Commit Graph

3079 Commits (bfe29def59702f6d9ff322aa7df67fb5f58269f7)
 

Author SHA1 Message Date
Brandon Weeks 5f5315260a
iOS 16 beta 1 support 2 years ago
Brandon Weeks de5b0ef5c2
Verify key authorization is contained within the TPM quote extraData field 2 years ago
Brandon Weeks 248da10f32
Implement TPM attestation statement verification 2 years ago
Brandon Weeks 6f2b4d3042
Add ACME permanent-identifier identifier type 2 years ago
Brandon Weeks f3d2bd7a19
Run on plaintext HTTP to support Cloud Run 2 years ago
Mariano Cano 746ee2b6db
Upgrade go.step.sm/cli-utils
Fixes issue with step path
2 years ago
Mariano Cano a795f4281c
Upgrade to go.step.sm/crypto v0.18.0 2 years ago
Herman Slatman 25cbe02b9e
Add provisioner template validation
Fixes #1012
2 years ago
Max 2de7d3fcf0
Update authority/provisioner/claims.go
Co-authored-by: Mariano Cano <mariano@smallstep.com>
2 years ago
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano 3f58f30b21 Name tests properly 2 years ago
Mariano Cano 75bff055fc Add StatusCoder to ConstraintError 2 years ago
Mariano Cano 2959aa676d Add helper ValidateCertificate 2 years ago
Mariano Cano 8b54e25f64 Allow nil engines 2 years ago
Mariano Cano 2a15e3eee1 Rename constraint.Service to constraint.Engine 2 years ago
Mariano Cano 45e594f98c Make the constraint service public 2 years ago
Mariano Cano 7bea2f4d0e Add more constraint unit tests 2 years ago
Mariano Cano 495494ce8f Return a typed error 2 years ago
Mariano Cano 6686f0437d Remove x509 prefixes 2 years ago
Mariano Cano 0263468424 Initial work on name constraints validation
Issue #1060
2 years ago
Mariano Cano fcb9d88223
Merge pull request #1058 from smallstep/acme-errors
Return the internal error instead of the ACME error
2 years ago
Mariano Cano 7dc2067cb2
Update acme/errors.go
Co-authored-by: Max <mx.furman@gmail.com>
2 years ago
Mariano Cano 226d36f66f Fix unit tests 2 years ago
Mariano Cano 8cf6675ce4 Return the internal error instead of the ACME error
For ACME errors, return the internal error string instead of the
ACME one on the "Error() string" function. This way the logs will
have more information about the cause of an error.

Fixes #1057
2 years ago
Mariano Cano 6cdaaf5e0c
Merge pull request #1055 from smallstep/acme-att-info
Acme attestation information
2 years ago
Mariano Cano 34c6c65671 Pass attestation information to the Sign method
Attestation information might be useful in authorizing webhooks
2 years ago
Mariano Cano b0d24fb801 Fix test with gcloud local credentialss 2 years ago
Mariano Cano baeb053eca
Merge pull request #1053 from smallstep/acme-roots
Acme roots
2 years ago
Mariano Cano 498549c95c Extract common function used in tests 2 years ago
Mariano Cano 829530ae90 Fix linter errors 2 years ago
Mariano Cano 6b73a020e3 Add unit tests for apple and step attestations 2 years ago
Mariano Cano 42102d88d5 Fix merge and add unit tests 2 years ago
Mariano Cano ee7307bd41 Cherry-pick acme.go from acdfdf3 2 years ago
Mariano Cano 2505a68f69
Merge pull request #1052 from smallstep/fix-nil-pointer
Fix nil pointer exception
2 years ago
Mariano Cano 8fc4a58242 Fix nil pointer exception, missing error 2 years ago
max furman 25f0bf31f4
Update build status svg and link to github actions 2 years ago
Mariano Cano df975122a0 Upgrade linkedca and add entry to changelog 2 years ago
Mariano Cano 666f695616
Merge pull request #1048 from smallstep/attest-platform
Attestation Formats
2 years ago
Mariano Cano bb0210e875 Fix typo in linkedca variable 2 years ago
Mariano Cano 1e098aef5b Fixes ACMEAttestationFormat comment 2 years ago
Mariano Cano 66407139e5 Add methods to convert attestation formats 2 years ago
Mariano Cano 0f651799d0 Reject not enabled attestation formats 2 years ago
Mariano Cano 53ad3a9dbe Add go workspaces files to gitignore 2 years ago
Mariano Cano ba42aaf865 Add attestationFormat property in the ACME provisioner 2 years ago
Mariano Cano b2119e9f2c
Merge pull request #977 from smallstep/device-attestation
Device attestation
2 years ago
Mariano Cano fd4e96d1f4 Rename method to IsChallengeEnabled 2 years ago
Mariano Cano c77b4ff9c5 Fix linter errors 2 years ago
Mariano Cano 59c5219a07 Use a type for acme challenges 2 years ago
Mariano Cano a89bea701d Format comment 2 years ago
Mariano Cano 5df9434286 Fix old comment, device-attest-01 uses the acme payload 2 years ago