97 Commits (4cb74e7d8ba5a70b2b5c6c00f3907ad0899524fe)

Author	SHA1	Message	Date
Mariano Cano	3aebe8d019	Add missing comma in comment.	2 years ago
Mariano Cano	e29c85bbd4	Use errors and fmt instead of pkg/errors.	2 years ago
Mariano Cano	76c483c36f	Add missing comments.	2 years ago
Mariano Cano	48bc20c9f3	Unify json parameters.	2 years ago
Mariano Cano	790a19c6f6	make json names uniform ... Co-authored-by: Ahmet Demir <ahmet2mir+github@gmail.com>	2 years ago
Mariano Cano	967d9136ca	Cleanup Vault CAS integration	2 years ago
Mariano Cano	37b521ec6c	Merge branch 'master' into feat/vault	2 years ago
Mariano Cano	abf5fc32a3	Format comment.	2 years ago
Mariano Cano	c480936ba4	Split comments.	2 years ago
Mariano Cano	955d4cf80d	Add authority.WithX509SignerFunc ... This change adds a new authority option that allows to pass a callback that returns the certificate chain and signer used to sign X.509 certificates. This option will be used by Caddy, they renew the intermediate certificate weekly and there's no other way to replace it without re-creating the embedded CA. Fixes #874	2 years ago
Mariano Cano	ae7b41a12c	Fix linter errors.	2 years ago
Mariano Cano	c0525381eb	Merge branch 'master' into feat/vault	2 years ago
Mariano Cano	d424159200	Fix certificate type identification	2 years ago
Mariano Cano	b3316c4a56	Refactor json Marshal+Unmarshal in one function.	2 years ago
Ahmet DEMIR	a9550a746f	fix: add back commented tests	2 years ago
Ahmet DEMIR	ab5197500c	fix: a certificat must excldue the root and you should use verified chained intermediate	2 years ago
Ahmet DEMIR	782ff76963	fix: apply suggestion to use cr only	2 years ago
Ahmet DEMIR	b49ac2501b	feat: enhance options and fix revoke plus more tests	2 years ago
Ahmet DEMIR	8ef3abf6d9	fix: minus d on Ed	2 years ago
Herman Slatman	ad041d6bb7	Fix deprecation of grpc.WithInsecure option ... With the update of go.step.sm/linkedca grpc.WithInsecure was deprecated. This commit fixes this by setting up the (insecure) connection using the new method.	2 years ago
Ahmet DEMIR	d957a57e24	fix: apply mariano suggestions and fixes ... * use json.RawMessage to remote mapstructure in options * use vault secretid structure to support multiple source aka string, file and env * remove log prefix * return raw cert on error on newline for cert and csr * clean sans, commonName in createCertificate (bad copy/paste from StepCAS) * verify authority fingerprint * convert serial on revoke to bigint, bytes and vault dashed representation	2 years ago
Ahmet DEMIR	16390694e1	feat(vault): adding hashicorp vault cas	2 years ago
Ahmet DEMIR	26d7b70957	feat(cas): add generic Config parameter to allow more flexible configuration on CAS	2 years ago
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
Mariano Cano	e15b5faf7d	Merge branch 'master' into keyvault	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	52a18e0c2d	Add key name to CreateCertificateAuthority	3 years ago
Mariano Cano	e4e799ca85	Fix typos in comment.	3 years ago
Mariano Cano	6d644880bd	Allow to kms signers to define the SignatureAlgorithm ... CloudKMS keys signs data using an specific signature algorithm, in RSA keys, this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate will fail unless the template SignatureCertificate is properly set. On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or RSA-PSS schemes, so right now the way to enforce one or the other is to used templates.	3 years ago
Mariano Cano	de719eb6f0	Add an option to avoid password prompts on step cas ... When we are using `step ca init` to create a stepcas RA we don't have access to the password for verify the provisioner.	3 years ago
max furman	77fdfc9fa3	Merge branch 'master' into max/cert-mgr-crud	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
Mariano Cano	35e6cc275a	Fix typos in comments.	3 years ago
Mariano Cano	dce1b290bd	Remove debug statements.	3 years ago
Mariano Cano	ac3c754a6d	Use known CA and add tier and gcs bucket options.	3 years ago
Mariano Cano	529eb4bae9	Rename CAPool to CaPool.	3 years ago
Mariano Cano	9db68db509	Add tests with cloudCAS EnableCertificateAuthority.	3 years ago
Mariano Cano	48bc4e549d	Fix cloudcas tests.	3 years ago
Mariano Cano	072bd0dcf4	Add support for Google CAS v1	3 years ago
Herman Slatman	491c2b8d93	Improve initialization of SCEP authority	3 years ago
Herman Slatman	2a249d20de	Refactor initialization of SCEP authority	3 years ago
Herman Slatman	c5e4ea08b3	Merge branch 'master' into hs/scep	3 years ago
Mariano Cano	84018ec71b	Clarify comment.	3 years ago
Mariano Cano	a9297100d8	Allow to configure the JWK using the encrypted key.	3 years ago
Mariano Cano	d9f93ccfde	Fix typo.	3 years ago
Mariano Cano	edc7c4d90e	Add support for password encrypted files	3 years ago
Mariano Cano	80542d6d9a	Add JWK as an issuer for stepcas.	3 years ago
Mariano Cano	ce3e6bfdf6	Fix linting errors.	3 years ago
Mariano Cano	96de4e6ec8	Return a non-implemented error in stepcas.RenewCertificate.	3 years ago
Mariano Cano	348815f4f6	Fix error message.	3 years ago