Commit Graph

25 Commits (1951669e13348e2634ad5772abd982cda03f3015)

Author SHA1 Message Date
max furman 1951669e13 wip 4 years ago
max furman 7d5cf34ce5 Update profileLimitDuration validator ...
- respect notBefore of the provisioner
- modify/fix the reported errors
4 years ago
Oleksandr Kovalchuk 322200b7db
Implement modifier to set CommonName
Implement modifier which sets CommonName to the certificate if
CommonName is empty and forceCN is set in the config. Replace previous
implementation introduced in 0218018cee
with new modifier.

Closes https://github.com/smallstep/certificates/issues/259
Ref: https://github.com/smallstep/certificates/pull/260#issuecomment-628961322
4 years ago
Mariano Cano 13507efb35 Remove the requirement for CSR to have a common name.
Fixes #226
4 years ago
Mariano Cano bfe1f4952d Rename interface to CertificateEnforcer and add tests. 4 years ago
Mariano Cano 64f26c0f40 Enforce a duration for identity certificates. 4 years ago
max furman 397a181d10 Add backdate validation to sshCertValidityValidator. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
Mariano Cano 93b65bee7c Add unit test for profileDefaultDuration. 4 years ago
Mariano Cano 84ff172093 Add support for backdate to SSH certificates. 4 years ago
Mariano Cano 5565d61bf3 Add fault tolerance against clock skew accross system on TLS certificates. 4 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
max furman 635c59ed24 Accept emails SANs 5 years ago
Mariano Cano 900ab9cc12 Allow custom common names in cloud identity provisioners. 5 years ago
Mariano Cano 00fed1c538 Add initial version of time duration support in sign requests. 5 years ago
Mariano Cano 7fd737cbb1 Fix lint warnings. 5 years ago
Mariano Cano c24d868d9d Add tests for sign options. 5 years ago
Mariano Cano 955405d6aa Add some comments added to master. 5 years ago
Mariano Cano 2a5430fee1 Complete tests for collection. 5 years ago
Mariano Cano 47817ab212 Fix interface type. 5 years ago
Mariano Cano a97ea87caa Move options to provisioner so we can set the duration of the cert. 5 years ago
Mariano Cano 6d395f3818 Add missing validy validator to oidc. 5 years ago
Mariano Cano 34833d4fd5 Add validators from the authority package. 5 years ago
Mariano Cano a2a45f635b Add initial implementation of an OIDC provisioner. 5 years ago