Commit Graph

265 Commits (2cb6bd880be8c65fc5fa79d110761fad6478738b)

Author SHA1 Message Date
Mariano Cano 2cb6bd880b Make audiences compatible with the old version. 5 years ago
Mariano Cano efc2180c4a Complete AuthDB interface. 5 years ago
Mariano Cano a4fd76f1a8 Make provisioner tests compile, they are still failing. 5 years ago
Mariano Cano 0c3b9ebf45 Fix indentation. 5 years ago
Mariano Cano 69a7058ff0 Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
5 years ago
max furman e679deddd7 sshpop token should not allow renew/rekey of user ssh certs 5 years ago
max furman 946094d2b7 Add multiuse capability to k8ssa provisioners 5 years ago
max furman a9ea292bd4 sshpop provisioner + ssh renew | revoke | rekey first pass 5 years ago
max furman b5f15531d8 sshpop first pass 5 years ago
max furman 64b69374fa Add SSH getHosts api 5 years ago
Mariano Cano cf2b9301c0 Change default user duration to 16h. 5 years ago
Mariano Cano e5da24f269 Fix list of user ssh public keys. 5 years ago
Mariano Cano 91ccc3802c Fix lint error. 5 years ago
Mariano Cano c2e20c7877 Add tests for ssh authority methods. 5 years ago
Mariano Cano 40052a1824 Add some ssh related tests. 5 years ago
Mariano Cano 38d735be6e Add support for federated keys. 5 years ago
Mariano Cano 3ee0dcec93 Add initial support for check-host endpoint. 5 years ago
Mariano Cano a50d59338e Rename SSH methods. 5 years ago
Mariano Cano e84489775b Add support for multiple ssh roots.
Fixes #125
5 years ago
Mariano Cano caa2174efc Add support for user data in templates. 5 years ago
Mariano Cano 7b8bb6deb4 Add initial support for ssh config.
Related to smallstep/cli#170
5 years ago
Mariano Cano c6a5772356 Fix tests. 5 years ago
Mariano Cano fe3149cf52 Add endpoint to return the SSH public keys.
Related to smallstep/ca-component#195
5 years ago
Mariano Cano dc6ffb7670 Add initial implementation of ssh config. 5 years ago
max furman 8f07ff6a39 Add kubernetes service account provisioner 5 years ago
Max 0a96062b76
Merge pull request #128 from jkralik/returnCertChain
Change api of functions Authority.Sign, Authority.Renew
5 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
Jozef Kralik bc6074f596 Change api of functions Authority.Sign, Authority.Renew
Returns certificate chain instead of 2 members.

Implements #126
5 years ago
Mariano Cano 59526d3225
Merge pull request #105 from smallstep/okta-support
Address support on OIDC provisioners
5 years ago
Mariano Cano 39b41b5e83
Merge pull request #107 from smallstep/ssh-valid-after
Truncate to seconds ValidAfter
5 years ago
Mariano Cano d59a5b222f Truncate to seconds to avoid rounding up times.
It can cause that certs are not valid yet, if they are used right away.
5 years ago
max furman fe7973c060 wip 5 years ago
Mariano Cano adc1d54b0d Define valid after as 1m before now.
It avoids errors with immediate use of cert.
5 years ago
Mariano Cano 72f1a61f06 Increase coverage. 5 years ago
Mariano Cano b7045f27a9 Increase coverage. 5 years ago
Mariano Cano a16b2125bc Fix tests. 5 years ago
Mariano Cano 6c4abfabbb Make /.well-known/openid-configuration optional 5 years ago
Mariano Cano 3527ee6940 Add support for listenAddress parameter if OIDC provisioners.
Fixes smallstep/cli#150
5 years ago
max furman 44e864030d Remove debug logging 5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
max furman d204469280 Add a few more validity checks to default ssh cert validator 5 years ago
Mariano Cano 396b4222aa Implement validator for ssh keys.
Fixes #100
5 years ago
max furman 61d52a8510 Small fixes associated with PR review
* additions and grammar edits to documentation
* clarification of error msgs
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman ac234771c7 Remove unknown provisioner WARNning and leave TODO 5 years ago
max furman ca8daf5f12 Update comment and warn 5 years ago
Mariano Cano 9200f11ed8 Skip unsupported provisioners. 5 years ago
Max 5dac2459c3
Merge pull request #96 from smallstep/max/2084
Enforce >= 2048 bit rsa keys in CSRs
5 years ago
max furman d3e74a0d2e switch from metalinter to golangci-lint 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago