Commit Graph

4783 Commits

Author SHA1 Message Date
Joe Doss
2b4894a871 Configure GitHub Actions to publish RPMs and Debs to packages.smallstep.com. 2024-11-18 11:35:50 -06:00
step-ci
707f53722f Merge pull request #2071 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.1.0
Bump softprops/action-gh-release from 2.0.9 to 2.1.0
2024-11-18 08:34:48 -08:00
dependabot[bot]
fc007dfd03 Bump softprops/action-gh-release from 2.0.9 to 2.1.0
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.0.9 to 2.1.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](e7a8f85e1c...01570a1f39)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-18 16:20:05 +00:00
Mariano Cano
7eccbc51fe Merge pull request #2069 from smallstep/mariano/urn
Change URN for acme errors
2024-11-15 15:59:03 -08:00
Mariano Cano
1a2e64724a Change URN for acme errors
This commit changes the urn suffix for acme errors to urn:smallstep:acme:error
2024-11-15 15:53:31 -08:00
Max
73f97e244c Ignore non-constant format string linting error (#2068) 2024-11-15 10:42:50 -08:00
Mariano Cano
fdaa6657e1 Merge pull request #2066 from smallstep/mariano/webhook-errors 2024-11-15 09:48:07 -08:00
Mariano Cano
05295d9c6a Propagate human errors from webhooks
This commit adds a new field error in the webhook response that allows
to propagate errors to the client. With ACME, webhook errors are as
a new subproblem.
2024-11-14 18:29:36 -08:00
Mariano Cano
2f7690c2ae Merge pull request #2065 from smallstep/mariano/challenge-webhook
Add data support on SCEPCHALLENGE webhooks
2024-11-12 14:09:24 -08:00
Mariano Cano
ff37bf1811 Add unit tests for scepchallenge webhooks 2024-11-12 13:15:11 -08:00
Mariano Cano
f2663dd9d9 Add data support on SCEPCHALLENGE webhooks
This commit adds support for using template data from SCEPCHALLENGE
webhooks.
2024-11-11 18:35:28 -08:00
step-ci
295892ecba Merge pull request #2060 from smallstep/dependabot/go_modules/google.golang.org/api-0.205.0
Bump google.golang.org/api from 0.204.0 to 0.205.0
2024-11-11 07:33:46 -08:00
dependabot[bot]
15e904109a Bump google.golang.org/api from 0.204.0 to 0.205.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.204.0 to 0.205.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.204.0...v0.205.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 15:26:11 +00:00
step-ci
8465db8b30 Merge pull request #2062 from smallstep/dependabot/go_modules/golang.org/x/net-0.31.0
Bump golang.org/x/net from 0.30.0 to 0.31.0
2024-11-11 07:25:12 -08:00
dependabot[bot]
8313e47061 Bump golang.org/x/net from 0.30.0 to 0.31.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.30.0 to 0.31.0.
- [Commits](https://github.com/golang/net/compare/v0.30.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 15:21:24 +00:00
step-ci
c4c0d923d6 Merge pull request #2061 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.29.0
Bump golang.org/x/crypto from 0.28.0 to 0.29.0
2024-11-11 07:20:14 -08:00
dependabot[bot]
6dda3c1c4d Bump golang.org/x/crypto from 0.28.0 to 0.29.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.28.0 to 0.29.0.
- [Commits](https://github.com/golang/crypto/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-11 15:11:47 +00:00
step-ci
e82c228a53 Merge pull request #2057 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.0.9
Bump softprops/action-gh-release from 2.0.8 to 2.0.9
2024-11-04 16:02:21 -08:00
step-ci
59deaa5180 Merge pull request #2058 from smallstep/dependabot/go_modules/google.golang.org/api-0.204.0
Bump google.golang.org/api from 0.203.0 to 0.204.0
2024-11-04 16:02:05 -08:00
dependabot[bot]
1ab27b13e5 Bump google.golang.org/api from 0.203.0 to 0.204.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.203.0 to 0.204.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.203.0...v0.204.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-04 15:41:08 +00:00
dependabot[bot]
0a0dfc008e Bump softprops/action-gh-release from 2.0.8 to 2.0.9
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.0.8 to 2.0.9.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](c062e08bd5...e7a8f85e1c)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-04 15:17:26 +00:00
Max
df13aaef0b Update changelog for v0.28.0 (#2051) 2024-10-29 16:48:41 -07:00
step-ci
77667e7f43 Merge pull request #2049 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.2
Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
2024-10-28 16:39:48 -07:00
dependabot[bot]
5147c60240 Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.18.1 to 1.18.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.18.1...kms/v1.18.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 23:36:26 +00:00
step-ci
efd324d6d6 Merge pull request #2048 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.2
Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
2024-10-28 16:35:29 -07:00
step-ci
a51f670f77 Merge pull request #2047 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.1
Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
2024-10-28 16:34:50 -07:00
step-ci
9943bf1984 Merge pull request #2050 from smallstep/dependabot/go_modules/google.golang.org/api-0.203.0
Bump google.golang.org/api from 0.201.0 to 0.203.0
2024-10-28 16:34:17 -07:00
Max
bb8605c079 Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner (#2045)
* Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner
2024-10-28 16:14:59 -07:00
dependabot[bot]
95a6cad404 Bump google.golang.org/api from 0.201.0 to 0.203.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.201.0 to 0.203.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.201.0...v0.203.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 15:14:45 +00:00
dependabot[bot]
99baf6744a Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/auth/v0.6.1...longrunning/v0.6.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 15:14:24 +00:00
dependabot[bot]
bfe436b145 Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.35.0 to 3.35.1.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.35.0...3.35.1)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 15:14:01 +00:00
Herman Slatman
34ba7a2f3e Merge pull request #2046 from smallstep/herman/refactor-cli-utils-import
Use `github.com/smallstep/cli-utils` instead of `go.step.sm/cli-utils`
2024-10-28 10:58:50 +01:00
Herman Slatman
b45b73f4cc Use github.com/smallstep/cli-utils instead of go.step.sm/cli-utils 2024-10-28 10:53:44 +01:00
Max
88443ddab9 Use dnsNamesSubsetValidator for IID provisioners (#2044)
* Use dnsNamesSubsetValidator for IID provisioners

... when disableCustomSANs is set to 'true'.

The DNS names in the certificate request must be a subset of the
authorized set of DNS names (from the IID token). The previous
functionality required that the DNS names in the certificate request
exactly matched the authorized DNS names.

* Update authority/provisioner/sign_options.go

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>

* Update authority/provisioner/sign_options.go

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>

* Use map[string]struct rather than map[string]bool for clarity

---------

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2024-10-25 10:39:04 -07:00
step-ci
946bba29bb Merge pull request #2040 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.5
Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
2024-10-22 01:52:42 -07:00
step-ci
61fb5f4071 Merge pull request #2039 from smallstep/dependabot/go_modules/google.golang.org/api-0.201.0
Bump google.golang.org/api from 0.200.0 to 0.201.0
2024-10-22 01:52:12 -07:00
dependabot[bot]
5afe6b1e54 Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.4 to 1.20.5.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.4...v1.20.5)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 15:29:53 +00:00
dependabot[bot]
6ce8f7d606 Bump google.golang.org/api from 0.200.0 to 0.201.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.200.0 to 0.201.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.200.0...v0.201.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 15:29:41 +00:00
Max
8d0b4d78dd Update changelog for 0.27.5 (#2035) 2024-10-16 18:22:02 -07:00
step-ci
d4f96b537f Merge pull request #2032 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.16
Bump github.com/urfave/cli from 1.22.15 to 1.22.16
2024-10-16 15:32:53 -07:00
dependabot[bot]
89a4708f19 Bump github.com/urfave/cli from 1.22.15 to 1.22.16
Bumps [github.com/urfave/cli](https://github.com/urfave/cli) from 1.22.15 to 1.22.16.
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/urfave/cli/compare/v1.22.15...v1.22.16)

---
updated-dependencies:
- dependency-name: github.com/urfave/cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 20:14:38 +00:00
step-ci
3aa8627b12 Merge pull request #2031 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.0
Bump github.com/newrelic/go-agent/v3 from 3.34.0 to 3.35.0
2024-10-16 13:13:28 -07:00
step-ci
3e2be3e87f Merge pull request #2029 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.0
Bump go.step.sm/crypto from 0.53.0 to 0.54.0
2024-10-16 13:11:15 -07:00
step-ci
7e4560eea2 Merge pull request #2030 from smallstep/dependabot/go_modules/google.golang.org/api-0.200.0
Bump google.golang.org/api from 0.199.0 to 0.200.0
2024-10-16 13:08:52 -07:00
Mariano Cano
4d59f35212 Merge pull request #2034 from smallstep/mariano/http-client
Do not fail creating the provisioner HTTP client
2024-10-15 18:33:25 -07:00
Mariano Cano
6b872e8806 Do not fail creating the provisioner HTTP client
This commit avoids an error starting the CA if the `http.DefaultTransport`
is not an `*http.Transport`. If the DefaultTransport is overwritten, the
newHTTPClient method will return a simple *http.Client. With an
*http.Transport, it will return a client that trusts the system
certificate pool and the CA roots.
2024-10-15 18:08:58 -07:00
dependabot[bot]
ac93ce8d4e Bump github.com/newrelic/go-agent/v3 from 3.34.0 to 3.35.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.34.0 to 3.35.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.34.0...v3.35.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 15:11:16 +00:00
dependabot[bot]
2831a8a58a Bump google.golang.org/api from 0.199.0 to 0.200.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.199.0 to 0.200.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.199.0...v0.200.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 15:11:05 +00:00
dependabot[bot]
b0acbeed40 Bump go.step.sm/crypto from 0.53.0 to 0.54.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.53.0 to 0.54.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.53.0...v0.54.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 15:10:53 +00:00
step-ci
03c4b18ec1 Merge pull request #2020 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.1
Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
2024-10-08 01:53:25 -07:00