Herman Slatman
17a37a13bf
Fix backdate support for ACME provisioner
...
Other provisioners did take into account the authority-wide
certificate backdate configuration already, but the ACME
provisioner did not. This commit adds `authority.GetBackdate`,
so that the ACME provisioner can use it if set.
Fixes : #927
2025-10-22 16:05:45 +02:00
Herman Slatman
c6c2c4a80e
Fix ACME Wire Order tests
2024-03-06 16:30:43 +01:00
Herman Slatman
194341e520
Address review comments
2024-02-07 00:54:29 +01:00
Herman Slatman
138c1013f6
Add validation for Wire UserID + DeviceID identifiers
2024-02-06 22:02:59 +01:00
Herman Slatman
c6a6622892
Improve test coverage for Wire authorizations
2024-02-06 16:56:30 +01:00
Herman Slatman
ef657d7d2d
Fix OIDC target
2024-02-06 13:17:49 +01:00
Herman Slatman
93ba1654ea
Fix tests to work with Wire UserID and DeviceID
2024-01-24 13:45:20 +01:00
Herman Slatman
2f3819aa4e
Use key authorization from ID token and handle -> preferred_username
2024-01-17 14:13:55 +01:00
Herman Slatman
79739e5073
Change signature algorithm property name
2024-01-12 09:48:49 +01:00
Herman Slatman
1bf807add3
Use base64 encoded signing key format
2024-01-11 17:04:08 +01:00
Herman Slatman
1f5f756fce
Make Wire options more robust
2024-01-11 16:14:53 +01:00
Herman Slatman
6ef64b6ed6
Refactor the Wire option configuration
2024-01-11 15:08:44 +01:00
Herman Slatman
acad227b25
Put Wire options in lower level wire struct
2024-01-11 13:18:43 +01:00
Herman Slatman
897688a831
Merge branch 'wire-acme-extensions' into herman/remove-rusty-cli
2024-01-11 12:03:52 +01:00
Herman Slatman
ca8855767d
Fix and add more tests to Wire order identifier validation
2024-01-11 11:47:06 +01:00
Herman Slatman
de25740567
Change name of test for Wire Order
2024-01-10 21:16:04 +01:00
Herman Slatman
c7892e9cd3
Remove the rusty-jwt-cli configuration
2024-01-10 20:51:19 +01:00
Herman Slatman
ffd887f8cc
Fix tests for ACME Wire provisioner
2024-01-10 20:23:01 +01:00
Herman Slatman
fdea5e7db3
Fix tests for new ACME orders with Wire IDs
2024-01-08 23:16:31 +01:00
beltram
84e9682476
feat: change the separator between user-id & device-id in a client-id. Use '!' instead of ':'
2024-01-08 22:12:13 +01:00
beltram
90b5347887
feat: try using the new ClientId & Handle format (i.e. plain URIs)
2024-01-08 22:11:37 +01:00
beltram
3f474f77d4
feat: change from impp prefix to just im
2024-01-08 20:55:32 +01:00
beltram
01ef526d08
change uri prefix to impp:wireapp=
2024-01-08 20:53:10 +01:00
Stefan Berthold
8e0e35532c
Add Wire authz and challenges (OIDC+DPOP)
2024-01-08 20:27:16 +01:00
Dominic Evans
231b5d8406
chore(deps): upgrade github.com/go-chi/chi to v5
...
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.
See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4
Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com >
2023-09-20 11:26:32 +01:00
Max
116ff8ed65
bump go.mod to go1.20 and associated linter fixes ( #1518 )
2023-08-29 11:52:13 -07:00
Herman Slatman
60a9e41c1c
Remove Identifier from top level ACME Errors
2023-01-26 14:59:08 +01:00
Mariano Cano
99299faeeb
Add AuthorizeChallenge unit tests
2022-09-20 19:03:03 -07:00
max furman
ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors
2022-09-20 16:35:41 -07:00
Mariano Cano
c77b4ff9c5
Fix linter errors
2022-09-08 12:49:16 -07:00
Mariano Cano
3cd72ac72a
Remove debug statements
2022-09-08 10:44:48 -07:00
Mariano Cano
df96b126dc
Add AuthorizeChallenge unit tests
2022-08-24 12:31:09 -07:00
Mariano Cano
bca311b05e
Add acme property to enable challenges
...
Fixes #1027
2022-08-23 17:11:40 -07:00
max furman
c040e4b459
Add unit tests
2022-08-16 15:48:23 -07:00
Herman Slatman
abfbbc8d49
Merge pull request #946 from smallstep/herman/acme-csr-padding
...
Strip base64-url padding from ACME CSR
2022-05-25 23:25:34 +02:00
Herman Slatman
fd546287ac
Strip base64-url padding from ACME CSR
...
This commit strips the padding from a base64-url encoded CSR
submitted by a client that doesn't use raw base64-url encoding.
2022-05-25 22:46:26 +02:00
Mariano Cano
d461918eb0
Merge branch 'master' into context-authority
2022-05-06 13:21:41 -07:00
Mariano Cano
6f9d847bc6
Fix panic in acme/api tests.
2022-05-02 17:35:35 -07:00
Mariano Cano
bb8d85a201
Fix unit tests - work in progress
2022-04-27 19:08:16 -07:00
Herman Slatman
fb81407d6f
Fix ACME policy comments
2022-04-21 13:21:06 +02:00
Herman Slatman
256fe113f7
Improve tests for ACME account policy
2022-04-11 15:25:55 +02:00
Herman Slatman
7df52dbb76
Add ACME EAB policy
2022-04-07 14:11:53 +02:00
Herman Slatman
b49307f326
Fix ACME order tests with mock ACME CA
2022-03-24 18:34:04 +01:00
Herman Slatman
e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues
2021-11-13 01:30:03 +01:00
max furman
933b40a02a
Introduce gocritic linter and address warnings
2021-10-08 14:59:57 -04:00
Herman Slatman
64c15fde7e
Add tests for canonicalize function
2021-06-25 14:07:40 +02:00
Herman Slatman
523ae96749
Change identifier and challenge types to consts
2021-06-18 12:39:36 +02:00
Herman Slatman
84ea8bd67a
Fix PR comments
2021-06-18 12:03:46 +02:00
Herman Slatman
6d9710c88d
Add initial support for ACME IP validation
2021-05-28 16:40:46 +02:00
max furman
672e3f976e
Few ACME fixes ...
...
- always URL escape linker output
- validateJWS should accept RSAPSS
- GetUpdateAccount -> GetOrUpdateAccount
2021-04-12 19:06:07 -07:00
