Commit Graph

344 Commits (f3d1863ec6d835955eca079519c4839ecfcfe0ee)

Author SHA1 Message Date
max furman f0683c2e0a Enable signing certificates with custom SANs
* validate against SANs in token. must be 1:1 equivalent.
5 years ago
Mariano Cano d394dd233a Initiate default RootCAs/ClientCAs when no options are passed. 5 years ago
Mariano Cano 25eba1a96c WIP on the safely rotate of root and federated certificates.
Fixes #23
5 years ago
Mariano Cano bacbf85aa3 Add new bootstrap method that creates a listener. 5 years ago
Mariano Cano 984bf8d38c Add missing file. 5 years ago
Mariano Cano 1cc5e94666 Add simple test for federation. 5 years ago
Mariano Cano dbd1bf11f1 Rename variable. 5 years ago
Mariano Cano 7dc61bf233 Remove deprecated code 5 years ago
Mariano Cano 518b597535 Remove mTLS client requirement in /roots and /federation 5 years ago
Mariano Cano 9adc65febf Add test for newTLSOptionCtx 5 years ago
Mariano Cano 6116523055 Fix random order in tests. 5 years ago
Mariano Cano 8510e25b3b Add test with bootstrap server. 5 years ago
Mariano Cano f99ae9da93 Add root rotation test. 5 years ago
Mariano Cano af9e6488fc Make the renew test shorter. 5 years ago
Mariano Cano 25ddbaedff Allow to customize the minimal cert duration for tests. 5 years ago
Mariano Cano 10aaece1b0 Update root certificates on renew. 5 years ago
Mariano Cano 6d3e8ed93c Add all root certificates by default on bootstrap methods. 5 years ago
Mariano Cano d296cf95a9 Add mTLS request to get all the root CAs, not the federated ones. 5 years ago
Mariano Cano 98cc243a37 Add support for multiple roots. 5 years ago
Mariano Cano 722bcb7e7a Add initial support for federated root certificates. 5 years ago
Mariano Cano 7e2f80ac30 Fix grammar error 6 years ago
max furman c0107ab5b9 Fix ca renew documentation 6 years ago
Mariano Cano f7a5be3942 Force the renew of the CA server. 6 years ago
Mariano Cano b0a410066b Add support for parsing endpoints without schema.
Fixes smallstep/ca-component#117
6 years ago
Mariano Cano d872f09910 Use mTLS by default on SDK methods.
Add options to modify the tls.Config for different configurations.
Fixes #7
6 years ago
Mariano Cano 9c64dbda9a Add helpers to add direct support for mTLS. 6 years ago
Mariano Cano b23e3bec7f Remove comment of removed arguments. 6 years ago
max furman 5f2d998584 change documentation for bootstrap Server|Client
* provide documentation for default and non-default invocation.
6 years ago
Mariano Cano ba88c8c5cb Add context to bootstrap methods. 6 years ago
Mariano Cano 7eb8aeb1f1 Add tests for bootstrap functions. 6 years ago
Mariano Cano 091506a994 Add bootstrap helpers that uses just a token. 6 years ago
max furman c74fcd57a7 ca-component -> certificates
* fix redundant error check
* add README
6 years ago
max furman 0d9dd2d14b provisioner issuer -> name 6 years ago
Mariano Cano 71a3587b76 Add client support for provisioner cursor and limit options.
Fixes #83
6 years ago
Mariano Cano 99cab73360 Remove unused import /provisioners/jwk-set-by-issuer 6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
Mariano Cano d7c31c3133 Properly fill CSR DNSNames or IPAddresses 6 years ago
Mariano Cano 2b2598c695 Fix audience to fix ca tests. 6 years ago
Mariano Cano 511e1a9e23 Fix getting transport from root fingerprint. 6 years ago
max furman 0b5f6487e1 change provisioners api
* /provisioners -> /provisioners/jwk-set-by-issuer
* /provisioners now returns a list of Provisioners
6 years ago
Mariano Cano 7b6a3ea427 Add client methods for provisioning endpoints. 6 years ago
max furman 378166a3b2 add full stack tests for multiple provisioners api
* /provisioners and /provisioners/<key-id>/encrypted-key
6 years ago
max furman d773770a44 add authority.New unit tests 6 years ago
max furman c284a2c0ab first commit 6 years ago