Commit Graph

30 Commits (1cb8bb3ae1487803e7a4c9da44f093cec060a35e)

Author SHA1 Message Date
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
Mariano Cano 5565d61bf3 Add fault tolerance against clock skew accross system on TLS certificates. 4 years ago
Mariano Cano de3ba58455 Store renew certificate in the database. 4 years ago
Mariano Cano a8a6d0ada3 Fix indentation. 4 years ago
max furman 29853ae016 sshpop provisioner + ssh renew | revoke | rekey first pass 4 years ago
Jozef Kralik bc6074f596 Change api of functions Authority.Sign, Authority.Renew
Returns certificate chain instead of 2 members.

Implements #126
5 years ago
max furman fe7973c060 wip 5 years ago
Mariano Cano 2127d09ef3 Rename context type to apiCtx.
It will conflict with the context package.
5 years ago
max furman ab4d569f36 Add /revoke API with interface db backend 5 years ago
Mariano Cano 8c8547bf65 Remove unnecessary parse and improve tests. 5 years ago
Mariano Cano a3e2b4a552 Move certificate check to the right place. 5 years ago
Mariano Cano 30a6889d1f Use standard x509 instead of step one. 5 years ago
Mariano Cano 7fd737cbb1 Fix lint warnings. 5 years ago
Mariano Cano 1f5ff5c899 Fix sign and renew tests. 5 years ago
Mariano Cano c0ef6f8dc5 Add missing modifier and change return codes. 5 years ago
Mariano Cano a97ea87caa Move options to provisioner so we can set the duration of the cert. 5 years ago
Mariano Cano 1671ab2590 Fix some tests. 5 years ago
Mariano Cano 57b705f6cf Use provisioner sign options. 5 years ago
Mariano Cano d78febec7a Fix extensions copy on renew
Fixes #36
5 years ago
max furman 7e43402575 bug fix: don't add common name to CSR validation claims in Sign
* added unit test for this case
5 years ago
max furman e6e8443f3c allow multiple identical SANs in cert 5 years ago
max furman f0683c2e0a Enable signing certificates with custom SANs
* validate against SANs in token. must be 1:1 equivalent.
5 years ago
Mariano Cano d6cad2a7f3 Add provisioner option to disable renewal.
Fixes smallstep/ca-component#108
6 years ago
Mariano Cano d574545d94 Format code with `gofmt -s` 6 years ago
max furman 7fa06643b2 change step provisioner OID and ASN1 representation 6 years ago
max furman a4a461466b withProvisionerOID and unit test 6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
max furman 0b5f6487e1 change provisioners api
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
6 years ago
max furman c284a2c0ab first commit 6 years ago