f3f484cee2
Log errors using slog.Logger
...
This commit allows logging errors in a slog.Logger injected in the
context. This type of logger is not currently used directly in step-ca,
but this will change in the future.
2 days ago
2a8b80a3e1
Merge branch 'master' into herman/webhook-request-id
3 months ago
9f84f7ce35
Allow for identity certificate signing (in sshSign) by skipping validators ( #1572 )
...
- skip urisValidator for identity certificate signing. Implemented
by building the validator with the context in a hacky way.
7 months ago
9e3807eaa3
Use `SignWithContext` in the critical paths
8 months ago
4c56877d97
Add SSH certificate logging to renew and rekey too
1 year ago
922f702da3
Add logging for SSH certificate issuance
1 year ago
1be74eca62
Merge branch 'master' into ssh-renew-provisioner
2 years ago
6b3a8f22f3
Add provisioner to SSH renewals
...
This commit allows to report the provisioner to the linkedca when
a SSH certificate is renewed.
2 years ago
a6b8e65d69
Retrieve the authority from the context in api methods.
2 years ago
00634fb648
api/render, api/log: initial implementation of the packages ( #860 )
...
* api/render: initial implementation of the package
* acme/api: refactored to support api/render
* authority/admin: refactored to support api/render
* ca: refactored to support api/render
* api: refactored to support api/render
* api/render: implemented Error
* api: refactored to support api/render.Error
* acme/api: refactored to support api/render.Error
* authority/admin: refactored to support api/render.Error
* ca: refactored to support api/render.Error
* ca: fixed broken tests
* api/render, api/log: moved error logging to this package
* acme: refactored Error so that it implements render.RenderableError
* authority/admin: refactored Error so that it implements render.RenderableError
* api/render: implemented RenderableError
* api/render: added test coverage for Error
* api/render: implemented statusCodeFromError
* api: refactored RootsPEM to work with render.Error
* acme, authority/admin: fixed pointer receiver name for consistency
* api/render, errs: moved StatusCoder & StackTracer to the render package
2 years ago
29092b9d8a
api: refactored to use the read package
2 years ago
b5db3f5706
Modify errs.ForbiddenErr to always return an error to the cli.
3 years ago
668d3ea6c7
Modify errs.Wrap() with bad request to send messages to users.
3 years ago
8c8db0d4b7
Modify errs.BadRequestErr() to always return an error to the client.
3 years ago
933b40a02a
Introduce gocritic linter and address warnings
3 years ago
7b5d6968a5
first commit
3 years ago
e83e47a91e
Use sshutil and randutil from go.step.sm/crypto.
4 years ago
3b19bb9796
Add TemplateData to SSHSignRequest.
...
Add some omitempty tags.
4 years ago
6c64fb3ed2
Rename provisioner options structs:
...
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
4 years ago
b0ff731d18
Add support for user provisioner certificates on OIDC provisioners.
...
OIDC provisioners create an SSH certificate with two principals. This
was avoiding the creationg of user provisioner certificates for those
provisioners.
Fixes smallstep/cli#268
4 years ago
bfe1f4952d
Rename interface to CertificateEnforcer and add tests.
4 years ago
64f26c0f40
Enforce a duration for identity certificates.
4 years ago
c49a9d5e33
Add context parameter to all SSH methods.
4 years ago
1cb8bb3ae1
Simplify statuscoder error generators.
4 years ago
dccbdf3a90
Introduce generalized statusCoder errors and loads of ssh unit tests.
...
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
b9f6aacb0f
Move api errors to their own package and modify the typedef
4 years ago
3ac388612a
Use x5cInsecure token for /ssh/check-host endpoint
4 years ago
f6ffa2cc43
Check at the cert type instead of at the body.
4 years ago
7b81bec8aa
Use default duration for host certificates identity files.
4 years ago
3a16835cdd
Make identity duration the same as the SSH cert.
4 years ago
656f35e522
Use an actual Hosts type when returning ssh hosts
4 years ago
f92bb06b6c
change func def for getSSHHosts
...
* continue to return all hosts if injection method not specified
4 years ago
11c8639782
Add identity certificate in ssh response.
4 years ago
d940ab7c20
Add getSSHHosts injection func
4 years ago
8bf3bf701e
Add support for /ssh/bastion method.
4 years ago
54e3cf7322
Add multiuse capability to k8ssa provisioners
4 years ago
29853ae016
sshpop provisioner + ssh renew | revoke | rekey first pass
4 years ago
5616386eed
Add SSH getHosts api
4 years ago
d880a98295
Add tests for ssh api methods.
4 years ago
a713277453
Fix return of host configurations.
4 years ago
37f17213bb
Add initial support for check-host endpoint.
4 years ago
d08db4df23
Rename SSH methods.
4 years ago
b5bc249e1c
Add support for multiple ssh roots.
...
Fixes #125
4 years ago
91130b9c3f
Add support for user data in templates.
4 years ago
a35988ff08
Add initial support for ssh config.
...
Related to smallstep/cli#170
4 years ago
961be1fbc7
Add endpoint to return the SSH public keys.
...
Related to smallstep/ca-component#195
4 years ago
a197158426
Add initial implementation of ssh config.
4 years ago
61d52a8510
Small fixes associated with PR review
...
* additions and grammar edits to documentation
* clarification of error msgs
5 years ago
ca74bb1de5
Add ssh api tests.
5 years ago
e71072d389
Add experimental support for provisioning users.
5 years ago
Mariano Cano
Herman Slatman
Max
Panagiotis Siatras
Mariano Cano