open-vault/builtin/logical/pki
Alexander Scheel 73c468787b
Add ACME new account creation handlers (#19820)
* Identify whether JWKs existed or were created, set KIDs

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Reclassify ErrAccountDoesNotExist as 400 per spec

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add additional stub methods for ACME accounts

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Start adding ACME newAccount handlers

This handler supports two pieces of functionality:

 1. Searching for whether an existing account already exists.
 2. Creating a new account.

One side effect of our JWS parsing logic is that we needed a way to
differentiate between whether a JWK existed on disk from an account or
if it was specified in the request. This technically means we're
potentially responding to certain requests with positive results (e.g.,
key search based on kid) versus erring earlier like other
implementations do.

No account storage has been done as part of this commit.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Unify path fields handling, fix newAccount method

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-03-29 19:06:09 +00:00
..
acme Add ACME new account creation handlers (#19820) 2023-03-29 19:06:09 +00:00
cmd/pki adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
backend.go Add ACME new account creation handlers (#19820) 2023-03-29 19:06:09 +00:00
backend_test.go Add ACME new account creation handlers (#19820) 2023-03-29 19:06:09 +00:00
ca_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
ca_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
cert_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
cert_util_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
chain_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
chain_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
config_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
crl_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
crl_util.go More wrapped errors - PKI, SSH, Transit (#19631) 2023-03-20 16:00:49 +00:00
fields.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
integration_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
key_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
managed_key_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_acme_directory.go Add ACME new account creation handlers (#19820) 2023-03-29 19:06:09 +00:00
path_acme_new_account.go Add ACME new account creation handlers (#19820) 2023-03-29 19:06:09 +00:00
path_acme_nonce.go Add ACME new account creation handlers (#19820) 2023-03-29 19:06:09 +00:00
path_acme_test.go Initial ACME new-nonce API (#19822) 2023-03-29 18:22:48 +00:00
path_config_ca.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_config_cluster.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_config_crl.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_config_urls.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_fetch.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_fetch_issuers.go Add tests for PKI endpoint authentication (#19704) 2023-03-23 15:54:26 +00:00
path_fetch_keys.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_intermediate.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_issue_sign.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_manage_issuers.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_manage_keys.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_manage_keys_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_ocsp.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_ocsp_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_resign_crls.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_resign_crls_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_revoke.go Forward PKI revocation requests received by standby nodes to active node (#19624) 2023-03-20 14:58:36 +00:00
path_roles.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_roles_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_root.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_sign_issuers.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_tidy.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_tidy_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
periodic.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
secret_certs.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage.go More wrapped errors - PKI, SSH, Transit (#19631) 2023-03-20 16:00:49 +00:00
storage_migrations.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage_migrations_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage_unified.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
test_helpers.go Initial ACME new-nonce API (#19822) 2023-03-29 18:22:48 +00:00
util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00