36 Commits (df3e9c0cd6d36aa82ed9e8ba8c08148c81fe7e98)

Author	SHA1	Message	Date
Mariano Cano	bfe1f4952d	Rename interface to CertificateEnforcer and add tests.	4 years ago
Mariano Cano	64f26c0f40	Enforce a duration for identity certificates.	4 years ago
Mariano Cano	05cc1437b7	Remove unnecessary parse of certificate.	4 years ago
Mariano Cano	43bd8113aa	Remove unnecessary comments.	4 years ago
Mariano Cano	69a1b68283	Merge branch 'ssh' into kms	4 years ago
max furman	b265877050	Simplify statuscoder error generators.	4 years ago
max furman	c387b21808	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	c62526b39f	Add wip support for kms.	4 years ago
Mariano Cano	e67ccd9e3d	Add fault tolerance against clock skew accross system on TLS certificates.	4 years ago
Mariano Cano	8eeb82d0ce	Store renew certificate in the database.	5 years ago
Mariano Cano	0c3b9ebf45	Fix indentation.	5 years ago
max furman	a9ea292bd4	sshpop provisioner + ssh renew | revoke | rekey first pass	5 years ago
Jozef Kralik	bc6074f596	Change api of functions Authority.Sign, Authority.Renew ... Returns certificate chain instead of 2 members. Implements #126	5 years ago
max furman	fe7973c060	wip	5 years ago
Mariano Cano	2127d09ef3	Rename context type to apiCtx. ... It will conflict with the context package.	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	8c8547bf65	Remove unnecessary parse and improve tests.	5 years ago
Mariano Cano	a3e2b4a552	Move certificate check to the right place.	5 years ago
Mariano Cano	30a6889d1f	Use standard x509 instead of step one.	5 years ago
Mariano Cano	7fd737cbb1	Fix lint warnings.	5 years ago
Mariano Cano	1f5ff5c899	Fix sign and renew tests.	5 years ago
Mariano Cano	c0ef6f8dc5	Add missing modifier and change return codes.	5 years ago
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	5 years ago
Mariano Cano	1671ab2590	Fix some tests.	5 years ago
Mariano Cano	57b705f6cf	Use provisioner sign options.	5 years ago
Mariano Cano	d78febec7a	Fix extensions copy on renew ... Fixes #36	5 years ago
max furman	7e43402575	bug fix: don't add common name to CSR validation claims in Sign ... * added unit test for this case	5 years ago
max furman	e6e8443f3c	allow multiple identical SANs in cert	5 years ago
max furman	f0683c2e0a	Enable signing certificates with custom SANs ... * validate against SANs in token. must be 1:1 equivalent.	5 years ago
Mariano Cano	d6cad2a7f3	Add provisioner option to disable renewal. ... Fixes smallstep/ca-component#108	6 years ago
Mariano Cano	d574545d94	Format code with `gofmt -s`	6 years ago
max furman	7fa06643b2	change step provisioner OID and ASN1 representation	6 years ago
max furman	a4a461466b	withProvisionerOID and unit test	6 years ago
max furman	ee7db4006a	change sign + authorize authority api | add provisioners ... * authorize returns []interface{} - operators in this list can conform to any interface the user decides - our implementation has a combination of certificate claim validators and certificate template modifiers. * provisioners can set and enforce tls cert options	6 years ago
max furman	0b5f6487e1	change provisioners api ... * /provisioners -> /provisioners/jwk-set-by-issuer * /provisioners now returns a list of Provisioners	6 years ago
max furman	c284a2c0ab	first commit	6 years ago