crypt/step-ca
1
0
Fork 0
mirror of synced 2026-10-24 12:59:18 +03:00
Code Activity
5,769 Commits 50 Branches 245 Tags
master
Commit Graph

429 Commits

Author SHA1 Message Date
Mariano Cano
405cfde442 Remove http2.Transport support from ca.Client 
http2.Transport is deprecated, and as far as we know nobody passes one
to ca.Client, so drop the special cases for it. A plain http.Transport
already speaks HTTP/2.
 2026-10-16 18:52:18 -07:00
Mariano Cano
c2d9139d18 Add support for ML-DSA keys 
This commit adds support for ML-DSA keys and modernizes Go using go fix.
 2026-09-03 14:28:33 -07:00
Mariano Cano
c480a31833 Remove deprecated tls.Config and net.Dialer properties 
Remove the deprecated PreferServerCipherSuites and DualStack properties
to fix linter errors. They do not have any effect on newer versions of Go.
 2026-08-24 12:52:50 -07:00
maxtaran2010
70f3415ee1 fix: correct typos in comments and error messages 
- imlements -> implements (acme/db/nosql/account.go)
- diplay -> display (acme/order.go)
- applictaion -> application (acme/api/middleware.go)
- underlaying -> underlying (authority/config/config.go)
- initializtion -> initialization (authority/options.go)
- creationg -> creating (authority/provisioner/wire/oidc_options.go)
- thats -> that (authority/provisioner/sign_options.go)
- parametrs -> parameters (authority/provisioner/oidc_test.go)
- pasing -> parsing (ca/identity/identity.go)
- Thay -> They (pki/pki.go)
- exluded/exluding -> excluded/excluding (policy/engine.go)
- contraint -> constraint (policy/options.go, policy/validate.go)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: maxtaran2010 <ocotifuzo727@gmail.com>
 2026-07-14 15:26:30 +02:00
Mariano Cano
be2523cfae Fix linter errors 2026-05-05 20:32:01 +02:00
Max
01c87964d7 fix(lint): resolve golangci-lint errors from updated gosec rules (#2590) 
Remove 47 stale //nolint:gosec directives that are no longer needed
after gosec rule changes (nolintlint flagged them as unused). Add
//nolint:gosec annotations for 5 new findings: G117 on config struct
marshaling (password fields by design), G115 on intentional uint->byte
truncation in SCEP OID encoding, and G704 SSRF taint on the
user-configured CA HTTP client.

Co-authored-by: Claude <noreply@anthropic.com>
 2026-03-10 20:39:58 -07:00
Herman Slatman
8e83ed1a58 Add gosec exclusion in termutil package 2026-02-23 19:32:20 +01:00
Mariano Cano
de5e7185a0 Use claude code to fix linter errors 
This commit fixes the linter errors using Claude code.
 2026-02-17 17:26:07 -08:00
Mariano Cano
63231db0d3 Apply suggestions in code review 2026-01-14 11:35:43 -08:00
Mariano Cano
f1c54b8430 Add missing commit 2026-01-13 13:49:20 -08:00
Mariano Cano
da56c70773 Apply suggestions from code review 2026-01-13 13:45:00 -08:00
Mariano Cano
e86b66b8b0 Add HTTP transport decorator 
This commit adds a new option to the CA client that allows the
customization of the HTTP transport.
 2026-01-13 13:36:14 -08:00
Carl Tashian
ef8d580f3f Merge pull request #2526 from smallstep/fix-acme-db-warning-2102 
Warn when ACME provisioner is configured without database
 2026-01-09 11:06:17 -06:00
Carl Tashian
21021ffe18 Warn when ACME provisioner is configured without database 
When an ACME provisioner is configured but the database is not set up,
ACME endpoints silently fail with 404 errors. This change adds a warning
at startup to inform users that ACME functionality will not be available
without a database configuration.

Fixes #2102
 2026-01-08 11:30:26 -06:00
Herman Slatman
979edbb591 Fix tests for root not found by fingerprint functionality 
Broken test was merged as part of https://github.com/smallstep/certificates/pull/1893.
 2026-01-07 22:08:31 +01:00
Mariano Cano
5edadf7e4a Close idle connections on client certificate renew 
This commit changes the ca client that returns a "tls.Config" to close
connections sitting idle in a keep-alive state. This forces new client
connections to use the new certificate.
 2026-01-06 11:45:11 -08:00
provokateurin
0c79ee2093 feat: Add sd_notify support 2025-11-09 09:44:26 +01:00
smst-jeff
2a51f17a22 Use errgroup to shutdown services concurrently. (#2343) 2025-07-24 10:29:29 -07:00
Mariano Cano
503f67dc61 Replace sync.WaitGroup with errgroup 2025-07-16 10:50:08 -07:00
Mariano Cano
a5fd0d0cfc Fix process hanging after SIGTERM 
This commit fixes a problem where step-ca hangs after a shutdown because
errors were sent to a channel without enough capacity.
 2025-07-15 14:37:56 -07:00
Mariano Cano
d647ba3e9c Allow to specify audience when generating JWK provisioner tokens 
This commit allows to set custom audiences to generate X.509 and SSH
related tokens. This change is backward compatible with the current
interface.

Fixes @2323
 2025-07-01 18:36:20 -07:00
Herman Slatman
acf4387180 Fix new golangci-lint v2 linter issues 2025-05-21 12:21:47 +02:00
Herman Slatman
8815e60a36 Fix flaky client timeout test 
It looks like the server sleep wasn't always enough to trigger
the timeout of the `fail with timeout` test. The server sleep
has been increased, and the timeout decreased to prevent this
from happening.
 2025-04-03 13:36:06 +02:00
Herman Slatman
3135a2caec Add default timeout to CA and Admin client 2025-04-01 16:24:36 +02:00
Mariano Cano
d8993aca7c Add option to specify a client timeout 
This commit adds to the ca Client a new option to specify the client
timeout.

Fixes #2176
 2025-04-01 15:51:28 +02:00
Herman Slatman
27944b4eae Fix linter issues 2025-02-18 11:04:54 +01:00
Herman Slatman
f4736325fa Use github.com/smallstep/linkedca @ v0.23.0 2025-01-03 18:24:19 +01:00
Panagiotis Siatras
809c7023c9 Transport wrappers (#2103) 
* internal/httptransport: implemented Wrapper & NoopWrapper

* added transport wrappers

* addressed review comments
 2024-12-12 09:51:36 -08:00
Panagiotis Siatras
c986962154 internal/httptransport: initial implementation of the package (#2098) 
* internal/httptransport: initial implementation of the package
* authority: refactored for httptransport
* ca: refactored for httptransport
* test: refactored for httptransport
 2024-12-10 18:03:37 +02:00
Herman Slatman
b45b73f4cc Use github.com/smallstep/cli-utils instead of go.step.sm/cli-utils 2024-10-28 10:53:44 +01:00
Herman Slatman
aeb5e1b366 Address linter issues 2024-08-20 16:54:29 +02:00
Mariano Cano
683f2dfff3 Fix unit test 2024-07-24 12:24:03 -07:00
Mariano Cano
f3f484cee2 Log errors using slog.Logger 
This commit allows logging errors in a slog.Logger injected in the
context. This type of logger is not currently used directly in step-ca,
but this will change in the future.
 2024-05-15 15:40:40 -07:00
Mariano Cano
10f6a901ec Let the CA determine the RA lifetime 
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.

This commit also fixes linter warnings.

Related to #1094
 2024-03-12 14:29:55 -07:00
Herman Slatman
b8510dd5b2 Make the requestid an exported middleware 2024-03-07 10:41:19 +01:00
Herman Slatman
bbb80cde16 Add startup error shutdown message to log 2024-03-05 15:34:13 +01:00
Herman Slatman
f02d4546a9 Handle CA server startup errors 2024-03-05 11:08:24 +01:00
Herman Slatman
d392c169fc Improve functional coverage of request ID integration test 2024-03-04 12:00:08 +01:00
Herman Slatman
0898c6db97 Use UUIDv4 as automatically generated client request identifier 2024-03-01 01:04:31 +01:00
Herman Slatman
b9d6bfc1eb Cleanup CA client tests by removing smallstep/assert 2024-02-28 14:39:38 +01:00
Herman Slatman
532b9df0a3 Improve CA client request ID handling 2024-02-28 13:57:37 +01:00
Herman Slatman
7e5f10927f Decouple request ID middleware from logging middleware 2024-02-28 13:18:10 +01:00
Herman Slatman
2255857b3a Fix client shadowing and e2e request ID test case 2024-02-28 10:50:49 +01:00
Herman Slatman
5c2572c443 Add support for user provider X-Request-Id header value 2024-02-28 01:55:35 +01:00
Herman Slatman
cf8a50157f Add a basic e2e test for X-Request-Id reflection 2024-02-28 01:05:38 +01:00
Herman Slatman
c1c2e73475 Add X-Request-Id to all requests made by our CA clients 2024-02-27 17:04:21 +01:00
Mariano Cano
503e5046ea Merge branch 'master' into allow_custom_tls_config 2024-02-14 12:11:00 -08:00
Mariano Cano
beea482a0c Fix linter errors in ca/ca.go 2024-02-14 12:09:03 -08:00
Mariano Cano
ac773ff44e Merge branch 'master' into allow_external_x509_ca_service_intf 2024-02-14 11:38:39 -08:00
Mariano Cano
9fcdd3ffa6 Fix format warnings on ca/ca.go 2024-02-14 11:34:25 -08:00