30 Commits (master)

Author	SHA1	Message	Date
Max	9f84f7ce35	Allow for identity certificate signing (in sshSign) by skipping validators (#1572) ... - skip urisValidator for identity certificate signing. Implemented by building the validator with the context in a hacky way.	8 months ago
Mariano Cano	c7c7decd5e	Add support for the disableSmallstepExtensions claim ... This commit adds a new claim to exclude the Smallstep provisioner extension from the generated certificates. Fixes #620	10 months ago
Mariano Cano	ac35f3489c	Remove unused certificate validators and modifiers ... With the introduction of certificate templates some certificate validators and modifiers are not used anymore. This commit deletes the ones that are not used.	1 year ago
Mariano Cano	21427d5d65	Replace instead of prepend provisioner extension ... With non standard SANs this will generate the SAN and provisioner extension in the same order.	2 years ago
Mariano Cano	4690fa64ed	Add public methods to retrieve the provisioner extensions.	2 years ago
Mariano Cano	b9beab071d	Fix unit tests.	3 years ago
max furman	16665c97f0	Allow empty SAN in CSR for validation ... ... - The default template will always use the SANs from the token. - If there are any SANs they must be validated against the token.	3 years ago
Mariano Cano	35bd3ec383	Merge pull request #329 from smallstep/ssh-cert-templates ... SSH cert templates	4 years ago
max furman	46fc922afd	Remove unused code; fix usage wrong word; add gap time for unit test	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	37f84e9bb3	Add delay in test.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	0c8376a7f6	Fix existing unit tests.	4 years ago
max furman	71d87b4e61	wip	4 years ago
max furman	d25e7f64c2	wip	4 years ago
max furman	1951669e13	wip	4 years ago
max furman	7d5cf34ce5	Update profileLimitDuration validator ... ... - respect notBefore of the provisioner - modify/fix the reported errors	4 years ago
Oleksandr Kovalchuk	4cd01b6868	Implement tests for forceCNOption modifier ... Implement unit tests which checks forceCNOption modifier (implemented in 322200b7db) is not broken and works correctly. Ref: https://github.com/smallstep/certificates/issues/259	4 years ago
Mariano Cano	a2dfa6faa8	Fix unit tests.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	895d3054a3	Remove the use of custom x509 package. ... Upgrade cli dependency.	4 years ago
Mariano Cano	06411d1715	Add tests of profileLimitDuration with backdate.	4 years ago
Mariano Cano	8297e5c717	Add tests for backdate and sshDefaultDuration	4 years ago
Mariano Cano	93b65bee7c	Add unit test for profileDefaultDuration.	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer ... * Fixes #94 * In the future this should be configurable by provisioner	5 years ago
max furman	635c59ed24	Accept emails SANs	5 years ago
Mariano Cano	900ab9cc12	Allow custom common names in cloud identity provisioners.	5 years ago
Mariano Cano	c24d868d9d	Add tests for sign options.	5 years ago
Mariano Cano	54d86ca1c1	testing work in progress.	5 years ago