488 Commits (2b19ba41fbd0283b63edbaa0890a8eb314fa435c)

Author	SHA1	Message	Date
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago
max furman	d204469280	Add a few more validity checks to default ssh cert validator	5 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. ... Fixes #100	5 years ago
max furman	61d52a8510	Small fixes associated with PR review ... * additions and grammar edits to documentation * clarification of error msgs	5 years ago
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	5 years ago
max furman	ac234771c7	Remove unknown provisioner WARNning and leave TODO	5 years ago
max furman	ca8daf5f12	Update comment and warn	5 years ago
Mariano Cano	9200f11ed8	Skip unsupported provisioners.	5 years ago
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer ... * Fixes #94 * In the future this should be configurable by provisioner	5 years ago
max furman	635c59ed24	Accept emails SANs	5 years ago
Mariano Cano	34e1e3380a	Fix lint errors.	5 years ago
Mariano Cano	57a529cc1a	Allow to enable the SSH CA per provisioner	5 years ago
Mariano Cano	e71072d389	Add experimental support for provisioning users.	5 years ago
Mariano Cano	dc657565a7	Add SSH test for GCP.	5 years ago
Mariano Cano	7983aa8661	Add azure ssh tests.	5 years ago
Mariano Cano	2cac85a8c8	Add aws tests.	5 years ago
Mariano Cano	f8a71899fd	Add missing file.	5 years ago
Mariano Cano	d231bfb764	Update jwk and oidc tests.	5 years ago
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	5 years ago
Mariano Cano	c17375a10a	Create convenient method to mock the timeduration.	5 years ago
Mariano Cano	4c1a11c1bc	Add Unix method to TimeDuration.	5 years ago
Mariano Cano	b0240772da	Add tests for SSH certs with JWK provisioners.	5 years ago
Mariano Cano	780eeb5487	Remove debug print.	5 years ago
Mariano Cano	ad91842d06	Add test for SanitizeSSHUserPrincipal	5 years ago
Mariano Cano	f8cacc11b1	Fix tests.	5 years ago
Mariano Cano	b827a59e96	Add SSH host certificate support for GCP provisioner.	5 years ago
Mariano Cano	221d323b68	Fix containsAllMembers	5 years ago
Mariano Cano	18a285e847	Change azure ssh key id.	5 years ago
Mariano Cano	aef52e4334	Add support for SSH host certificates in azure.	5 years ago
Mariano Cano	7d670b20ea	Add support of ssh host certinficates in AWS provisioner.	5 years ago
Mariano Cano	7583f1c739	Do not require all principals, allow subgroups.	5 years ago
Mariano Cano	41b97372e6	Rename function to SanitizeSSHUserPrincipal	5 years ago
Mariano Cano	53f62f871c	Set not extensions to host certificates.	5 years ago
Mariano Cano	48c98dea2a	Make SanitizeSSHPrincipal a public function.	5 years ago
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. ... Update the interface for all the provisioners.	5 years ago
Mariano Cano	082ebda85b	Merge branch 'master' of github.com:smallstep/certificates into ssh-ca	5 years ago
Mariano Cano	d7221e15ac	Always marshal timeduration as a string	5 years ago
Mariano Cano	3ff410c695	fix ssh validity modifier	5 years ago
Mariano Cano	1c8f610ca9	Add initial implementation of an SSH CA using the JWK provisioner. ... Fixes smallstep/ca-component#187	5 years ago
Mariano Cano	f5beed3b96	Merge pull request #83 from matteo-s/oidc-groups ... Add option for checking group membership declared in JWT token	5 years ago
Mariano Cano	3e69194cc4	Fix lint error	5 years ago
Mariano Cano	900ab9cc12	Allow custom common names in cloud identity provisioners.	5 years ago
Mariano Cano	5f4217ca4c	Simplify abs, it performs even better.	5 years ago
Matteo Saloni	1919cfdff3	Add option for checking group membership declared in JWT token	5 years ago
Mariano Cano	e66272d6f0	Fix panic when max-age is set to zero. ... Fixes #81	5 years ago
Mariano Cano	8f8c862c04	Fix spelling errors.	5 years ago
Mariano Cano	b88a2f1373	Fix provisioner id in LoadByCertificate	5 years ago
Mariano Cano	37dff5124b	Fix audience tests. ... Fixes smallstep/step#156	5 years ago
Mariano Cano	2491593cdd	Add ca-url based audience for AWS tokens ... Fixes smallstep/step#156	5 years ago
Mariano Cano	4fa9e9333d	Add NewDuration constructor.	5 years ago
Mariano Cano	37f2096dff	Add Stringer interface to provisioner.Type. ... Add missing file.	5 years ago
Mariano Cano	6e4a09651a	Add comments with links to cloud docs.	5 years ago
Mariano Cano	536ec36b9e	Add support for instance age check in AWS. ... Fixes smallstep/step#164	5 years ago
Mariano Cano	c431538ff2	Add support for instance age check in GCP. ... Fixes smallstep/step#164	5 years ago
Mariano Cano	4cef086c00	Allow to use emails as service accounts on GCP ... Fixes smallstep/step#163	5 years ago
Mariano Cano	0a756ce9d0	Use on GCP audiences with the format https://<ca-url>#<provisioner-type>/<provisioner-name> ... Fixes smallstep/step#156	5 years ago
Mariano Cano	a54bf925eb	Add filtering by GCP Project ID. ... Fixes smallstep/step#155	5 years ago
Mariano Cano	54d0186d1f	Change condition to fail if the length is not the expected.	5 years ago
Mariano Cano	cf07c8f4c0	Fix typos.	5 years ago
Mariano Cano	423d505d04	Replace subscriptions with resource groups.	5 years ago
Mariano Cano	32d2d6b75a	Remove debug code.	5 years ago
Mariano Cano	e0aaa1a577	Use tenant id in azures's provisioner x509 extension.	5 years ago
Mariano Cano	89eeada2a2	Add support for loading azure tokens by tenant id.	5 years ago
Mariano Cano	803d81d332	Improve azure unit tests.	5 years ago
Mariano Cano	4c5fec06bf	Require TenantID in azure, add some tests.	5 years ago
Mariano Cano	12937c6b75	Remove pkcs7 related variables and structs.	5 years ago
Mariano Cano	6412b1a79b	Add first version of Asure support. ... Fixes #69	5 years ago
Mariano Cano	70196b2331	Add skeleton for the Azure provisioner. ... Related to #69	5 years ago
Mariano Cano	81bfd2c1cb	Add tests for AWS provisioner ... Fixes #68	5 years ago
Mariano Cano	f755fddc35	Fix lint errors.	5 years ago
Mariano Cano	b6a5ebcfc9	Move code to switch default.	5 years ago
Mariano Cano	a7f06c765d	Fix load of gcp and aws provisioner by certificate.	5 years ago
Mariano Cano	da93e40f90	Add constant for Azure type.	5 years ago
Mariano Cano	37e84aa535	Add DisableCustomSANs and DisableTrustOnFirstUse to GCP provisioner. ... Fixes #67	5 years ago
Mariano Cano	75ef5a2275	Add AWS provisioner. ... Fixes #68	5 years ago
Mariano Cano	5defd8289d	Add missing config in tests.	5 years ago
Mariano Cano	2c68915b70	Fix comment.	5 years ago
Mariano Cano	fb6321fb2c	Use gcpConfig type to keep configuration urls. ... Fixes #67	5 years ago
Mariano Cano	7e53b28320	Disable revoke for GCP.	5 years ago
Mariano Cano	7727fa5665	Update GCP tests.	5 years ago
Mariano Cano	1ea4b0ad64	Add unit test for GCP provider	5 years ago
Mariano Cano	b4729cd670	Use JWKSet to get the GCP keys.	5 years ago
Mariano Cano	f794dbeb93	Add support for GCP identity tokens.	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	7b9e08bcfa	Fix comment.	5 years ago
Mariano Cano	6d92ba75b9	Don't use pointer in TimeDuration.MarshalJSON	5 years ago
Mariano Cano	698058baa9	Add tests for TimeDuration.	5 years ago
Mariano Cano	00fed1c538	Add initial version of time duration support in sign requests.	5 years ago
Mariano Cano	76618558ae	Improve unit tests.	5 years ago
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	5 years ago
Mariano Cano	5d5f03f963	Set omitempty to admins and domains.	5 years ago
Mariano Cano	60880d1f0a	Add domains and check emails properly.	5 years ago
Mariano Cano	5edbce017f	Set docs for client secret as mandatory, but it can be blank.	5 years ago
Mariano Cano	2c0c0112c6	Add an optional client secret field.	5 years ago
Mariano Cano	945a1371f1	Fix tests.	5 years ago
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	5 years ago
Mariano Cano	23e6de57a2	Address comments in code review.	5 years ago
Mariano Cano	7fd737cbb1	Fix lint warnings.	5 years ago
Mariano Cano	1a9e8bad74	Truncate to seconds instead of rounding.	5 years ago
Mariano Cano	ef4d809ee6	Move matchesAudience and stripPort tests to provisioner package.	5 years ago
Mariano Cano	636d92b19b	Add missing files.	5 years ago
Mariano Cano	a8d03c39bb	Move Duration to a new file and move tests to provisioner package.	5 years ago
Mariano Cano	c24d868d9d	Add tests for sign options.	5 years ago
Mariano Cano	5dfcbcf5dc	Add noop tests.	5 years ago
Mariano Cano	4ceb88fbae	Add tests for OIDC and complete some JWK tests.	5 years ago
Mariano Cano	dce3100cfb	Add missing time in validation.	5 years ago
Mariano Cano	fb279c89fb	Restore deleted methods.	5 years ago
Mariano Cano	955405d6aa	Add some comments added to master.	5 years ago
Mariano Cano	af9688c419	Fix some testing errors.	5 years ago
Mariano Cano	f17d2d9694	Remove debug statements.	5 years ago
Mariano Cano	67c79fd014	Add tests for default provisioner.	5 years ago
Mariano Cano	cf2dba3efb	Add tests for keyStore.	5 years ago
Mariano Cano	2a5430fee1	Complete tests for collection.	5 years ago
Mariano Cano	54d86ca1c1	testing work in progress.	5 years ago
Mariano Cano	9f7f871f25	Add noop provisioner and use it if a provisioner cannot been found from a cert.	5 years ago
Mariano Cano	47817ab212	Fix interface type.	5 years ago
Mariano Cano	cc8764c343	Initialize the list for backward compatibility.	5 years ago
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	5 years ago
Mariano Cano	507fd01062	Remove provisioner intermediate type.	5 years ago
Mariano Cano	1671ab2590	Fix some tests.	5 years ago
Mariano Cano	d92a7f2948	Rename provisioner to jwk.	5 years ago
Mariano Cano	a1782733fe	Rename files.	5 years ago
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	5 years ago
Mariano Cano	9d4034fbf6	Remove unused code.	5 years ago
Mariano Cano	6d395f3818	Add missing validy validator to oidc.	5 years ago
Mariano Cano	54ed49f072	Rename package.	5 years ago
Mariano Cano	34833d4fd5	Add validators from the authority package.	5 years ago
Mariano Cano	0dee841a4f	Complete first version of provisioner implementations.	5 years ago
Mariano Cano	7eb6eb1d3e	Complete provisioner.Claims with methods from authority.	5 years ago
Mariano Cano	fb77397fc7	Add new options to locate or list provisioners.	5 years ago
Mariano Cano	62dab7b6b8	Rename interface method.	5 years ago
Mariano Cano	5a8f78d9d0	Add support to collection to load the encrypted keys.	5 years ago
Mariano Cano	dd0376657c	Move collection to a new file.	5 years ago
Mariano Cano	4b2b6ffe32	Create the provisioner type used to englobe all different provisioners.	5 years ago
Mariano Cano	bed3132028	Move provisioner to authority/provisioner package.	5 years ago
Mariano Cano	fc0b2ca5a6	Revert "Move provisioners to authority/provisioner package." ... This reverts commit f88d622a67.	5 years ago
Mariano Cano	f88d622a67	Move provisioners to authority/provisioner package.	5 years ago
Mariano Cano	a2a45f635b	Add initial implementation of an OIDC provisioner.	5 years ago