ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors
2 years ago
43ddcf2efe
Do not use deprecated AuthorizeSign
2 years ago
48e2fabeb8
Add authority.MustFromContext
2 years ago
817af3d696
Fix unit tests on the api package
2 years ago
a93653ea8e
Use api.Route instead of the caHandler.
2 years ago
a6b8e65d69
Retrieve the authority from the context in api methods.
2 years ago
00634fb648
api/render, api/log: initial implementation of the packages ( #860 )
...
* api/render: initial implementation of the package
* acme/api: refactored to support api/render
* authority/admin: refactored to support api/render
* ca: refactored to support api/render
* api: refactored to support api/render
* api/render: implemented Error
* api: refactored to support api/render.Error
* acme/api: refactored to support api/render.Error
* authority/admin: refactored to support api/render.Error
* ca: refactored to support api/render.Error
* ca: fixed broken tests
* api/render, api/log: moved error logging to this package
* acme: refactored Error so that it implements render.RenderableError
* authority/admin: refactored Error so that it implements render.RenderableError
* api/render: implemented RenderableError
* api/render: added test coverage for Error
* api/render: implemented statusCodeFromError
* api: refactored RootsPEM to work with render.Error
* acme, authority/admin: fixed pointer receiver name for consistency
* api/render, errs: moved StatusCoder & StackTracer to the render package
2 years ago
d5d70baba7
Add /roots.pem handler ( #866 )
...
* Add /roots.pem handler
* Review changes
* Remove no peer cert test case
2 years ago
29092b9d8a
api: refactored to use the read package
2 years ago
f8df6a1acc
Change variable name for consistency
2 years ago
616490a9c6
Refactor renew after expiry token authorization
...
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
afb5d36206
Allow to renew certificates using an x5c-like token.
2 years ago
b5db3f5706
Modify errs.ForbiddenErr to always return an error to the cli.
3 years ago
8c8db0d4b7
Modify errs.BadRequestErr() to always return an error to the client.
3 years ago
933b40a02a
Introduce gocritic linter and address warnings
3 years ago
4aa529605d
Merge pull request #641 from hillu/quote-serial
...
Log certificate's serial number as stringified decimal number
3 years ago
9210a6740b
Fix logging provisioner name as string
3 years ago
edb01bc9f2
Log certificate's serial number as stringified decimal number
...
Using a JSON string fixes a common issue with JSON parsers that
deserialize all numbers to a 64-bit IEEE-754 floats. (Certificate
serial numbers are usually 128 bit values.)
This change is consistent with existing log entries for revocation
requests.
See also: #630 , #631
3 years ago
77fdfc9fa3
Merge branch 'master' into max/cert-mgr-crud
3 years ago
9fdef64709
Admin level API for provisioner mgmt v1
3 years ago
65dacc2795
Replace golint with revive
3 years ago
4f3e5ef64d
wip
3 years ago
7b5d6968a5
first commit
3 years ago
c1c986922b
Show Ed25519 in the public-key log field.
3 years ago
f88f58440f
add //nolint for new 1.16 deprecation warnings
...
- dsa
- pem.DecryptPEMBlock
3 years ago
c94a1c51be
Merge branch 'master' into ssh-cert-templates
4 years ago
aaaa7e9b4e
Merge branch 'master' into cert-templates
4 years ago
8e3481a8ef
[logger map] small optimization
...
Rather than doing two key writes and one lookup, just write once.
4 years ago
55bf5a4526
Add cert logging for acme/certificate api
4 years ago
4943ae58d8
Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates.
4 years ago
6c64fb3ed2
Rename provisioner options structs:
...
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
4 years ago
dfda497929
Renamed RenewOrRekey to Rekey
4 years ago
8f504483ce
Added RenewOrRekey function based on @maraino suggestion. RenewOrReky is called from Renew.
4 years ago
3813f57b1a
Add support for rekeying Fixes #292
4 years ago
1cb8bb3ae1
Simplify statuscoder error generators.
4 years ago
dccbdf3a90
Introduce generalized statusCoder errors and loads of ssh unit tests.
...
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
b9f6aacb0f
Move api errors to their own package and modify the typedef
4 years ago
5d7829b198
Replace /ssh/get-hosts to /ssh/hosts
4 years ago
c60641701b
Add version endpoint.
4 years ago
8bf3bf701e
Add support for /ssh/bastion method.
4 years ago
29853ae016
sshpop provisioner + ssh renew | revoke | rekey first pass
4 years ago
862d704f6b
get-hosts fixes
4 years ago
5616386eed
Add SSH getHosts api
4 years ago
37f17213bb
Add initial support for check-host endpoint.
4 years ago
d08db4df23
Rename SSH methods.
4 years ago
b5bc249e1c
Add support for multiple ssh roots.
...
Fixes #125
4 years ago
a35988ff08
Add initial support for ssh config.
...
Related to smallstep/cli#170
4 years ago
b000b59ee6
Fix HTTP method for /ssh/sign
4 years ago
961be1fbc7
Add endpoint to return the SSH public keys.
...
Related to smallstep/ca-component#195
4 years ago
bc6074f596
Change api of functions Authority.Sign, Authority.Renew
...
Returns certificate chain instead of 2 members.
Implements #126
5 years ago
max furman
Mariano Cano
Panagiotis Siatras
Andrew Reed
Mariano Cano
Herman Slatman
Hilko Bengen
dharanikumar-s
Jozef Kralik