45 Commits (f3d1863ec6d835955eca079519c4839ecfcfe0ee)

Author	SHA1	Message	Date
max furman	f3d1863ec6	A few more linter errors	2 years ago
max furman	1e0ea6f958	more linting fixes	2 years ago
Mariano Cano	f0a24bd8ca	Add acme property to enable challenges ... Fixes #1027	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	42102d88d5	Fix merge and add unit tests	2 years ago
Mariano Cano	ee7307bd41	Cherry-pick acme.go from acdfdf3	2 years ago
Mariano Cano	1e098aef5b	Fixes ACMEAttestationFormat comment	2 years ago
Mariano Cano	ba42aaf865	Add attestationFormat property in the ACME provisioner	2 years ago
Mariano Cano	fd4e96d1f4	Rename method to IsChallengeEnabled	2 years ago
Mariano Cano	c77b4ff9c5	Fix linter errors	2 years ago
Mariano Cano	59c5219a07	Use a type for acme challenges	2 years ago
Mariano Cano	bca311b05e	Add acme property to enable challenges ... Fixes #1027	2 years ago
Herman Slatman	5e9bce508d	Unexport GetPolicy()	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	c40a4d2694	Contain policy engines inside provisioner Controller	2 years ago
Herman Slatman	0bb15e16f9	Fix missing ACME provisioner option	2 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2 years ago
Herman Slatman	dc23fd23bf	Merge branch 'master' into herman/allow-deny-next	2 years ago
Mariano Cano	259e95947c	Add support for the provisioner controller ... The claimer, audiences and custom callback methods are now managed by the provisioner controller in an uniform way.	2 years ago
Herman Slatman	3ec9a7310c	Fix ACME order identifier allow/deny check	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Herman Slatman	c1424036bf	Merge branch 'master' into herman/allow-deny	2 years ago
Herman Slatman	512b8d6730	Refactor instantiation of policy engines ... Instead of using the `base` struct, the x509 and SSH policy engines are now added to each provisioner directly.	2 years ago
Herman Slatman	6440870a80	Clean up, improve test cases and coverage	2 years ago
Herman Slatman	6bc0513468	Add more tests	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago
Herman Slatman	d799359917	Merge branch 'master' into hs/acme-eab	2 years ago
Herman Slatman	a7fbbc4748	Add tests for GetCertificateBySerial	2 years ago
Herman Slatman	f31ca4f6a4	Add tests for validateExternalAccountBinding	3 years ago
Herman Slatman	f81d49d963	Add first working version of External Account Binding	3 years ago
Herman Slatman	258efca0fa	Improve revocation authorization	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
max furman	638766c615	wip	3 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	a7fe0104c4	Remove ACME restrictions and add proper template support.	4 years ago
Mariano Cano	49b9aa6e3f	Fix log string.	4 years ago
Mariano Cano	81cd288104	Enable templates in acme provisioners.	4 years ago
max furman	6e69f99310	Always set nbf and naf for new ACME orders ... ... - Use the default value from the ACME provisioner if values are not defined in the request.	4 years ago
Oleksandr Kovalchuk	322200b7db	Implement modifier to set CommonName ... Implement modifier which sets CommonName to the certificate if CommonName is empty and forceCN is set in the config. Replace previous implementation introduced in 0218018cee with new modifier. Closes https://github.com/smallstep/certificates/issues/259 Ref: https://github.com/smallstep/certificates/pull/260#issuecomment-628961322	4 years ago
Oleksandr Kovalchuk	503c9f6101	Add config option to force CN ... Add configuration option `forceCN` to ACME provisioner. When this option is set to `true`, provisioner should generate Subject.CommonName for certificate if it was not present in the request. Default value of `false` should keep the existing behavior (do not modify CSR and certificate). Ref: https://github.com/smallstep/certificates/issues/259	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago