smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
Mariano Cano	95887ebf40	Merge pull request #1481 from smallstep/remove-user-regex Remove OIDC user regexp check	10 months ago
Mariano Cano	5bfe96d8c7	Send X5C leaf certificate to webhooks This commit adds a new property that will be sent to authorizing and enriching webhooks when signing certificates using the X5C provisioner.	10 months ago
Mariano Cano	7fa97bedec	Remove OIDC user regexp check This commit removes the regular expression check on OIDC usernames. Although it is not recommended to use any character in a username, it is possible to create and use them. The tool useradd has the flag --badname and adduser has --allow-badname and --allow-all-names to create new users with any character. Moreover, it is possible to create any username with the rest of provisioners. Fixes #1436	10 months ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Andrew Reed	2c5e41b093	Fix webhook controller ignoring cert type	2 years ago
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001 )	2 years ago
Herman Slatman	479eda7339	Improve error message when client renews with expired certificate When a client provides an expired certificate and `AllowAfterExpiry` is not enabled, the client would get a rather generic error with instructions to view the CA logs. Viewing the CA logs can be done when running `step-ca`, but they can't be accessed easily in the hosted solution. This commit returns a slightly more informational message to the client in this specific situation.	2 years ago
Herman Slatman	5e9bce508d	Unexport GetPolicy()	2 years ago
Herman Slatman	c40a4d2694	Contain policy engines inside provisioner Controller	2 years ago
Mariano Cano	674dc3c844	Rename unreleased claim to allowRenewalAfterExpiry for consistency.	2 years ago
Mariano Cano	c903f00cd4	Rename claim to allowRenewAfterExpiry.	2 years ago
Mariano Cano	389815642d	Fix tests: certs are truncated to seconds.	2 years ago
Mariano Cano	fd6a2eeb9c	Add provisioner controller The provisioner controller has the implementation of the identity function as well as the renew methods with renew after expiry support.	2 years ago

13 Commits (991a9a6223c5c6ddb025d089292b2a854d304e52)