Commit Graph

157 Commits (29be322b1c5be5504d827b184966e4759ae8ad47)

Author SHA1 Message Date
Mariano Cano d4627d1282 Make provisioner tests compile, they are still failing. 4 years ago
Mariano Cano cf592fa0e1 Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
4 years ago
max furman 5788ac3f4f sshpop token should not allow renew/rekey of user ssh certs 4 years ago
max furman 54e3cf7322 Add multiuse capability to k8ssa provisioners 4 years ago
max furman 29853ae016 sshpop provisioner + ssh renew | revoke | rekey first pass 4 years ago
max furman c04f1e1bd4 sshpop first pass 4 years ago
max furman 8f07ff6a39 Add kubernetes service account provisioner 5 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
Mariano Cano 59526d3225
Merge pull request #105 from smallstep/okta-support
Address support on OIDC provisioners
5 years ago
Mariano Cano 39b41b5e83
Merge pull request #107 from smallstep/ssh-valid-after
Truncate to seconds ValidAfter
5 years ago
Mariano Cano d59a5b222f Truncate to seconds to avoid rounding up times.
It can cause that certs are not valid yet, if they are used right away.
5 years ago
max furman fe7973c060 wip 5 years ago
Mariano Cano adc1d54b0d Define valid after as 1m before now.
It avoids errors with immediate use of cert.
5 years ago
Mariano Cano 72f1a61f06 Increase coverage. 5 years ago
Mariano Cano b7045f27a9 Increase coverage. 5 years ago
Mariano Cano a16b2125bc Fix tests. 5 years ago
Mariano Cano 6c4abfabbb Make /.well-known/openid-configuration optional 5 years ago
Mariano Cano 3527ee6940 Add support for listenAddress parameter if OIDC provisioners.
Fixes smallstep/cli#150
5 years ago
max furman 44e864030d Remove debug logging 5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
max furman d204469280 Add a few more validity checks to default ssh cert validator 5 years ago
Mariano Cano 396b4222aa Implement validator for ssh keys.
Fixes #100
5 years ago
max furman 61d52a8510 Small fixes associated with PR review
* additions and grammar edits to documentation
* clarification of error msgs
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman ac234771c7 Remove unknown provisioner WARNning and leave TODO 5 years ago
max furman ca8daf5f12 Update comment and warn 5 years ago
Mariano Cano 9200f11ed8 Skip unsupported provisioners. 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
max furman 635c59ed24 Accept emails SANs 5 years ago
Mariano Cano 34e1e3380a Fix lint errors. 5 years ago
Mariano Cano 57a529cc1a Allow to enable the SSH CA per provisioner 5 years ago
Mariano Cano e71072d389 Add experimental support for provisioning users. 5 years ago
Mariano Cano dc657565a7 Add SSH test for GCP. 5 years ago
Mariano Cano 7983aa8661 Add azure ssh tests. 5 years ago
Mariano Cano 2cac85a8c8 Add aws tests. 5 years ago
Mariano Cano f8a71899fd Add missing file. 5 years ago
Mariano Cano d231bfb764 Update jwk and oidc tests. 5 years ago
Mariano Cano a8f4ad1b8e Set default SSH options if no user options are given. 5 years ago
Mariano Cano c17375a10a Create convenient method to mock the timeduration. 5 years ago
Mariano Cano 4c1a11c1bc Add Unix method to TimeDuration. 5 years ago
Mariano Cano b0240772da Add tests for SSH certs with JWK provisioners. 5 years ago
Mariano Cano 780eeb5487 Remove debug print. 5 years ago
Mariano Cano ad91842d06 Add test for SanitizeSSHUserPrincipal 5 years ago
Mariano Cano f8cacc11b1 Fix tests. 5 years ago
Mariano Cano b827a59e96 Add SSH host certificate support for GCP provisioner. 5 years ago
Mariano Cano 221d323b68 Fix containsAllMembers 5 years ago
Mariano Cano 18a285e847 Change azure ssh key id. 5 years ago
Mariano Cano aef52e4334 Add support for SSH host certificates in azure. 5 years ago
Mariano Cano 7d670b20ea Add support of ssh host certinficates in AWS provisioner. 5 years ago
Mariano Cano 7583f1c739 Do not require all principals, allow subgroups. 5 years ago