Commit Graph

4730 Commits

Author SHA1 Message Date
dependabot[bot]
43b68da49d Bump golang.org/x/net from 0.29.0 to 0.30.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.29.0 to 0.30.0.
- [Commits](https://github.com/golang/net/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-08 08:23:54 +00:00
step-ci
01b8a672d0 Merge pull request #2022 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.28.0
Bump golang.org/x/crypto from 0.27.0 to 0.28.0
2024-10-08 01:22:36 -07:00
dependabot[bot]
cd87739b9f Bump golang.org/x/crypto from 0.27.0 to 0.28.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.27.0 to 0.28.0.
- [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-07 15:22:01 +00:00
Herman Slatman
26b7ca65f9 Merge pull request #1994 from smallstep/herman/pkcs7-windows-scep-fix
Fix for failing Windows SCEP enrollment certificates
2024-10-03 10:34:46 +02:00
Herman Slatman
bd4947121d Fix and/or silence linter issues 2024-10-01 14:26:49 +02:00
Herman Slatman
45456591d6 Fix SCEP Windows client integration test for Go 1.23 2024-10-01 14:08:29 +02:00
Herman Slatman
69486d388f Refactor preparation of test SCEP CAs 2024-10-01 14:04:11 +02:00
Herman Slatman
a0dd8d53ee Add test case emulating Windows SCEP client 2024-10-01 13:35:13 +02:00
step-ci
f1a8d1a4ed Merge pull request #2015 from smallstep/dependabot/go_modules/google.golang.org/api-0.199.0
Bump google.golang.org/api from 0.198.0 to 0.199.0
2024-10-01 01:05:51 -07:00
dependabot[bot]
a8fa6e0ca9 Bump google.golang.org/api from 0.198.0 to 0.199.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.198.0 to 0.199.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.198.0...v0.199.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-01 07:53:53 +00:00
step-ci
b8d51478da Merge pull request #2018 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.67.1
Bump google.golang.org/grpc from 1.67.0 to 1.67.1
2024-10-01 00:51:26 -07:00
dependabot[bot]
442677fae0 Bump google.golang.org/grpc from 1.67.0 to 1.67.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.67.0 to 1.67.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.0...v1.67.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-01 07:46:50 +00:00
step-ci
a8c2f4db44 Merge pull request #2017 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.53.0
Bump go.step.sm/crypto from 0.52.0 to 0.53.0
2024-10-01 00:44:33 -07:00
dependabot[bot]
8a7d3cfaaf Bump go.step.sm/crypto from 0.52.0 to 0.53.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.52.0 to 0.53.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-30 15:07:01 +00:00
Leon Wee
45f44e4432 Add option for the logging middleware to log real IP (#2002)
This commit adds the option (enabled via environment variable) to the
logging middleware to log real/originating IP address of a client based
on specific headers.

Three headers are supported: True-Client-IP, X-Real-IP, X-Forwarded-For.

This is particularly useful when there is proxy server(s) sitting
between step-ca and client.

Implements #1995
2024-09-24 16:14:07 +03:00
step-ci
5909db6501 Merge pull request #2009 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.1
Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
2024-09-23 08:59:13 -07:00
step-ci
3520d17f11 Merge pull request #2007 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.4
Bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4
2024-09-23 08:58:53 -07:00
dependabot[bot]
27b1dd45f6 Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/v0.6.0...auth/v0.6.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:54:59 +00:00
dependabot[bot]
b599056f8b Bump github.com/prometheus/client_golang from 1.20.3 to 1.20.4
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.3 to 1.20.4.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.3...v1.20.4)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:54:51 +00:00
step-ci
2dc75cfd89 Merge pull request #2005 from smallstep/dependabot/go_modules/google.golang.org/api-0.198.0
Bump google.golang.org/api from 0.197.0 to 0.198.0
2024-09-23 08:53:37 -07:00
step-ci
ab71b58060 Merge pull request #2006 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.1
Bump cloud.google.com/go/security from 1.18.0 to 1.18.1
2024-09-23 08:53:04 -07:00
step-ci
0a8ac0314e Merge pull request #2008 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/kubernetes-0.8.0
Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.7.0 to 0.8.0
2024-09-23 08:52:34 -07:00
dependabot[bot]
65aae5d6a7 Bump github.com/hashicorp/vault/api/auth/kubernetes from 0.7.0 to 0.8.0
Bumps [github.com/hashicorp/vault/api/auth/kubernetes](https://github.com/hashicorp/vault) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/kubernetes
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:13:31 +00:00
dependabot[bot]
964ecd92ce Bump cloud.google.com/go/security from 1.18.0 to 1.18.1
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.18.0 to 1.18.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.18.0...dlp/v1.18.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:13:22 +00:00
dependabot[bot]
ebe782be8a Bump google.golang.org/api from 0.197.0 to 0.198.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.197.0 to 0.198.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.197.0...v0.198.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 15:13:07 +00:00
step-ci
e7841d889b Merge pull request #1998 from smallstep/dependabot/go_modules/google.golang.org/api-0.197.0
Bump google.golang.org/api from 0.196.0 to 0.197.0
2024-09-17 01:31:57 -07:00
step-ci
cb6e474959 Merge pull request #1999 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.8.0
Bump github.com/hashicorp/vault/api/auth/approle from 0.7.0 to 0.8.0
2024-09-17 01:31:09 -07:00
dependabot[bot]
dee71eb9ce Bump google.golang.org/api from 0.196.0 to 0.197.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.196.0 to 0.197.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.196.0...v0.197.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 08:08:06 +00:00
step-ci
705f90db09 Merge pull request #1997 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.52.0
Bump go.step.sm/crypto from 0.51.2 to 0.52.0
2024-09-17 01:06:29 -07:00
dependabot[bot]
4b19f8153c Bump github.com/hashicorp/vault/api/auth/approle from 0.7.0 to 0.8.0
Bumps [github.com/hashicorp/vault/api/auth/approle](https://github.com/hashicorp/vault) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/approle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-17 07:57:25 +00:00
step-ci
bc56c9a174 Merge pull request #1996 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.8.0
Bump github.com/hashicorp/vault/api/auth/aws from 0.7.0 to 0.8.0
2024-09-17 00:56:26 -07:00
step-ci
d7168a6464 Merge pull request #2000 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.4
Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
2024-09-17 00:55:29 -07:00
dependabot[bot]
e9f3bc4ef4 Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
Bumps [github.com/slackhq/nebula](https://github.com/slackhq/nebula) from 1.9.3 to 1.9.4.
- [Release notes](https://github.com/slackhq/nebula/releases)
- [Changelog](https://github.com/slackhq/nebula/blob/master/CHANGELOG.md)
- [Commits](https://github.com/slackhq/nebula/compare/v1.9.3...v1.9.4)

---
updated-dependencies:
- dependency-name: github.com/slackhq/nebula
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 15:29:27 +00:00
dependabot[bot]
edba68b650 Bump go.step.sm/crypto from 0.51.2 to 0.52.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.51.2 to 0.52.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.51.2...v0.52.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 15:28:55 +00:00
dependabot[bot]
6be2a41ead Bump github.com/hashicorp/vault/api/auth/aws from 0.7.0 to 0.8.0
Bumps [github.com/hashicorp/vault/api/auth/aws](https://github.com/hashicorp/vault) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/aws
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-16 15:28:45 +00:00
Herman Slatman
35a4d6e6a4 Fix typo in legacy X509 certificate parser comment 2024-09-13 23:52:02 +02:00
Herman Slatman
f088f92aee Fix for failing Windows SCEP enrollment certificates 2024-09-13 23:47:59 +02:00
Max
364629e2a2 [ci] Missing permission in goreleaser job (#1993) 2024-09-13 10:05:38 -07:00
Max
7177451ec1 Update CHANGELOG for v0.27.3 (#1992)
* Update CHANGELOG for v0.27.3

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2024-09-12 14:24:40 -07:00
Herman Slatman
c118a2a154 Merge pull request #1976 from leonweecs/leonweecs/vault-aws-auth
Add AWS auth method for Vault RA mode
2024-09-12 10:35:30 +02:00
Leon Wee
78e7678c58 Add AWS auth method for Vault RA mode
This commit adds the AWS auth method for Vault RA mode following similar
pattern in the existing approle and kubernetes methods.

This auth method supports both iam and ec2 auth type, see
https://developer.hashicorp.com/vault/docs/auth/aws for more info.

Implements #1946
2024-09-12 15:43:02 +12:00
step-ci
5b1eebd756 Merge pull request #1987 from smallstep/dependabot/go_modules/google.golang.org/api-0.196.0
Bump google.golang.org/api from 0.195.0 to 0.196.0
2024-09-10 04:19:29 -07:00
dependabot[bot]
a42ac7d670 Bump google.golang.org/api from 0.195.0 to 0.196.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.195.0 to 0.196.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.195.0...v0.196.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-10 11:14:06 +00:00
step-ci
9fa9886910 Merge pull request #1988 from smallstep/dependabot/go_modules/golang.org/x/net-0.29.0
Bump golang.org/x/net from 0.28.0 to 0.29.0
2024-09-10 04:13:18 -07:00
dependabot[bot]
2bd33590de Bump golang.org/x/net from 0.28.0 to 0.29.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.28.0 to 0.29.0.
- [Commits](https://github.com/golang/net/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-10 11:07:30 +00:00
step-ci
6703b88292 Merge pull request #1990 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.27.0
Bump golang.org/x/crypto from 0.26.0 to 0.27.0
2024-09-10 04:06:38 -07:00
step-ci
6b6c4e94fc Merge pull request #1989 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.3
Bump github.com/prometheus/client_golang from 1.20.2 to 1.20.3
2024-09-10 04:06:17 -07:00
dependabot[bot]
6d789f9f7e Bump golang.org/x/crypto from 0.26.0 to 0.27.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.26.0 to 0.27.0.
- [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.27.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-09 15:08:44 +00:00
dependabot[bot]
847f0c1ffd Bump github.com/prometheus/client_golang from 1.20.2 to 1.20.3
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.2 to 1.20.3.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.20.3/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.2...v1.20.3)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-09 15:08:41 +00:00
step-ci
6b87cc4085 Merge pull request #1983 from smallstep/dependabot/go_modules/github.com/Masterminds/sprig/v3-3.3.0
Bump github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0
2024-09-03 02:04:29 -07:00