2360 Commits (a3cf6bac36c07cb45b6aaafa9f84a53bf26e384b)

 

All Branches   

Search

Author	SHA1	Message	Date
Herman Slatman	a3cf6bac36	Add special handling for *json.UnmarshalTypeError	2 years ago
Herman Slatman	0475a4d26f	Refactor extraction of JSON template syntax errors	2 years ago
Herman Slatman	a5455d3572	Improve errors related to template execution failures (slightly)	2 years ago
Herman Slatman	8fee970297	Merge pull request #779 from smallstep/herman/acme-cli-user-agent	2 years ago
Herman Slatman	07addd0cac	Fix linting issue	2 years ago
Herman Slatman	a68208a3ba	Set Step CLI User-Agent when performing ACME requests	2 years ago
Herman Slatman	8473164b41	Merge pull request #773 from smallstep/herman/ip-sans-improvements ... Improve IP SANS support	2 years ago
Herman Slatman	a5f2f004e3	Change name of IP Common Name test for clarity	2 years ago
Herman Slatman	80bebda69c	Fix code style issue	2 years ago
Mariano Cano	f7c1a328ed	Merge pull request #777 from smallstep/pkcs11-decrypter ... Implement the kms.Decrypter with PKCS#11	2 years ago
Mariano Cano	d5c6572da4	Fix typo.	2 years ago
Mariano Cano	5a32401d23	Implement the kms.Decrypter with PKCS#11 ... This interface allows the use of SCEP with PKCS#11 modules.	2 years ago
Mariano Cano	ab44fbfb3f	Merge pull request #774 from smallstep/cm-roots ... Avoid doing unauthenticated requests on the SDK	2 years ago
Mariano Cano	2c63abcf52	fix grammar	2 years ago
Mariano Cano	7c4e6dcc96	Remove duplicated code in bootstrap methods	2 years ago
Mariano Cano	64c19d4264	Fix subject in test, use ip	2 years ago
Mariano Cano	b0b2e77b0e	Avoid doing unauthenticated requests on the SDK ... When step-ca runs with mTLS required on some endpoints, the SDK used in autocert will fail to start because the identity certificate is missing. This certificate is only required to retrieve all roots, in most cases there's only one, and the SDK has access to it.	2 years ago
Herman Slatman	bc0875bd7b	Disallow email address and URLs in the CSR ... Before this commit `step` would allow email addresses and URLs in the CSR. This doesn't fit nicely with the rest of ACME, in which identifiers need to be authorized before a certificate is issued.	2 years ago
Herman Slatman	13a31fd862	Merge branch 'master' into herman/ip-sans-improvements	2 years ago
Herman Slatman	ca707cbe05	Fix linting	2 years ago
Herman Slatman	a5d33512fe	Fix test	2 years ago
Herman Slatman	a2c9b5cd7e	Allow IP identifiers in subject, including authorization enforcement ... To support IPs in the subject using `step-cli`, this PR ensures that Subject Common Names that can be parsed as an IP are also checked to have been authorized before. The PR for `step-cli` is here: github.com/smallstep/cli/pull/576.	2 years ago
Herman Slatman	fbd3fd2145	Merge pull request #625 from hslatman/hs/acme-revocation ... ACME Certificate Revocation	3 years ago
Herman Slatman	00539d07c9	Add changelog entry for ACME revocation	3 years ago
Herman Slatman	3bc3957b06	Merge branch 'master' into hs/acme-revocation	3 years ago
Herman Slatman	0524122191	Remove authorization flow for different Account private keys ... As discussed in https://github.com/smallstep/certificates/issues/767, we opted for not including this authorization flow to prevent users from getting OOMs. We can add the functionality back when the underlying data store can provide access to a long list of Authorizations more efficiently, for example when a callback is implemented.	3 years ago
Carl Tashian	53ebd85327	Update star gif size	3 years ago
Carl Tashian	c0255b7caa	Update star gif	3 years ago
Carl Tashian	accb0710a1	Star gif	3 years ago
Mariano Cano	94afec7e1f	Merge pull request #758 from smallstep/errors-forbidden ... Forbidden errors and more	3 years ago
Mariano Cano	e0fee84694	Add comment about public key validator.	3 years ago
Mariano Cano	0cebde3db5	Change fallback message on RekeySSH.	3 years ago
Herman Slatman	004fc054d5	Fix PR comments	3 years ago
Mariano Cano	9fd147f3da	Change error message.	3 years ago
Herman Slatman	47a8a3c463	Add test case for ACME Revoke to Authority	3 years ago
Herman Slatman	06bb97c91e	Add logic for Account authorizations and improve tests	3 years ago
Herman Slatman	bae1d256ee	Improve tests for JWK vs. KID revoke auth flow ... The logic for both test cases is fairly similar, but with some small differences. Made those clearer by means of some comments. Also added some comments to the middleware logic that decided whether to extract JWK or lookup by KID.	3 years ago
Herman Slatman	a7fbbc4748	Add tests for GetCertificateBySerial	3 years ago
Herman Slatman	4d01cf8135	Increase test code coverage	3 years ago
Herman Slatman	2d357da99b	Add tests for ACME revocation	3 years ago
Herman Slatman	ed295ca15d	Fix linting issue	3 years ago
Herman Slatman	c9cd876a7d	Merge branch 'master' into hs/acme-revocation	3 years ago
Mariano Cano	78acf35bf4	Merge pull request #753 from scattered-network/docker-compose-go-mod-updates ... Docker Example Fix: Remove Step Build	3 years ago
Mariano Cano	d35848f7a9	Fix unit tests.	3 years ago
Mariano Cano	c3f98fd04d	Change some bad requests to forbidded. ... Change in the sign options bad requests to forbidded if is the provisioner the one adding a restriction, e.g. list of dns names, validity, ...	3 years ago
JJ	cbb0f40696	Revert "Update Go Modules: Fixes Docker Example" ... This reverts commit 11a1297bf5.	3 years ago
JJ	3c5d1c9d3f	Use smallstep/small-cli as base image, remove step cli build	3 years ago
Mariano Cano	ff04873a2a	Change the default error type to forbidden in Sign. ... The errors will also be propagated from sign options.	3 years ago
Mariano Cano	b9beab071d	Fix unit tests.	3 years ago
Mariano Cano	507a272b4d	Return always http errors in sign options.	3 years ago