35 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	0ac9023590	Fix typo in error message and comment	2 months ago
Mariano Cano	10f6a901ec	Let the CA determine the RA lifetime ... When the RA mode with StepCAS is used, let the CA decide which lifetime the RA should get instead of requiring always 24h. This commit also fixes linter warnings. Related to #1094	2 months ago
Mariano Cano	b20af51f32	Upgrade go.step.sm/crypto to use go-jose/v3	5 months ago
Mariano Cano	6705b7dde4	Build RA token using SANs from the template ... This commit updates the RA token to use the SANs coming from the template instead of the CSR. Note that this PR might break some admin tokens.	7 months ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Herman Slatman	b5961beba9	Fix and/or ignore linting issues	1 year ago
Mariano Cano	c7f226bcec	Add support for renew when using stepcas ... It supports renewing X.509 certificates when an RA is configured with stepcas. This will only work when the renewal uses a token, and it won't work with mTLS. The audience cannot be properly verified when an RA is used, to avoid this we will get from the database if an RA was used to issue the initial certificate and we will accept the renew token. Fixes #1021 for stepcas	2 years ago
max furman	6af9437875	Rebase over master and a few more linter fixes	2 years ago
max furman	18a648cffa	Fix linter warning about bad error name	2 years ago
Mariano Cano	8bd0174251	Rename field to IsCAServerCert	2 years ago
Mariano Cano	5df1694250	Add endpoint id for the RA certificate ... In a linked RA mode, send an endpoint id to group the server certificates.	2 years ago
Mariano Cano	eb091aec54	Simplify field names for ProvisionerInfo	2 years ago
Mariano Cano	f1aabaa99c	Use functions from os instead of io/ioutil	2 years ago
Mariano Cano	6b5d3dca95	Add provisioner name to RA info	2 years ago
Mariano Cano	9648fe6b4c	Remove debug statement	2 years ago
Mariano Cano	7a1e6a0e1f	Fix and extend stepcas unit tests	2 years ago
Mariano Cano	9408d0f24b	Send RA provisioner information to the CA	2 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	de719eb6f0	Add an option to avoid password prompts on step cas ... When we are using `step ca init` to create a stepcas RA we don't have access to the password for verify the provisioner.	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Mariano Cano	84018ec71b	Clarify comment.	3 years ago
Mariano Cano	a9297100d8	Allow to configure the JWK using the encrypted key.	3 years ago
Mariano Cano	edc7c4d90e	Add support for password encrypted files	3 years ago
Mariano Cano	80542d6d9a	Add JWK as an issuer for stepcas.	3 years ago
Mariano Cano	96de4e6ec8	Return a non-implemented error in stepcas.RenewCertificate.	3 years ago
Mariano Cano	348815f4f6	Fix error message.	3 years ago
Mariano Cano	e7a6c46e54	Fix linting errors.	3 years ago
Mariano Cano	08e75b614e	Do not depend on Go 1.16.	3 years ago
Mariano Cano	6fd6270e7d	Remove debug statements.	3 years ago
Mariano Cano	7958f6ebb5	Add support for lifetime.	3 years ago
Mariano Cano	ae4b8f58b8	Add support for emails, ips and uris.	3 years ago
Mariano Cano	dbb48ecf8d	Add tests for stepcas.	3 years ago
Mariano Cano	bcf70206ac	Add support for revocation using an extra provisioner in the RA.	3 years ago
Mariano Cano	a6115e29c2	Add initial implementation of StepCAS. ... StepCAS allows to configure step-ca as an RA using another step-ca as the main CA.	3 years ago