129 Commits (f3d1863ec6d835955eca079519c4839ecfcfe0ee)

Author	SHA1	Message	Date
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Mariano Cano	34c6c65671	Pass attestation information to the Sign method ... Attestation information might be useful in authorizing webhooks	2 years ago
Mariano Cano	8bd0174251	Rename field to IsCAServerCert	2 years ago
Mariano Cano	5df1694250	Add endpoint id for the RA certificate ... In a linked RA mode, send an endpoint id to group the server certificates.	2 years ago
Mariano Cano	eb091aec54	Simplify field names for ProvisionerInfo	2 years ago
Mariano Cano	6b5d3dca95	Add provisioner name to RA info	2 years ago
Mariano Cano	f9df8ac05f	Remove unused interface	2 years ago
Mariano Cano	9408d0f24b	Send RA provisioner information to the CA	2 years ago
Mariano Cano	ce9a23a0f7	Fix SSH certificate revocation	2 years ago
Mariano Cano	c8d7ad7ab9	Fix store certificates methods with new interface	2 years ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	76112c2da1	Improve error creation and testing for core policy engine	2 years ago
Herman Slatman	3fa96ebf13	Improve policy errors returned to client	2 years ago
Herman Slatman	ad2de16299	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	fe9c3cf753	Merge branch 'master' into ahmet2mir-feat/vault	2 years ago
Herman Slatman	abcad679ff	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	ea5f7f2acc	Fix SANs for step-ca certificate ... Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>	2 years ago
Mariano Cano	37b521ec6c	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	9797b3350e	Merge branch 'master' into herman/allow-deny	2 years ago
Mariano Cano	db337debcd	Load provisioner from the database instead of the extension.	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	b49307f326	Fix ACME order tests with mock ACME CA	2 years ago
Herman Slatman	9e0edc7b50	Add early authority policy evaluation to ACME order API	2 years ago
Herman Slatman	613c99f00f	Fix linting issues	2 years ago
Mariano Cano	9d027c17d0	Send current provisioner on PostCertificate	2 years ago
Herman Slatman	101ca6a2d3	Check admin subjects before changing policy	2 years ago
Herman Slatman	81b0c6c37c	Add API implementation for authority and provisioner policy	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Mariano Cano	c0525381eb	Merge branch 'master' into feat/vault	2 years ago
Herman Slatman	5cb23c6029	Merge pull request #804 from smallstep/herman/normalize-ipv6-dns-names ... Normalize IPv6 hostname addresses	2 years ago
Herman Slatman	e887ccaa07	Ensure the CA TLS certificate represents IPv6 DNS names as IP in cert ... If an IPv6 domain name (i.e. [::1]) is provided manually in the `ca.json`, this commit will ensure that it's represented as an IP SAN in the TLS certificate. Before this change, the IPv6 would become a DNS SAN.	2 years ago
Mariano Cano	300c19f8b9	Add a custom enforcer that can be used to modify a cert.	2 years ago
Ahmet DEMIR	68b980d689	feat(authority): avoid hardcoded cn in authority csr	2 years ago
Herman Slatman	50c3bce98d	Change if/if to if/else-if when checking the type of JSON error	2 years ago
Herman Slatman	a3cf6bac36	Add special handling for *json.UnmarshalTypeError	2 years ago
Herman Slatman	0475a4d26f	Refactor extraction of JSON template syntax errors	2 years ago
Herman Slatman	a5455d3572	Improve errors related to template execution failures (slightly)	2 years ago
Herman Slatman	3bc3957b06	Merge branch 'master' into hs/acme-revocation	3 years ago
Herman Slatman	47a8a3c463	Add test case for ACME Revoke to Authority	3 years ago
Herman Slatman	c9cd876a7d	Merge branch 'master' into hs/acme-revocation	3 years ago
Mariano Cano	ff04873a2a	Change the default error type to forbidden in Sign. ... The errors will also be propagated from sign options.	3 years ago
Mariano Cano	668d3ea6c7	Modify errs.Wrap() with bad request to send messages to users.	3 years ago
Mariano Cano	8ce807a6cb	Modify errs.BadRequest() calls to always send an error to the client.	3 years ago
Herman Slatman	3151255a25	Merge branch 'master' into hs/acme-revocation	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	42fde8ba28	Merge branch 'master' into linkedca	3 years ago
Mariano Cano	9e5762fe06	Allow the reuse of azure token if DisableTrustOnFirstUse is true ... Azure caches tokens for 24h and we cannot issue a new certificate for the same instance in that period of time. The meaning of this parameter is to allow the signing of multiple certificate in one instance. This is possible in GCP, because we get a new token, and is possible in AWS because we can generate a new one. On Azure there was no other way to do it unless you wait for 24h. Fixes #656	3 years ago
Mariano Cano	d72fa953ac	Remove debug statements.	3 years ago
Mariano Cano	3f07eb597a	Implement revocation using linkedca.	3 years ago
Mariano Cano	0730a165fd	Add collection of files and authority template.	3 years ago