisionerByCertificate. 2 years ago
Panagiotis Siatras 00634fb648
api/render, api/log: initial implementation of the packages (#860)
* api/render: initial implementation of the package

* acme/api: refactored to support api/render

* authority/admin: refactored to support api/render

* ca: refactored to support api/render

* api: refactored to support api/render

* api/render: implemented Error

* api: refactored to support api/render.Error

* acme/api: refactored to support api/render.Error

* authority/admin: refactored to support api/render.Error

* ca: refactored to support api/render.Error

* ca: fixed broken tests

* api/render, api/log: moved error logging to this package

* acme: refactored Error so that it implements render.RenderableError

* authority/admin: refactored Error so that it implements render.RenderableError

* api/render: implemented RenderableError

* api/render: added test coverage for Error

* api/render: implemented statusCodeFromError

* api: refactored RootsPEM to work with render.Error

* acme, authority/admin: fixed pointer receiver name for consistency

* api/render, errs: moved StatusCoder & StackTracer to the render package
2 years ago
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
max furman df60fe3f0d Remove all references to old apiError. 4 years ago
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
Mariano Cano e1cd5ee8c3 Add context to the Authorize method.
Fix tests.
5 years ago
Mariano Cano 23e6de57a2 Address comments in code review. 5 years ago
Mariano Cano 54d86ca1c1 testing work in progress. 5 years ago
Mariano Cano fc0b2ca5a6 Revert "Move provisioners to authority/provisioner package."
This reverts commit f88d622a67.
5 years ago
Mariano Cano f88d622a67 Move provisioners to authority/provisioner package. 5 years ago
Mariano Cano 428661f472 Use name instead of issuer in error message. 6 years ago
max furman 0d9dd2d14b provisioner issuer -> name 6 years ago
Mariano Cano 0ccf775f2e Add support for cursors in the api. 6 years ago
Mariano Cano 1de8eb4bfa Fix provisioner package move. 6 years ago
Mariano Cano 1db177b80d Add backend support for provisioners with cursors.
Fixes #83
6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
max furman 0b5f6487e1 change provisioners api
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
6 years ago
max furman 0e904989d2 add unit tests for authority.Provisioners api 6 years ago