23 Commits (e7a988b2cd3e135d3482cc20146f1de8cac38026)

Author	SHA1	Message	Date
Herman Slatman	e7a988b2cd	Pin golangci-lint to v1.43.0 and fix issues	3 years ago
Joe Julian	0369151bfa	use InsecureSkipVerify for validation ... The server will not yet have a valid certificate so we need to disable certificate validation in the HTTPGetter.	3 years ago
Mariano Cano	2e1524ec2f	Remove the creation on nonce on get acme directory. ... According to RFC 8555, the replay nonces are only required in POST requests. And of course in the new-nonce request.	3 years ago
max furman	b1888fd34d	Use different method for unescpaed paths for the router	3 years ago
max furman	672e3f976e	Few ACME fixes ... ... - always URL escape linker output - validateJWS should accept RSAPSS - GetUpdateAccount -> GetOrUpdateAccount	3 years ago
max furman	440678cb62	Add markInvalid arg to storeError for invalidating challenge	3 years ago
max furman	6b8585c702	PR review fixes / updates	3 years ago
max furman	a785131d09	Fix lint issues	3 years ago
max furman	1831920363	Finish order unit tests and remove unused mocklinker	3 years ago
max furman	b6ebc0fd25	more unit tests	3 years ago
max furman	20b9785d20	[acme db interface] continuing unit test work	3 years ago
max furman	291fd5d45a	[acme db interface] more unit tests	3 years ago
max furman	f71e27e787	[acme db interface] unit test progress	3 years ago
max furman	bb8d54e596	[acme db interface] unit tests compiling	3 years ago
max furman	f20fcae80e	[acme db interface] wip unit test fixing	3 years ago
max furman	80a6640103	[acme db interface] wip	3 years ago
max furman	55bf5a4526	Add cert logging for acme/certificate api	4 years ago
David Cowden	a26b5f322d	acme/api: Brush up documentation on key-change ... Add more specific wording describing what a 501 means and add more color explaining how official vs unofficial error types should be handled.	4 years ago
David Cowden	b26e6e42b3	acme: Return 501 for the key-change route ... RFC 8555 § 7.3.5 is not listed as optional but we do not currently support it. Rather than 404, return a 501 to inform clients that this functionality is not yet implemented. The notImplmented error type is not an official error registered in the ietf:params:acme:error namespace, so prefix if with step:acme:error. An ACME server is allowed to return other errors and clients should display the message detail to users. Fixes: https://github.com/smallstep/certificates/issues/209	4 years ago
max furman	e1409349f3	Allow relative URL for all links in ACME api ... ... * Pass the request context all the way down the ACME stack. * Save baseURL in context and use when generating ACME urls.	4 years ago
Clive Jevons	639993bd09	Read host and protocol information from request for links ... When constructing links we want to read the required host and protocol information in a dynamic manner from the request for constructing ACME links such as the directory information. This way, if the server is running behind a proxy, and we don't know what the exposed URL should be at runtime, we can construct the required information from the host, tls and X-Forwarded-Proto fields in the HTTP request. Inspired by the LetsEncrypt Boulder project (web/relative.go).	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago