484 Commits (f3d1863ec6d835955eca079519c4839ecfcfe0ee)

Author	SHA1	Message	Date
max furman	f3d1863ec6	A few more linter errors	2 years ago
max furman	1e0ea6f958	more linting fixes	2 years ago
max furman	33458c88aa	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	f0a24bd8ca	Add acme property to enable challenges ... Fixes #1027	2 years ago
Max	2de7d3fcf0	Update authority/provisioner/claims.go ... Co-authored-by: Mariano Cano <mariano@smallstep.com>	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	34c6c65671	Pass attestation information to the Sign method ... Attestation information might be useful in authorizing webhooks	2 years ago
Mariano Cano	42102d88d5	Fix merge and add unit tests	2 years ago
Mariano Cano	ee7307bd41	Cherry-pick acme.go from acdfdf3	2 years ago
Mariano Cano	1e098aef5b	Fixes ACMEAttestationFormat comment	2 years ago
Mariano Cano	ba42aaf865	Add attestationFormat property in the ACME provisioner	2 years ago
Mariano Cano	b2119e9f2c	Merge pull request #977 from smallstep/device-attestation ... Device attestation	2 years ago
Mariano Cano	fd4e96d1f4	Rename method to IsChallengeEnabled	2 years ago
Mariano Cano	c77b4ff9c5	Fix linter errors	2 years ago
Mariano Cano	59c5219a07	Use a type for acme challenges	2 years ago
Raal Goff	b89f210469	remove fail-email test and add ok-empty-email test	2 years ago
Raal Goff	7a03c43fe2	allow missing Email claim in OIDC tokens, use subject when its missing	2 years ago
Mariano Cano	df96b126dc	Add AuthorizeChallenge unit tests	2 years ago
Mariano Cano	bca311b05e	Add acme property to enable challenges ... Fixes #1027	2 years ago
Mariano Cano	693dc39481	Merge branch 'master' into device-attestation	2 years ago
Mariano Cano	23b8f45b37	Address gosec warnings ... Most if not all false positives	2 years ago
Mariano Cano	5df1694250	Add endpoint id for the RA certificate ... In a linked RA mode, send an endpoint id to group the server certificates.	2 years ago
Mariano Cano	21427d5d65	Replace instead of prepend provisioner extension ... With non standard SANs this will generate the SAN and provisioner extension in the same order.	2 years ago
Mariano Cano	6b5d3dca95	Add provisioner name to RA info	2 years ago
Mariano Cano	a1f54921d2	Rename internal field	2 years ago
Mariano Cano	9408d0f24b	Send RA provisioner information to the CA	2 years ago
Shulhan	fe04f93d7f	all: reformat all go files with the next gofmt (Go 1.19) ... There are some changes that manually edited, for example using '-' as default list and grouping imports.	2 years ago
Mariano Cano	6b3a8f22f3	Add provisioner to SSH renewals ... This commit allows to report the provisioner to the linkedca when a SSH certificate is renewed.	2 years ago
Mariano Cano	3c4d0412ef	Merge pull request #941 from smallstep/ssh-provisioner ... Report SSH provisioner	2 years ago
Mariano Cano	a627f21440	Fix AuthorizeSSHSign tests with extra SignOption	2 years ago
Mariano Cano	e7d7eb1a94	Add provisioner as a signOption for SSH	2 years ago
Herman Slatman	479eda7339	Improve error message when client renews with expired certificate ... When a client provides an expired certificate and `AllowAfterExpiry` is not enabled, the client would get a rather generic error with instructions to view the CA logs. Viewing the CA logs can be done when running `step-ca`, but they can't be accessed easily in the hosted solution. This commit returns a slightly more informational message to the client in this specific situation.	2 years ago
Herman Slatman	5e9bce508d	Unexport GetPolicy()	2 years ago
Herman Slatman	d82e51b748	Update AllowWildcardNames configuration name	2 years ago
Herman Slatman	2b7f6931f3	Change Subject Common Name verification ... Subject Common Names can now also be configured to be allowed or denied, similar to SANs. When a Subject Common Name is not explicitly allowed or denied, its type will be determined and its value will be validated according to the constraints for that type of name (i.e. URI).	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	2a7620641f	Fix more PR comments	2 years ago
Herman Slatman	c40a4d2694	Contain policy engines inside provisioner Controller	2 years ago
Herman Slatman	72bbe53376	Add additional policy options	2 years ago
Herman Slatman	7f9034d22a	Add additional policy options	2 years ago
Herman Slatman	abcad679ff	Merge branch 'master' into herman/allow-deny	2 years ago
Herman Slatman	d6be9450be	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	d3b6bc3c75	Merge branch 'master' into fix/adminra	2 years ago
Mariano Cano	674dc3c844	Rename unreleased claim to allowRenewalAfterExpiry for consistency.	2 years ago
Herman Slatman	0bb15e16f9	Fix missing ACME provisioner option	2 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	8abd568f03	Merge branch 'master' into fix/adminra	2 years ago
Mariano Cano	b7e11da480	Merge branch 'master' into feat/linkedra	2 years ago
Mariano Cano	df8ffb35af	Remove unnecessary database in provisioner config.	2 years ago
Herman Slatman	d8776d8f7f	Add K8sSA SSH user policy back ... According to the docs, the K8sSA provisioner can be configured to issue SSH user certs.	2 years ago