Herman Slatman
17a37a13bf
Fix backdate support for ACME provisioner
...
Other provisioners did take into account the authority-wide
certificate backdate configuration already, but the ACME
provisioner did not. This commit adds `authority.GetBackdate`,
so that the ACME provisioner can use it if set.
Fixes : #927
2025-10-22 16:05:45 +02:00
Herman Slatman
cae47aa690
Merge branch 'master' into wire-acme-extensions
2024-08-02 22:58:56 +02:00
Mariano Cano
c8e65abfb1
Fix linter warnings
2024-06-12 16:03:01 -07:00
Mariano Cano
b4616ee8f1
Upgrade linkedca
...
This commit upgrades go.step.sm/linkedca with dependencies required by
smallstep/certificates#1802 . It also fixes some linter warnings.
2024-06-12 15:54:17 -07:00
Mariano Cano
f3f484cee2
Log errors using slog.Logger
...
This commit allows logging errors in a slog.Logger injected in the
context. This type of logger is not currently used directly in step-ca,
but this will change in the future.
2024-05-15 15:40:40 -07:00
Herman Slatman
194341e520
Address review comments
2024-02-07 00:54:29 +01:00
Herman Slatman
138c1013f6
Add validation for Wire UserID + DeviceID identifiers
2024-02-06 22:02:59 +01:00
Herman Slatman
2e78301189
Simplify the DPoP target provider functionality
2024-02-06 17:11:32 +01:00
Herman Slatman
c6a6622892
Improve test coverage for Wire authorizations
2024-02-06 16:56:30 +01:00
Herman Slatman
8a9b1b3f79
Move Wire option validation to provisioner initialization
2024-01-29 16:45:13 +01:00
Herman Slatman
93ba1654ea
Fix tests to work with Wire UserID and DeviceID
2024-01-24 13:45:20 +01:00
beltram
9eed61a9c5
use switch statement
2024-01-23 11:42:09 +01:00
beltram
a3de984ee3
fix: use 2 separate identifiers for Wire
2024-01-19 15:58:02 +01:00
Herman Slatman
1f5f756fce
Make Wire options more robust
2024-01-11 16:14:53 +01:00
Herman Slatman
6ef64b6ed6
Refactor the Wire option configuration
2024-01-11 15:08:44 +01:00
Herman Slatman
acad227b25
Put Wire options in lower level wire struct
2024-01-11 13:18:43 +01:00
Herman Slatman
897688a831
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli
2024-01-11 12:03:52 +01:00
Herman Slatman
70a2f431fa
Address review remarks
2024-01-11 11:06:39 +01:00
Herman Slatman
776a839a42
Fix linter issues and improve error handling
2024-01-09 21:31:19 +01:00
Herman Slatman
40668ae09e
Refactor WireID target processing a bit
2024-01-09 16:52:09 +01:00
Herman Slatman
fdea5e7db3
Fix tests for new ACME orders with Wire IDs
2024-01-08 23:16:31 +01:00
beltram
90b5347887
feat: try using the new ClientId & Handle format (i.e. plain URIs)
2024-01-08 22:11:37 +01:00
Stefan Berthold
5ceed08ae0
Reorganize parsing target
2024-01-08 21:19:54 +01:00
Stefan Berthold
83ba0bdc51
Replace field access by accessor functions
2024-01-08 21:17:57 +01:00
beltram
2b1223a080
simpler
2024-01-08 21:14:17 +01:00
beltram
036a144e09
add oidc target
2024-01-08 21:10:46 +01:00
beltram
97002040a5
fix: challenge target field was not mapped to db entity
2024-01-08 21:09:07 +01:00
beltram
d32a3e23f0
wip
2024-01-08 21:08:34 +01:00
beltram
3f474f77d4
feat: change from impp prefix to just im
2024-01-08 20:55:32 +01:00
beltram
01ef526d08
change uri prefix to impp:wireapp=
2024-01-08 20:53:10 +01:00
Stefan Berthold
8e0e35532c
Add Wire authz and challenges (OIDC+DPOP)
2024-01-08 20:27:16 +01:00
Dominic Evans
231b5d8406
chore(deps): upgrade github.com/go-chi/chi to v5
...
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.
See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4
Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com >
2023-09-20 11:26:32 +01:00
Mariano Cano
fd4e96d1f4
Rename method to IsChallengeEnabled
2022-09-08 13:22:35 -07:00
Mariano Cano
59c5219a07
Use a type for acme challenges
2022-09-08 12:34:06 -07:00
Mariano Cano
bca311b05e
Add acme property to enable challenges
...
Fixes #1027
2022-08-23 17:11:40 -07:00
Mariano Cano
693dc39481
Merge branch 'master' into device-attestation
2022-08-22 17:59:17 -07:00
max furman
b7c2f6c482
Check for DNS name validity
2022-08-16 00:12:31 -07:00
Mariano Cano
66356cff43
Add attestation certificate validation for Apple devices
2022-07-14 17:10:03 -07:00
Brandon Weeks
7e1b0bebd9
iOS 16 beta 1 support
2022-06-23 05:19:36 +10:00
Brandon Weeks
2ac8b69da2
Add ACME permanent-identifier identifier type
2022-06-23 05:19:36 +10:00
Herman Slatman
abfbbc8d49
Merge pull request #946 from smallstep/herman/acme-csr-padding
...
Strip base64-url padding from ACME CSR
2022-05-25 23:25:34 +02:00
Herman Slatman
fd546287ac
Strip base64-url padding from ACME CSR
...
This commit strips the padding from a base64-url encoded CSR
submitted by a client that doesn't use raw base64-url encoding.
2022-05-25 22:46:26 +02:00
Mariano Cano
d461918eb0
Merge branch 'master' into context-authority
2022-05-06 13:21:41 -07:00
Mariano Cano
6f9d847bc6
Fix panic in acme/api tests.
2022-05-02 17:35:35 -07:00
Mariano Cano
d1f75f1720
Refactor ACME api.
2022-04-28 19:15:18 -07:00
Mariano Cano
d13537d426
Use context in the acme handlers.
2022-04-27 15:42:26 -07:00
Herman Slatman
6e1f8dd7ab
Refactor policy engines into container
2022-04-26 13:12:16 +02:00
Herman Slatman
fb81407d6f
Fix ACME policy comments
2022-04-21 13:21:06 +02:00
Herman Slatman
a9f033ece5
Fix JSON property name for ACME policy
2022-04-15 10:58:40 +02:00
Herman Slatman
256fe113f7
Improve tests for ACME account policy
2022-04-11 15:25:55 +02:00
