Commit Graph

4764 Commits

Author SHA1 Message Date
step-ci
59deaa5180 Merge pull request #2058 from smallstep/dependabot/go_modules/google.golang.org/api-0.204.0
Bump google.golang.org/api from 0.203.0 to 0.204.0
2024-11-04 16:02:05 -08:00
dependabot[bot]
1ab27b13e5 Bump google.golang.org/api from 0.203.0 to 0.204.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.203.0 to 0.204.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.203.0...v0.204.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-11-04 15:41:08 +00:00
Max
df13aaef0b Update changelog for v0.28.0 (#2051) 2024-10-29 16:48:41 -07:00
step-ci
77667e7f43 Merge pull request #2049 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.18.2
Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
2024-10-28 16:39:48 -07:00
dependabot[bot]
5147c60240 Bump cloud.google.com/go/security from 1.18.1 to 1.18.2
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.18.1 to 1.18.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.18.1...kms/v1.18.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 23:36:26 +00:00
step-ci
efd324d6d6 Merge pull request #2048 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.2
Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
2024-10-28 16:35:29 -07:00
step-ci
a51f670f77 Merge pull request #2047 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.1
Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
2024-10-28 16:34:50 -07:00
step-ci
9943bf1984 Merge pull request #2050 from smallstep/dependabot/go_modules/google.golang.org/api-0.203.0
Bump google.golang.org/api from 0.201.0 to 0.203.0
2024-10-28 16:34:17 -07:00
Max
bb8605c079 Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner (#2045)
* Add DisableSSHCAUser and DisableSSHCAHost options to linkedca GCP provisioner
2024-10-28 16:14:59 -07:00
dependabot[bot]
95a6cad404 Bump google.golang.org/api from 0.201.0 to 0.203.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.201.0 to 0.203.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.201.0...v0.203.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 15:14:45 +00:00
dependabot[bot]
99baf6744a Bump cloud.google.com/go/longrunning from 0.6.1 to 0.6.2
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.6.1 to 0.6.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/auth/v0.6.1...longrunning/v0.6.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 15:14:24 +00:00
dependabot[bot]
bfe436b145 Bump github.com/newrelic/go-agent/v3 from 3.35.0 to 3.35.1
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.35.0 to 3.35.1.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.35.0...3.35.1)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 15:14:01 +00:00
Herman Slatman
34ba7a2f3e Merge pull request #2046 from smallstep/herman/refactor-cli-utils-import
Use `github.com/smallstep/cli-utils` instead of `go.step.sm/cli-utils`
2024-10-28 10:58:50 +01:00
Herman Slatman
b45b73f4cc Use github.com/smallstep/cli-utils instead of go.step.sm/cli-utils 2024-10-28 10:53:44 +01:00
Max
88443ddab9 Use dnsNamesSubsetValidator for IID provisioners (#2044)
* Use dnsNamesSubsetValidator for IID provisioners

... when disableCustomSANs is set to 'true'.

The DNS names in the certificate request must be a subset of the
authorized set of DNS names (from the IID token). The previous
functionality required that the DNS names in the certificate request
exactly matched the authorized DNS names.

* Update authority/provisioner/sign_options.go

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>

* Update authority/provisioner/sign_options.go

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>

* Use map[string]struct rather than map[string]bool for clarity

---------

Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2024-10-25 10:39:04 -07:00
step-ci
946bba29bb Merge pull request #2040 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.20.5
Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
2024-10-22 01:52:42 -07:00
step-ci
61fb5f4071 Merge pull request #2039 from smallstep/dependabot/go_modules/google.golang.org/api-0.201.0
Bump google.golang.org/api from 0.200.0 to 0.201.0
2024-10-22 01:52:12 -07:00
dependabot[bot]
5afe6b1e54 Bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.4 to 1.20.5.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.20.4...v1.20.5)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 15:29:53 +00:00
dependabot[bot]
6ce8f7d606 Bump google.golang.org/api from 0.200.0 to 0.201.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.200.0 to 0.201.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.200.0...v0.201.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-21 15:29:41 +00:00
Max
8d0b4d78dd Update changelog for 0.27.5 (#2035) 2024-10-16 18:22:02 -07:00
step-ci
d4f96b537f Merge pull request #2032 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.16
Bump github.com/urfave/cli from 1.22.15 to 1.22.16
2024-10-16 15:32:53 -07:00
dependabot[bot]
89a4708f19 Bump github.com/urfave/cli from 1.22.15 to 1.22.16
Bumps [github.com/urfave/cli](https://github.com/urfave/cli) from 1.22.15 to 1.22.16.
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/urfave/cli/compare/v1.22.15...v1.22.16)

---
updated-dependencies:
- dependency-name: github.com/urfave/cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-16 20:14:38 +00:00
step-ci
3aa8627b12 Merge pull request #2031 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.35.0
Bump github.com/newrelic/go-agent/v3 from 3.34.0 to 3.35.0
2024-10-16 13:13:28 -07:00
step-ci
3e2be3e87f Merge pull request #2029 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.0
Bump go.step.sm/crypto from 0.53.0 to 0.54.0
2024-10-16 13:11:15 -07:00
step-ci
7e4560eea2 Merge pull request #2030 from smallstep/dependabot/go_modules/google.golang.org/api-0.200.0
Bump google.golang.org/api from 0.199.0 to 0.200.0
2024-10-16 13:08:52 -07:00
Mariano Cano
4d59f35212 Merge pull request #2034 from smallstep/mariano/http-client
Do not fail creating the provisioner HTTP client
2024-10-15 18:33:25 -07:00
Mariano Cano
6b872e8806 Do not fail creating the provisioner HTTP client
This commit avoids an error starting the CA if the `http.DefaultTransport`
is not an `*http.Transport`. If the DefaultTransport is overwritten, the
newHTTPClient method will return a simple *http.Client. With an
*http.Transport, it will return a client that trusts the system
certificate pool and the CA roots.
2024-10-15 18:08:58 -07:00
dependabot[bot]
ac93ce8d4e Bump github.com/newrelic/go-agent/v3 from 3.34.0 to 3.35.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.34.0 to 3.35.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.34.0...v3.35.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 15:11:16 +00:00
dependabot[bot]
2831a8a58a Bump google.golang.org/api from 0.199.0 to 0.200.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.199.0 to 0.200.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.199.0...v0.200.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 15:11:05 +00:00
dependabot[bot]
b0acbeed40 Bump go.step.sm/crypto from 0.53.0 to 0.54.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.53.0 to 0.54.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.53.0...v0.54.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-14 15:10:53 +00:00
step-ci
03c4b18ec1 Merge pull request #2020 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.1
Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
2024-10-08 01:53:25 -07:00
Herman Slatman
55b097a8ec Fix protobuf enum field type error message comparison test 2024-10-08 10:46:47 +02:00
dependabot[bot]
ebcb6a1d17 Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
Bumps google.golang.org/protobuf from 1.34.2 to 1.35.1.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-08 08:28:36 +00:00
step-ci
46b7e12544 Merge pull request #2021 from smallstep/dependabot/go_modules/golang.org/x/net-0.30.0
Bump golang.org/x/net from 0.29.0 to 0.30.0
2024-10-08 01:27:26 -07:00
dependabot[bot]
43b68da49d Bump golang.org/x/net from 0.29.0 to 0.30.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.29.0 to 0.30.0.
- [Commits](https://github.com/golang/net/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-08 08:23:54 +00:00
step-ci
01b8a672d0 Merge pull request #2022 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.28.0
Bump golang.org/x/crypto from 0.27.0 to 0.28.0
2024-10-08 01:22:36 -07:00
dependabot[bot]
cd87739b9f Bump golang.org/x/crypto from 0.27.0 to 0.28.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.27.0 to 0.28.0.
- [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-07 15:22:01 +00:00
Herman Slatman
26b7ca65f9 Merge pull request #1994 from smallstep/herman/pkcs7-windows-scep-fix
Fix for failing Windows SCEP enrollment certificates
2024-10-03 10:34:46 +02:00
Herman Slatman
bd4947121d Fix and/or silence linter issues 2024-10-01 14:26:49 +02:00
Herman Slatman
45456591d6 Fix SCEP Windows client integration test for Go 1.23 2024-10-01 14:08:29 +02:00
Herman Slatman
69486d388f Refactor preparation of test SCEP CAs 2024-10-01 14:04:11 +02:00
Herman Slatman
a0dd8d53ee Add test case emulating Windows SCEP client 2024-10-01 13:35:13 +02:00
step-ci
f1a8d1a4ed Merge pull request #2015 from smallstep/dependabot/go_modules/google.golang.org/api-0.199.0
Bump google.golang.org/api from 0.198.0 to 0.199.0
2024-10-01 01:05:51 -07:00
dependabot[bot]
a8fa6e0ca9 Bump google.golang.org/api from 0.198.0 to 0.199.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.198.0 to 0.199.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.198.0...v0.199.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-01 07:53:53 +00:00
step-ci
b8d51478da Merge pull request #2018 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.67.1
Bump google.golang.org/grpc from 1.67.0 to 1.67.1
2024-10-01 00:51:26 -07:00
dependabot[bot]
442677fae0 Bump google.golang.org/grpc from 1.67.0 to 1.67.1
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.67.0 to 1.67.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.0...v1.67.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-10-01 07:46:50 +00:00
step-ci
a8c2f4db44 Merge pull request #2017 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.53.0
Bump go.step.sm/crypto from 0.52.0 to 0.53.0
2024-10-01 00:44:33 -07:00
dependabot[bot]
8a7d3cfaaf Bump go.step.sm/crypto from 0.52.0 to 0.53.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.52.0 to 0.53.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-30 15:07:01 +00:00
Leon Wee
45f44e4432 Add option for the logging middleware to log real IP (#2002)
This commit adds the option (enabled via environment variable) to the
logging middleware to log real/originating IP address of a client based
on specific headers.

Three headers are supported: True-Client-IP, X-Real-IP, X-Forwarded-For.

This is particularly useful when there is proxy server(s) sitting
between step-ca and client.

Implements #1995
2024-09-24 16:14:07 +03:00
step-ci
5909db6501 Merge pull request #2009 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.6.1
Bump cloud.google.com/go/longrunning from 0.6.0 to 0.6.1
2024-09-23 08:59:13 -07:00