41 Commits (bfe29def59702f6d9ff322aa7df67fb5f58269f7)

Author	SHA1	Message	Date
Mariano Cano	567d96c771	Revert "Run on plaintext HTTP to support Cloud Run" ... This reverts commit 09b9673a60.	2 years ago
Brandon Weeks	f3d2bd7a19	Run on plaintext HTTP to support Cloud Run	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	23b8f45b37	Address gosec warnings ... Most if not all false positives	2 years ago
Mariano Cano	5e0be92273	Allow option to skip the validation of config	2 years ago
Mariano Cano	b62f4d1000	Add lgtm comments on some security warnings	2 years ago
Mariano Cano	a5439c43cd	Remove ciphersuites without Lucky13 countermeasures ... SHA-256 variants of the CBC ciphersuites don't implement any Lucky13 countermeasures. See http://www.isg.rhul.ac.uk/tls/Lucky13.html and https://www.imperialviolet.org/2013/02/04/luckythirteen.html.	2 years ago
Mariano Cano	369b8f81c3	Use go.step.sm/crypto/kms ... Fixes #975	2 years ago
max furman	99c9155467	disableSSHHostsListAPI -> disableGetSSHHosts	2 years ago
max furman	fb7f57a8df	Add attribute to disable SSH Hosts list API	2 years ago
Herman Slatman	ad2de16299	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	fe9c3cf753	Merge branch 'master' into ahmet2mir-feat/vault	2 years ago
Herman Slatman	abcad679ff	Merge branch 'master' into herman/allow-deny	2 years ago
Herman Slatman	d6be9450be	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	d3b6bc3c75	Merge branch 'master' into fix/adminra	2 years ago
Mariano Cano	674dc3c844	Rename unreleased claim to allowRenewalAfterExpiry for consistency.	2 years ago
Mariano Cano	37b521ec6c	Merge branch 'master' into feat/vault	2 years ago
Mariano Cano	c55b27a2fc	Refactor admin token to use with RAs.	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	dc23fd23bf	Merge branch 'master' into herman/allow-deny-next	2 years ago
Mariano Cano	c903f00cd4	Rename claim to allowRenewAfterExpiry.	2 years ago
Mariano Cano	616490a9c6	Refactor renew after expiry token authorization ... This changes adds a new authority method that authorizes the renew after expiry tokens.	2 years ago
Mariano Cano	fd6a2eeb9c	Add provisioner controller ... The provisioner controller has the implementation of the identity function as well as the renew methods with renew after expiry support.	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Mariano Cano	c0525381eb	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	716b946e7a	Normalize IPv6 hostname addresses	2 years ago
Ahmet DEMIR	68b980d689	feat(authority): avoid hardcoded cn in authority csr	2 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	da2802504b	Use Default min version if not specified.	3 years ago
Mariano Cano	072ba4227c	Add deployment type to config. ... This field is ignored except for the start of the ca. If the type is linked and the token is not passed, it will fail with an error.	3 years ago
Mariano Cano	384be6e205	Do not show provisioners if they are not required. ... For deployment types like linked ca, the list of provisioners in the ca.json are not required, so we should tag the json as omitempty.	3 years ago
Mariano Cano	4f27f4b002	Change default ciphersuites to newer names.	3 years ago
Mariano Cano	0730a165fd	Add collection of files and authority template.	3 years ago
Mariano Cano	887423ee6e	Update TLS cipher suites.	3 years ago
Mariano Cano	49c1427d15	Use authorityId instead of authorityID. ... In json or javascript world authorityId, userId, ... are more common than authorityID, ...	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
max furman	1726076ea2	wip	3 years ago
max furman	5d09d04d14	wip	3 years ago
max furman	af3cf7dae9	first steps	3 years ago
max furman	2f60f20b0b	lots of codes	3 years ago
max furman	7b5d6968a5	first commit	3 years ago