139 Commits

Author SHA1 Message Date
provokateurin
0c79ee2093 feat: Add sd_notify support 2025-11-09 09:44:26 +01:00
smst-jeff
2a51f17a22 Use errgroup to shutdown services concurrently. (#2343) 2025-07-24 10:29:29 -07:00
Mariano Cano
503f67dc61 Replace sync.WaitGroup with errgroup 2025-07-16 10:50:08 -07:00
Mariano Cano
a5fd0d0cfc Fix process hanging after SIGTERM
This commit fixes a problem where step-ca hangs after a shutdown because
errors were sent to a channel without enough capacity.
2025-07-15 14:37:56 -07:00
Panagiotis Siatras
809c7023c9 Transport wrappers (#2103)
* internal/httptransport: implemented Wrapper & NoopWrapper

* added transport wrappers

* addressed review comments
2024-12-12 09:51:36 -08:00
Panagiotis Siatras
c986962154 internal/httptransport: initial implementation of the package (#2098)
* internal/httptransport: initial implementation of the package
* authority: refactored for httptransport
* ca: refactored for httptransport
* test: refactored for httptransport
2024-12-10 18:03:37 +02:00
Herman Slatman
b45b73f4cc Use github.com/smallstep/cli-utils instead of go.step.sm/cli-utils 2024-10-28 10:53:44 +01:00
Mariano Cano
10f6a901ec Let the CA determine the RA lifetime
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.

This commit also fixes linter warnings.

Related to #1094
2024-03-12 14:29:55 -07:00
Herman Slatman
b8510dd5b2 Make the requestid an exported middleware 2024-03-07 10:41:19 +01:00
Herman Slatman
bbb80cde16 Add startup error shutdown message to log 2024-03-05 15:34:13 +01:00
Herman Slatman
f02d4546a9 Handle CA server startup errors 2024-03-05 11:08:24 +01:00
Herman Slatman
7e5f10927f Decouple request ID middleware from logging middleware 2024-02-28 13:18:10 +01:00
Mariano Cano
503e5046ea Merge branch 'master' into allow_custom_tls_config 2024-02-14 12:11:00 -08:00
Mariano Cano
beea482a0c Fix linter errors in ca/ca.go 2024-02-14 12:09:03 -08:00
Mariano Cano
ac773ff44e Merge branch 'master' into allow_external_x509_ca_service_intf 2024-02-14 11:38:39 -08:00
Mariano Cano
9fcdd3ffa6 Fix format warnings on ca/ca.go 2024-02-14 11:34:25 -08:00
Panagiotis Siatras
dd1ff9c15b Implementation of the Prometheus endpoint (#1669)
Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.
2024-01-25 23:47:27 -08:00
Venky Gopal
356e7070ef Allow usage of externally supplied TLS config 2024-01-21 09:26:40 -05:00
Venky Gopal
fbc1e895c2 Allow x509 Service CA implementation to be injected through ca and authority options 2024-01-21 08:50:09 -05:00
Herman Slatman
ffe079f31b Merge branch 'master' into herman/scep-provisioner-decrypter 2023-09-23 00:06:56 +02:00
Dominic Evans
231b5d8406 chore(deps): upgrade github.com/go-chi/chi to v5
Upgrade chi to the v5 module path to avoid deprecation warning about v4
and earlier on the old module path.

See https://github.com/go-chi/chi/blob/v4.1.3/go.mod#L1-L4

Signed-off-by: Dominic Evans <dominic.evans@uk.ibm.com>
2023-09-20 11:26:32 +01:00
Herman Slatman
fc1fb51854 Improve SCEP authority initialization and reload 2023-08-02 18:35:38 +02:00
Herman Slatman
8fc3a46387 Refactor the SCEP authority initialization
Instead of relying on an intermediate `scep.Service` struct,
initialize the `scep.Authority` directly. This removes one redundant
layer of indirection.
2023-06-01 15:50:51 +02:00
Herman Slatman
6985b4be62 Clean up the SCEP authority and provisioner 2023-06-01 14:43:32 +02:00
Herman Slatman
180162bd6a Refactor SCEP provisioner and decrypter 2023-06-01 12:10:54 +02:00
Herman Slatman
5e35aca29c Use CRLConfig.IsEnabled 2023-05-02 15:17:50 +02:00
Herman Slatman
60a4512abe Add /crl and /1.0/crl to the insecure HTTP handler 2023-05-02 14:58:32 +02:00
Mariano Cano
7700bb77da Remove old call to compact 2023-03-01 17:37:56 -08:00
Mariano Cano
831a1e35ea Add support for compating the badger db
This commit adds a job that will compact the badger db periodically.
In the nosql package, when Compact is called, it will run badger's
RunValueLogGC method.
2023-03-01 17:16:34 -08:00
Herman Slatman
54c560f620 Improve configuration file initialization log output 2022-10-24 15:22:37 +02:00
Herman Slatman
c9ee4a9f9d Disable initialization log output if started with --quiet 2022-10-11 12:19:48 +02:00
Andrew Reed
7101fbb0ee Provisioner webhooks (#1001) 2022-09-29 19:16:26 -05:00
max furman
7c5e5b2b87 Even more linter fixes 2022-09-20 21:48:04 -07:00
Mariano Cano
567d96c771 Revert "Run on plaintext HTTP to support Cloud Run"
This reverts commit 09b9673a60.
2022-09-20 18:57:46 -07:00
Brandon Weeks
f3d2bd7a19 Run on plaintext HTTP to support Cloud Run 2022-09-20 16:43:30 -07:00
max furman
ab0d2503ae Standardize linting file and fix or ignore lots of linting errors 2022-09-20 16:35:41 -07:00
Mariano Cano
6cab4d328e Add a middleware to automatically route HEAD requests to GET
Fixes #992
2022-08-16 16:10:29 -07:00
Mariano Cano
a8819376d3 Remove empty lines on debug information
At the start of step-ca some information about the CA is displayed,
this change remove extra lines when displaying the ssh public keys.
2022-08-02 16:05:04 -07:00
Shulhan
fe04f93d7f all: reformat all go files with the next gofmt (Go 1.19)
There are some changes that manually edited, for example using '-' as
default list and grouping imports.
2022-06-16 01:28:59 +07:00
Mariano Cano
f639bfc53b Use contexts on the new PolicyAdminResponder 2022-05-06 14:05:08 -07:00
Mariano Cano
d461918eb0 Merge branch 'master' into context-authority 2022-05-06 13:21:41 -07:00
Mariano Cano
9147356d8a Fix linter errors 2022-05-02 18:47:47 -07:00
Mariano Cano
d1f75f1720 Refactor ACME api. 2022-04-28 19:15:18 -07:00
Mariano Cano
688f9ceb56 Add scep authority to context. 2022-04-27 18:02:37 -07:00
Mariano Cano
216d8f0efb Handle acme requests with the new api 2022-04-27 15:44:41 -07:00
Mariano Cano
439cb81b13 Use admin Route function 2022-04-27 12:16:16 -07:00
Mariano Cano
8bd4e1d73e Inject the acme database in the context 2022-04-27 12:13:16 -07:00
Mariano Cano
0446e82320 Add context methods for the authority database 2022-04-27 12:05:19 -07:00
Mariano Cano
623c296555 Create context methods from admin database 2022-04-27 11:58:52 -07:00
Mariano Cano
d5070ecf31 Use server BaseContext
Instead of using the authority middleware this change adds the
authority in the base context of the server.
2022-04-27 11:06:55 -07:00