49de04661b
Merge pull request #877 from smallstep/herman/update-google-kms
...
Update cloud.google.com/go/kms
2 years ago
d5d70baba7
Add /roots.pem handler ( #866 )
...
* Add /roots.pem handler
* Review changes
* Remove no peer cert test case
2 years ago
1dbaa62740
Update cloud.google.com/go/kms
2 years ago
a7959ac563
Merge pull request #871 from smallstep/fix/renewer
...
Attempt to fix TestBootstrapClientServerRotation
2 years ago
6d4d4560df
add --context flag to step-ca command ( #851 )
...
* added the --context flag
* apply the context and allow for different ca.json
* amended usage for consistency
* added an extra example
* added an extra example
* reordered and reworded examples
2 years ago
e27124b037
scep: remove Interface and the dependency to pkg/errors ( #872 )
...
* scep: documented the package
* scep/api: removed some top level constants
* scep: removed dependency to pkg/errors
* scep/api: documented the package
2 years ago
b98f86a515
scep: minor cleanup ( #867 )
...
* api, scep: removed scep.Error
* scep/api: replaced nextHTTP with http.HandlerFunc
* scep/api: renamed writeSCEPResponse to writeResponse
* scep/api: renamed decodeSCEPRequest to decodeRequest
* scep/api: renamed writeError to fail
* scep/api: replaced pkg/errors with errors
* scep/api: formatted imports
* scep/api: do not export SCEPRequest & SCEPResponse
* scep/api: do not export Handler
* api: flush errors better
2 years ago
ba0b170818
Attempt to fix TestBootstrapClientServerRotation
...
This change attempts to fix the test TestBootstrapClientServerRotation.
Due to the backdate, the renew options get too large, causing
continuous renewals, and random errors. After experimenting with
different options, truncating durations to seconds have shown better
results than rounding or just use the plain time.
2 years ago
082734474b
Merge pull request #845 from vijayjt/azure-user-mi-token
...
WIP: Support Azure tokens generated by managed identities
2 years ago
f3bade4547
Merge pull request #861 from smallstep/go/1.18
...
Change go version to 1.17 and 1.18
2 years ago
63acb47704
Merge pull request #870 from smallstep/armv5
...
Add armv5 build for (cloud|aws)kms
2 years ago
904d6712f5
Add armv5 build for (cloud|aws)kms
2 years ago
afca57958b
Merge pull request #869 from smallstep/armv5
...
Add armv5 build to GoReleaser configuration
2 years ago
907bdd686b
Add armv5 build to GoReleaser configuration
2 years ago
80abda22ee
api/log: initial implementation of the package ( #859 )
...
* api/log: initial implementation of the package
* api: refactored to support api/log
* scep/api: refactored to support api/log
* api/log: documented the package
* api: moved log-related tests to api/log
2 years ago
f1d586bc6d
Change golang to Go
2 years ago
24a963766e
Pass in the resource name regardless of if its a VM or managed identity
2 years ago
ad8a813abe
Fix linter errors
2 years ago
390054b22e
Change go version to 1.17 and 1.18
2 years ago
823170ef57
Merge pull request #858 from smallstep/panos/api/read
...
api/read: initial implementation of the package
2 years ago
e6b2359273
ca: fixed import statement order
2 years ago
df89ed5acb
api: moved read-related tests to api/read
2 years ago
9ba33bab4e
ca: refactored to use the read package
2 years ago
4fb38afc57
authority/admin/api: refactored to use the read package
2 years ago
29092b9d8a
api: refactored to use the read package
2 years ago
7fb8acda27
api/read: initial implementation of the package
2 years ago
12000359ad
Merge pull request #849 from smallstep/feat/renewAfterExpiry
...
Renew After Expiry
2 years ago
7a13661e4c
Merge pull request #846 from smallstep/herman/scep-url-config
...
Add configuration for custom path segment on SCEP provisioners
2 years ago
dcbcd88a62
Add changelog item for dynamic SCEP CA URL paths
2 years ago
15477f6d7b
Make custom SCEP CA paths automagic
2 years ago
915911efb6
Disable http loggers in test.
...
They hide the test that fail on tests in the CI.
2 years ago
ead742ca0f
Fix unit test
2 years ago
6d532045dc
Fix validity check for sshpop provisioner.
2 years ago
c903f00cd4
Rename claim to allowRenewAfterExpiry.
2 years ago
415276e52b
Merge pull request #850 from smallstep/panos/envrc
...
git: ignore .envrc files
2 years ago
f7a044222e
git: ignore .envrc files
2 years ago
6dcde8a743
Fix typo
2 years ago
a4dd586a81
Add method to get the CA url from the client.
2 years ago
4690fa64ed
Add public methods to retrieve the provisioner extensions.
2 years ago
236caaa735
Add entry in changelog
2 years ago
f8df6a1acc
Change variable name for consistency
2 years ago
616490a9c6
Refactor renew after expiry token authorization
...
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
41ea67ce10
Attempt to fix a bootstrap tests
2 years ago
79349b4d7c
Add options to use custom renewal methods.
2 years ago
389815642d
Fix tests: certs are truncated to seconds.
2 years ago
8ef8f4f665
Use the provisioner controller in Nebula renewals
2 years ago
afb5d36206
Allow to renew certificates using an x5c-like token.
2 years ago
259e95947c
Add support for the provisioner controller
...
The claimer, audiences and custom callback methods are now managed
by the provisioner controller in an uniform way.
2 years ago
3c2ff33ca9
Add provisioner controller tests.
2 years ago
fd6a2eeb9c
Add provisioner controller
...
The provisioner controller has the implementation of the identity
function as well as the renew methods with renew after expiry
support.
2 years ago
Herman Slatman
Andrew Reed
Herman Slatman
Mariano Cano
Panagiotis Siatras
Mariano Cano
vijayjt