403 Commits (df3e9c0cd6d36aa82ed9e8ba8c08148c81fe7e98)

Author	SHA1	Message	Date
Mariano Cano	4ac51dd508	Merge pull request #274 from smallstep/oidc-raw-locals ... Allow dots and other symbols in principals for OIDC	4 years ago
Mariano Cano	3246a3e81f	Add missing test case.	4 years ago
max furman	6e69f99310	Always set nbf and naf for new ACME orders ... ... - Use the default value from the ACME provisioner if values are not defined in the request.	4 years ago
Mariano Cano	0b5fd156e8	Add a third principal on OIDC tokens with the raw local part of the email. ... For the email first.last@example.com it will create the principals ["firstlast", "first.last", "first.last@example.com"] Fixes #253, #254	4 years ago
Mariano Cano	2bc69d3edd	Merge pull request #252 from smallstep/yubikey ... Yubikey support	4 years ago
Oleksandr Kovalchuk	4cd01b6868	Implement tests for forceCNOption modifier ... Implement unit tests which checks forceCNOption modifier (implemented in 322200b7db) is not broken and works correctly. Ref: https://github.com/smallstep/certificates/issues/259	4 years ago
Oleksandr Kovalchuk	893a53793a	Modify existing tests to accept forceCNOption modifier ... Modify existing tests to pass with changes introduced in commit 322200b7db. This is safe to do as tests assert exact length of modifiers, which has changed.	4 years ago
Oleksandr Kovalchuk	322200b7db	Implement modifier to set CommonName ... Implement modifier which sets CommonName to the certificate if CommonName is empty and forceCN is set in the config. Replace previous implementation introduced in 0218018cee with new modifier. Closes https://github.com/smallstep/certificates/issues/259 Ref: https://github.com/smallstep/certificates/pull/260#issuecomment-628961322	4 years ago
Oleksandr Kovalchuk	503c9f6101	Add config option to force CN ... Add configuration option `forceCN` to ACME provisioner. When this option is set to `true`, provisioner should generate Subject.CommonName for certificate if it was not present in the request. Default value of `false` should keep the existing behavior (do not modify CSR and certificate). Ref: https://github.com/smallstep/certificates/issues/259	4 years ago
Mariano Cano	c02fe77998	Close the key manager before shutting down.	4 years ago
Mariano Cano	4e544344f9	Initialize the required config fields on embedded authorities. ... This change is to make easier the use of embedded authorities. It can be difficult for third parties to know what fields are required. The new init methods will define the minimum usable configuration.	4 years ago
Mariano Cano	b5eab009b2	Rename method to NewEmbedded	4 years ago
Mariano Cano	824374bde0	Create a method to initialize the authority without a config file. ... When the CA is embedded in a third party product like Caddy, the config needed to use placeholders to be valid. This change adds a new method `NewEmbeddedAuthority` that allows to create an authority with the given options, the minimum options are a root and intermediate certificate, and the intermediate key. Fixes #218	4 years ago
Mariano Cano	4e9bff0986	Add support for OIDC multitoken tenants for azure.	4 years ago
Mariano Cano	8bc3b05232	Add new extra test case.	4 years ago
Mariano Cano	b0ff731d18	Add support for user provisioner certificates on OIDC provisioners. ... OIDC provisioners create an SSH certificate with two principals. This was avoiding the creationg of user provisioner certificates for those provisioners. Fixes smallstep/cli#268	4 years ago
Mariano Cano	a2dfa6faa8	Fix unit tests.	4 years ago
Mariano Cano	13507efb35	Remove the requirement for CSR to have a common name. ... Fixes #226	4 years ago
Mariano Cano	02ed784a9b	Do not enable by default ForwardAgent.	4 years ago
Mariano Cano	bfe1f4952d	Rename interface to CertificateEnforcer and add tests.	4 years ago
Mariano Cano	64f26c0f40	Enforce a duration for identity certificates.	4 years ago
Mariano Cano	fa416336a8	Add context to tests.	4 years ago
Mariano Cano	c49a9d5e33	Add context parameter to all SSH methods.	4 years ago
Mariano Cano	f868e07a76	Allow to use custom principals on cloud provisioners. ... Fixes #203	4 years ago
Mariano Cano	59fc8cdd2d	Fix typo in comments.	4 years ago
Mariano Cano	5c8c741fab	Fix linting issues.	4 years ago
Mariano Cano	05cc1437b7	Remove unnecessary parse of certificate.	4 years ago
Mariano Cano	2d4f369db2	Add options to set root and federated certificates using x509.Certificate	4 years ago
Mariano Cano	43bd8113aa	Remove unnecessary comments.	4 years ago
Mariano Cano	4eaeede77d	Fix unit tests.	4 years ago
Mariano Cano	21bd339b86	Merge branch 'master' into kms	4 years ago
Mariano Cano	7846696fbb	Fix return sign options on ssh sign.	4 years ago
max furman	d482ae2fb5	Remove test that is no longer implemented by the method.	4 years ago
max furman	397a181d10	Add backdate validation to sshCertValidityValidator.	4 years ago
max furman	df60fe3f0d	Remove all references to old apiError.	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	895d3054a3	Remove the use of custom x509 package. ... Upgrade cli dependency.	4 years ago
Mariano Cano	144acb9ee3	Remove debug statement.	4 years ago
Mariano Cano	06411d1715	Add tests of profileLimitDuration with backdate.	4 years ago
Mariano Cano	8297e5c717	Add tests for backdate and sshDefaultDuration	4 years ago
Mariano Cano	93b65bee7c	Add unit test for profileDefaultDuration.	4 years ago
Mariano Cano	74b5d7f984	Add backdate support on ssh rekey.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
Mariano Cano	5565d61bf3	Add fault tolerance against clock skew accross system on TLS certificates.	4 years ago
max furman	b9f6aacb0f	Move api errors to their own package and modify the typedef	4 years ago
Mariano Cano	f033422ffa	Allow no provisioners.	4 years ago
Mariano Cano	f4615d6258	Addapt test to api change.	4 years ago
max furman	3ac388612a	Use x5cInsecure token for /ssh/check-host endpoint	4 years ago
Mariano Cano	08eac1b00d	Make sure to define the KeyID from the token if available.	4 years ago