crypt/step-ca
1
0
Fork 0
mirror of synced 2026-10-23 00:48:56 +03:00
Code Activity
5,763 Commits 53 Branches 245 Tags
master
Commit Graph

5763 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
step-ci
edc665053e Merge pull request #2816 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.45.0 
build(deps): bump github.com/newrelic/go-agent/v3 from 3.44.2 to 3.45.0
 2026-10-20 10:01:10 -05:00
dependabot[bot]
5ec192ccb8 build(deps): bump github.com/newrelic/go-agent/v3 from 3.44.2 to 3.45.0 
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.44.2 to 3.45.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.44.2...v3.45.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-version: 3.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-20 14:01:50 +00:00
step-ci
2e05fff20a Merge pull request #2829 from smallstep/dependabot/go_modules/google.golang.org/api-0.304.0 
build(deps): bump google.golang.org/api from 0.298.0 to 0.304.0
 2026-10-20 08:59:33 -05:00
dependabot[bot]
040c1b07a0 build(deps): bump google.golang.org/api from 0.298.0 to 0.304.0 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.298.0 to 0.304.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.298.0...v0.304.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.304.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-20 12:55:45 +00:00
Mariano Cano
7c07d21b1c Merge pull request #2827 from smallstep/mariano/lint 
Remove http2.Transport support from ca.Client
 2026-10-19 10:57:59 -07:00
Mariano Cano
405cfde442 Remove http2.Transport support from ca.Client 
http2.Transport is deprecated, and as far as we know nobody passes one
to ca.Client, so drop the special cases for it. A plain http.Transport
already speaks HTTP/2.
 2026-10-16 18:52:18 -07:00
step-ci
74be79c6f9 Merge pull request #2825 from smallstep/dependabot/go_modules/golang.org/x/net-0.61.0 
build(deps): bump golang.org/x/net from 0.58.0 to 0.61.0
 2026-10-13 21:06:54 -05:00
dependabot[bot]
a1ce0a9a33 build(deps): bump golang.org/x/net from 0.58.0 to 0.61.0 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.58.0 to 0.61.0.
- [Commits](https://github.com/golang/net/compare/v0.58.0...v0.61.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-13 17:51:17 +00:00
Carl Tashian
69d3c36fa1 Use port 53 when --resolver has no port (#2818) 
* Use port 53 when --resolver has no port

Before this change, step-ca passed the --resolver value directly to
net.Dial. An address without a port, such as 1.1.1.1, caused all DNS
queries to fail with "missing port in address". ACME dns-01
validation then failed with a general DNS error.

Now, if the address has no port, step-ca adds port 53. Bare and
bracketed IPv6 addresses are supported. Addresses that include a
port do not change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* Remove the default port from the --resolver help text

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-10 08:30:54 -07:00
step-ci
93368af9a4 Merge pull request #2817 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-1.3.0 
build(deps): bump cloud.google.com/go/longrunning from 1.2.0 to 1.3.0
 2026-10-05 10:45:58 -05:00
dependabot[bot]
b19b01109e build(deps): bump cloud.google.com/go/longrunning from 1.2.0 to 1.3.0 
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 1.2.0 to 1.3.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/ai/v1.2.0...ces/v1.3.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-10-05 15:33:14 +00:00
step-ci
fdeb6fdf53 Merge pull request #2811 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.4 
build(deps): bump github.com/fxamacker/cbor/v2 from 2.9.3 to 2.9.4
 2026-09-29 07:27:36 -05:00
step-ci
7fbd329d68 Merge pull request #2812 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.26.0 
build(deps): bump github.com/googleapis/gax-go/v2 from 2.24.1 to 2.26.0
 2026-09-28 12:23:34 -05:00
dependabot[bot]
095104b8c7 build(deps): bump github.com/fxamacker/cbor/v2 from 2.9.3 to 2.9.4 
Bumps [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) from 2.9.3 to 2.9.4.
- [Release notes](https://github.com/fxamacker/cbor/releases)
- [Commits](https://github.com/fxamacker/cbor/compare/v2.9.3...v2.9.4)

---
updated-dependencies:
- dependency-name: github.com/fxamacker/cbor/v2
  dependency-version: 2.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-28 17:23:33 +00:00
step-ci
b4357a3c2a Merge pull request #2813 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.28.0 
build(deps): bump cloud.google.com/go/security from 1.27.0 to 1.28.0
 2026-09-28 12:18:21 -05:00
dependabot[bot]
9158ea2a91 build(deps): bump cloud.google.com/go/security from 1.27.0 to 1.28.0 
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go) from 1.27.0 to 1.28.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.27.0...kms/v1.28.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-28 15:33:08 +00:00
dependabot[bot]
1151b5e513 build(deps): bump github.com/googleapis/gax-go/v2 from 2.24.1 to 2.26.0 
Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) from 2.24.1 to 2.26.0.
- [Release notes](https://github.com/googleapis/gax-go/releases)
- [Commits](https://github.com/googleapis/gax-go/compare/v2.24.1...v2.26.0)

---
updated-dependencies:
- dependency-name: github.com/googleapis/gax-go/v2
  dependency-version: 2.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-28 15:32:53 +00:00
step-ci
7d2e32082e Merge pull request #2810 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.84.0 
build(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0
 2026-09-22 03:48:21 -05:00
dependabot[bot]
19ceae378c build(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.2 to 1.84.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.83.2...v1.84.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-22 08:41:42 +00:00
step-ci
c1d5f5ad42 Merge pull request #2809 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.44.2 
build(deps): bump github.com/newrelic/go-agent/v3 from 3.44.1 to 3.44.2
 2026-09-22 03:40:02 -05:00
step-ci
fd00ce5208 Merge pull request #2808 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.21.0 
build(deps): bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0
 2026-09-22 03:25:44 -05:00
dependabot[bot]
91f45258bf build(deps): bump github.com/newrelic/go-agent/v3 from 3.44.1 to 3.44.2 
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.44.1 to 3.44.2.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.44.1...v3.44.2)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-version: 3.44.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-21 15:33:16 +00:00
dependabot[bot]
3c61cf19c8 build(deps): bump github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0 
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.20.0 to 3.21.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.20.0...v3.21.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-21 15:33:09 +00:00
step-ci
f35d82e63d Merge pull request #2782 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.11.1 
build(deps): bump github.com/slackhq/nebula from 1.10.3 to 1.11.1
 2026-09-17 05:59:45 -05:00
dependabot[bot]
f4b8691946 build(deps): bump github.com/slackhq/nebula from 1.10.3 to 1.11.1 
Bumps [github.com/slackhq/nebula](https://github.com/slackhq/nebula) from 1.10.3 to 1.11.1.
- [Release notes](https://github.com/slackhq/nebula/releases)
- [Changelog](https://github.com/slackhq/nebula/blob/master/CHANGELOG.md)
- [Commits](https://github.com/slackhq/nebula/compare/v1.10.3...v1.11.1)

---
updated-dependencies:
- dependency-name: github.com/slackhq/nebula
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-17 10:35:38 +00:00
step-ci
8dbd414c5e Merge pull request #2792 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.56.0 
build(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0
 2026-09-17 04:27:30 -05:00
dependabot[bot]
a9f8f410b2 build(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.56.0 to 0.57.0.
- [Commits](https://github.com/golang/crypto/compare/v0.56.0...v0.57.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-15 19:04:16 +00:00
Mariano Cano
74662198d7 Merge pull request #2785 from smallstep/mariano/mldsa 
Add support for ML-DSA keys
 2026-09-15 12:01:56 -07:00
Mariano Cano
4880a59a38 Merge branch 'master' into mariano/mldsa 2026-09-15 11:55:10 -07:00
step-ci
fc3d6df288 Merge pull request #2791 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.83.2 
build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2
 2026-09-15 10:03:59 -05:00
step-ci
9637c710ca Merge pull request #2790 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.24.1 
build(deps): bump github.com/googleapis/gax-go/v2 from 2.23.0 to 2.24.1
 2026-09-15 10:03:40 -05:00
Josh Drake
fa946c527a Merge pull request #2794 from smallstep/josh/webhook-content-type 
Set Content-Type on provisioner webhook requests
 2026-09-08 13:07:43 -07:00
Josh Drake
0f4dcb0724 Set Content-Type on provisioner webhook requests 
Provisioner webhook requests POST a JSON body, but never set a
Content-Type header. http.NewRequestWithContext populates
ContentLength from the *bytes.Reader body and nothing else, and Go's
HTTP client does not infer a content type, so the request went out
with the body unlabelled.

Webhook servers that dispatch on Content-Type reject these requests.
Express's express.json() and Spring's @RequestBody both require
application/json and respond 400 or hand the handler an empty body.

Set the header alongside the other webhook headers. This covers every
webhook kind, since enriching, authorizing and the SCEP challenge and
notify webhooks all send through DoWithContext.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01L76jtApP9cwBbYD3DVSuWW
 2026-09-08 11:26:51 -07:00
dependabot[bot]
2cd6dd7994 build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.83.1 to 1.83.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.83.1...v1.83.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.83.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-07 15:32:47 +00:00
dependabot[bot]
cd9927971e build(deps): bump github.com/googleapis/gax-go/v2 from 2.23.0 to 2.24.1 
Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) from 2.23.0 to 2.24.1.
- [Release notes](https://github.com/googleapis/gax-go/releases)
- [Commits](https://github.com/googleapis/gax-go/compare/v2.23.0...v2.24.1)

---
updated-dependencies:
- dependency-name: github.com/googleapis/gax-go/v2
  dependency-version: 2.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-07 15:32:39 +00:00
Mariano Cano
82f334e426 Use go.step.sm/crypto@v0.90.0 2026-09-04 16:14:59 -07:00
Mariano Cano
53f99fefc0 Upgrade go.step.sm/crypto and fix linter errors 2026-09-03 19:03:53 -07:00
Mariano Cano
c2d9139d18 Add support for ML-DSA keys 
This commit adds support for ML-DSA keys and modernizes Go using go fix.
 2026-09-03 14:28:33 -07:00
step-ci
bb481fbf67 Merge pull request #2781 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.3.2 
build(deps): bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2
 2026-09-02 06:21:09 -05:00
dependabot[bot]
3b56548462 build(deps): bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 
Bumps [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) from 5.3.1 to 5.3.2.
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/go-chi/chi/compare/v5.3.1...v5.3.2)

---
updated-dependencies:
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-02 11:06:51 +00:00
step-ci
c401ad9387 Merge pull request #2780 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.89.0 
build(deps): bump go.step.sm/crypto from 0.87.0 to 0.89.0
 2026-09-02 06:01:36 -05:00
dependabot[bot]
1ab72a4f4b build(deps): bump go.step.sm/crypto from 0.87.0 to 0.89.0 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.87.0 to 0.89.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.87.0...v0.89.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.89.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-02 10:53:30 +00:00
step-ci
0bbcd8ac66 Merge pull request #2779 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.12 
build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12
 2026-09-02 05:52:04 -05:00
step-ci
7915c531cf Merge pull request #2778 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.10.2 
build(deps): bump github.com/sirupsen/logrus from 1.10.0 to 1.10.2
 2026-09-02 05:51:23 -05:00
Mariano Cano
07284b3c79 Merge pull request #2784 from smallstep/mariano/panic 
Fix panic when ssh certificate is nil due to an error
 2026-09-01 13:39:36 -07:00
Mariano Cano
4cc5c5356a Fix panic when ssh certificate is nil due to an error 2026-09-01 13:32:47 -07:00
dependabot[bot]
c1e5821df4 build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 
Bumps google.golang.org/protobuf from 1.36.11 to 1.36.12.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-31 15:32:50 +00:00
dependabot[bot]
be9bb668c6 build(deps): bump github.com/sirupsen/logrus from 1.10.0 to 1.10.2 
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.10.0 to 1.10.2.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.10.0...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-08-31 15:32:48 +00:00
Herman Slatman
3f006a5d32 Merge pull request #2768 from smallstep/herman/acme-android-format-enabled-check 
Use `IsAttestationFormatEnabled` to check `android-key` format
 2026-08-24 23:12:39 +02:00
step-ci
38bdf087f4 Merge pull request #2771 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.3 
build(deps): bump github.com/fxamacker/cbor/v2 from 2.9.2 to 2.9.3
 2026-08-24 15:20:22 -05:00