47b5048d82
Merge pull request #1850 from smallstep/mariano/signer
...
Add GetX509Signer method
6 days ago
99ce13a4ea
Fix linter warnings
1 week ago
812ffd3c40
Reverse assert statements
2 weeks ago
d0548f9ec9
Use %q instead of '%s'
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2 weeks ago
9e8087fbb1
Add GetX509Signer method
...
This commit adds a method to the Authority type that returns the signer
used to sign X509 certificates.
2 weeks ago
f3f484cee2
Log errors using slog.Logger
...
This commit allows logging errors in a slog.Logger injected in the
context. This type of logger is not currently used directly in step-ca,
but this will change in the future.
2 weeks ago
d4862a2520
Add methods to get the intermediate certificates
...
This commit adds new methods to get the intermediate certificates.
2 weeks ago
b1e31b1726
Use always acme.IsErrNotFound
...
This commit replaces the comparisons with acme.ErrNotFound and always
uses acme.IsErrNotFound.
3 weeks ago
949e2fdb1c
Fix test error expectation in `TestAuthorityNew`
4 weeks ago
113a6dd8ab
Remove reporting the CA mode from startup logs
1 month ago
6bc0a86207
Fix CA startup with Vault RA configuration
1 month ago
f1a2c68f43
Merge pull request #1798 from smallstep/herman/fix-instrumented-key-manager
...
Add support for `kmsapi.Decrypter` to instrumented key manager
1 month ago
7df3ad05ed
Merge pull request #1797 from smallstep/mariano/init-scep
...
Allow custom SCEP key manager
2 months ago
4202d6673c
Remove debug statement
2 months ago
d6bbe5b06b
Add support for `kmsapi.Decrypter` to instrumented key manager
2 months ago
db92404342
chore: fix function names in comment
...
Signed-off-by: verytrap <wangqiuyue@outlook.com>
2 months ago
725a913f66
Allow custom SCEP key manager
...
This commit allows to inject a custom key manger for SCEP.
2 months ago
0ac9023590
Fix typo in error message and comment
3 months ago
10f6a901ec
Let the CA determine the RA lifetime
...
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.
This commit also fixes linter warnings.
Related to #1094
3 months ago
b8510dd5b2
Make the `requestid` an exported middleware
3 months ago
10aa48c74a
Merge pull request #1743 from smallstep/herman/improve-request-id
...
Improve end-to-end request ID propagation
3 months ago
d392c169fc
Improve functional coverage of request ID integration test
3 months ago
7e5f10927f
Decouple request ID middleware from logging middleware
3 months ago
fb4cd6fe81
fix: Webhook-related instruments
...
* fix: also instrument webhooks that do not reach the wire
* fix: register the webhook instrumentation
3 months ago
041b486c55
Remove usages of `Sign` without context
3 months ago
c16a0b70ee
Remove `smallstep/assert` and `pkg/errors` from webhook tests
3 months ago
9689508709
Add tests for webhook request IDs
3 months ago
2a8b80a3e1
Merge branch 'master' into herman/webhook-request-id
3 months ago
bb296c9d19
Merge pull request #1708 from smallstep/herman/csr-expires-header
...
Add `Expires` header to CRL endpoint
3 months ago
ac773ff44e
Merge branch 'master' into allow_external_x509_ca_service_intf
3 months ago
ee44ac104d
fixup! Add AWS ca-west-1 identity document certificate
4 months ago
283d46d9a7
Add AWS ca-west-1 identity document certificate
4 months ago
69f5f8d8ea
Use `stretchr/testify` instead of `smallstep/assert` for tests
4 months ago
d1deb7f930
Add `Expires` header to CRL response
4 months ago
dd1ff9c15b
Implementation of the Prometheus endpoint ( #1669 )
...
Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.
4 months ago
fbc1e895c2
Allow x509 Service CA implementation to be injected through ca and authority options
4 months ago
25c109e75d
Change error message for CSR validation
5 months ago
b20af51f32
Upgrade go.step.sm/crypto to use go-jose/v3
6 months ago
d34f0f6a97
Fix linter warnings ( #1634 )
6 months ago
f082cbc421
Denormalize provisioner name in SCEP webhook
7 months ago
9ebc8779f5
Normalize SCEP provisioner name in webhook body
7 months ago
e815864ed8
Add verification of `provisionerName` in test
7 months ago
de45d66cdb
Add `provisionerName` to webhook request body
7 months ago
49045a1150
Change CommonName validator in JWK
...
This commit changes the common name validator in the JWK provisioner to
accept either the token subject or any of the sans in the token.
7 months ago
9f84f7ce35
Allow for identity certificate signing (in sshSign) by skipping validators ( #1572 )
...
- skip urisValidator for identity certificate signing. Implemented
by building the validator with the context in a hacky way.
8 months ago
52baf52f84
Change scep password type to string
...
This commit changes the type of the decrypter key password to string to
be consistent with other passwords in the ca.json
8 months ago
c0fbace882
Address review remarks
8 months ago
4dc5a688fd
Set SCEP authority options once
8 months ago
15c46ebbaa
Switch logic for SCEP initialization around
8 months ago
f1da256ca4
Change SCEP authority initialization
8 months ago
Mariano Cano
max furman
Mariano Cano
Herman Slatman
Herman Slatman
verytrap
Panagiotis Siatras
Remi Vichery
Venky Gopal