 Sheen Capadngan
|
5d9a43a3fd
|
fix: resolve cert invalid issue
|
2024-09-07 00:42:55 +08:00 |
|
|
Sheen Capadngan
|
76c9d3488b
|
Merge remote-tracking branch 'origin/main' into feature/est-simpleenroll
|
2024-08-27 02:13:59 +08:00 |
|
|
Sheen Capadngan
|
00f86cfd00
|
misc: addressed review comments
|
2024-08-26 21:10:29 +08:00 |
|
|
Tuan Dang
|
f560534493
|
Replace custom pkcs7 fns with module
|
2024-08-25 20:21:53 -07:00 |
|
|
Tuan Dang
|
1317266415
|
Merge remote-tracking branch 'origin' into feature/est-simpleenroll
|
2024-08-22 14:54:34 -07:00 |
|
|
Tuan Dang
|
2a79d5ba36
|
Fix merge conflicts
|
2024-08-22 12:01:43 -07:00 |
|
|
Tuan Dang
|
0cb95f36ff
|
Finish updating CRL impl
|
2024-08-22 11:55:19 -07:00 |
|
|
Tuan Dang
|
61370cc6b2
|
Finish allow installing intermediate CA with external parent CA
|
2024-08-20 21:44:41 -07:00 |
|
|
Sheen Capadngan
|
16519f9486
|
feat: added reading SANs from CSR
|
2024-08-20 01:39:40 +08:00 |
|
|
Sheen Capadngan
|
692bdc060c
|
misc: updated est configuration to be binded to certificate template
|
2024-08-19 19:26:20 +08:00 |
|
|
Sheen Capadngan
|
3a4f8c2e54
|
Merge branch 'feature/certificate-template' into feature/est-simpleenroll
|
2024-08-19 17:04:22 +08:00 |
|
|
Tuan Dang
|
47ea4ae9a6
|
Fix merge conflicts
|
2024-08-18 12:05:15 -07:00 |
|
|
Tuan Dang
|
30d6af7760
|
Make PR review adjustments
|
2024-08-17 21:23:25 -07:00 |
|
|
Sheen Capadngan
|
d529670a52
|
misc: addressed failing github actions
|
2024-08-16 23:14:45 +08:00 |
|
|
Sheen Capadngan
|
f90855e7a5
|
misc: add tracking of certificate template ID
|
2024-08-16 20:17:52 +08:00 |
|
|
Sheen Capadngan
|
97f5c33aea
|
feat: added collection selection for cert template
|
2024-08-16 19:40:23 +08:00 |
|
|
Sheen Capadngan
|
69925721cc
|
Merge branch 'certificate-alerting' into feature/certificate-template
|
2024-08-16 18:42:12 +08:00 |
|
|
Sheen Capadngan
|
0961d2f1c6
|
feat: subject alternative name policy enforcement
|
2024-08-16 17:24:33 +08:00 |
|
|
Sheen Capadngan
|
b9bd518aa6
|
feat: initial enforcement of template policy
|
2024-08-16 16:32:47 +08:00 |
|
|
Tuan Dang
|
7baa3b4cbe
|
Add PKI collection to issue cert modal
|
2024-08-15 10:41:37 -07:00 |
|
|
Tuan Dang
|
856c2423be
|
Update cert structure to ref correct ca cert in cert chain retrieval
|
2024-08-14 15:43:49 -07:00 |
|
|
Sheen Capadngan
|
146c4284a2
|
feat: integrated to est routes
|
2024-08-14 20:52:21 +08:00 |
|
|
Tuan Dang
|
bb6416acb7
|
Update CA certificate tracking impl to use foreign ref instead of number
|
2024-08-13 11:22:45 -07:00 |
|
|
Sheen Capadngan
|
1f38b92ec6
|
feat: finished up integration for est config management
|
2024-08-14 01:00:31 +08:00 |
|
|
Sheen Capadngan
|
f2a49a79f0
|
feat: initial simpleenroll setup (mvp)
|
2024-08-13 23:22:47 +08:00 |
|
|
Tuan Dang
|
5af53d3398
|
Update/remove comments
|
2024-08-05 20:19:14 -07:00 |
|
|
Tuan Dang
|
8da8c6a66c
|
Block expired CAs from issuing certs
|
2024-08-05 20:06:17 -07:00 |
|
|
Tuan Dang
|
88a4390ea0
|
Add docs for CA renewal
|
2024-08-05 19:49:35 -07:00 |
|
|
Tuan Dang
|
c70d0a577c
|
Finish preliminary CA renewal with same key pair
|
2024-08-05 15:43:40 -07:00 |
|
|
Tuan Dang
|
587a4a1120
|
Make progress on ca cert versioning
|
2024-08-05 11:00:22 -07:00 |
|
|
Tuan Dang
|
76311a1b5f
|
Update DN parsing fn
|
2024-08-02 07:00:36 -07:00 |
|
|
Tuan Dang
|
683e3dd7be
|
Add sign certificate endpoint
|
2024-07-31 13:57:47 -07:00 |
|
|
Sheen Capadngan
|
d918f3ecdf
|
misc: finalized switching of project KMS
|
2024-07-30 23:03:53 +05:30 |
|
|
=
|
5d4c7c2cbf
|
feat: added encrypt/decrypt with key for kms service and changed kms encrytion to hoc to avoid back to back db calls
|
2024-07-10 15:23:02 +05:30 |
|
|
=
|
c13c37fc77
|
feat: switched read db operations to replica nodes
|
2024-06-25 22:50:17 +05:30 |
|
|
Maidul Islam
|
d69267a3ca
|
remove console.log
|
2024-06-24 17:27:02 -04:00 |
|
|
Tuan Dang
|
b5aa650899
|
Add cert support for alt names
|
2024-06-24 14:07:15 -07:00 |
|
|
Tuan Dang
|
8fca6b60b3
|
Move crl functionality under ee
|
2024-06-13 15:38:32 -07:00 |
|
|
Tuan Dang
|
da7da27572
|
Add ca / cert audit logs
|
2024-06-12 18:37:02 -07:00 |
|
|
Tuan Dang
|
f5322abe85
|
Resolve PR issues
|
2024-06-12 13:11:21 -07:00 |
|
|
Tuan Dang
|
868d0345d6
|
Modularized repetitive ca + chain logic
|
2024-06-10 22:37:20 -07:00 |
|
|
Tuan Dang
|
3079cd72df
|
Move CRL rebuild to upon cert revocation temp
|
2024-06-10 00:33:18 -04:00 |
|
|
Tuan Dang
|
b48325b4ba
|
Update certificate chain handling
|
2024-06-09 23:23:01 -04:00 |
|
|
Tuan Dang
|
b6c924ef37
|
Encrypt CRL
|
2024-06-09 18:09:34 -04:00 |
|
|
Tuan Dang
|
931119f6ea
|
Link cert mgmt to kms
|
2024-06-09 17:46:16 -04:00 |
|
|
Tuan Dang
|
7ee440fa3f
|
Start moving CRL generation to queue
|
2024-06-03 16:16:05 -07:00 |
|
|
Tuan Dang
|
2937a46943
|
Add preliminary dynamically generated CRLs on fetching CA CRL
|
2024-05-30 15:45:34 -07:00 |
|
|
Tuan Dang
|
45fdd4ebc2
|
Added key algorithm opts to CA generation
|
2024-05-30 10:12:28 -07:00 |
|
|
Tuan Dang
|
a2a786f392
|
Transfer cert endpoints to work with serial numbers
|
2024-05-29 16:12:46 -07:00 |
|
|
Tuan Dang
|
f9847f48b0
|
Remove cert secret structure, show cert sk once upon issuance
|
2024-05-28 22:04:13 -07:00 |
|