Commit Graph

1227 Commits (master)

Author SHA1 Message Date
Mariano Cano 722bcb7e7a Add initial support for federated root certificates. 5 years ago
Mariano Cano 7e95fc0e45 Strip ports on audience check.
Services might have proxies behind them so we cannot rely on them.
Fixes #17
5 years ago
Mariano Cano 9b87e08faf Do not require the port in the audience check.
Fixes #17
5 years ago
Mariano Cano 7da1d1adc2 Fix typo. 6 years ago
Mariano Cano d6cad2a7f3 Add provisioner option to disable renewal.
Fixes smallstep/ca-component#108
6 years ago
max furman c74fcd57a7 ca-component -> certificates
* fix redundant error check
* add README
6 years ago
Mariano Cano 428661f472 Use name instead of issuer in error message. 6 years ago
max furman 0d9dd2d14b provisioner issuer -> name 6 years ago
Mariano Cano ea0307239a Fix dead code and add missing error check. 6 years ago
Mariano Cano d574545d94 Format code with `gofmt -s` 6 years ago
max furman 7fa06643b2 change step provisioner OID and ASN1 representation 6 years ago
max furman b457b15292 fix: omit empty claims in AuthConfig 6 years ago
max furman ca6087145f fix unit test 6 years ago
max furman a4a461466b withProvisionerOID and unit test 6 years ago
max furman 283dc42904 add unit tests for MatchOne (token audience) and Authority.New 6 years ago
Mariano Cano 0ccf775f2e Add support for cursors in the api. 6 years ago
Mariano Cano 1de8eb4bfa Fix provisioner package move. 6 years ago
Mariano Cano 1db177b80d Add backend support for provisioners with cursors.
Fixes #83
6 years ago
max furman d2872564b4 accidentally removed DisableIssuedAtCheck during merge 6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
Mariano Cano 1c1ac1b3fb Add disableIssuedAt check functionality
Fixes #86
6 years ago
Mariano Cano 69da47a727 Set audience using the sign url. 6 years ago
max furman 0b5f6487e1 change provisioners api
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
6 years ago
max furman f1dc00c810 add Provisioner config validation 6 years ago
max furman 0e904989d2 add unit tests for authority.Provisioners api 6 years ago
max furman d773770a44 add authority.New unit tests 6 years ago
max furman c284a2c0ab first commit 6 years ago