Commit Graph

2154 Commits (2d5bfd34857eaebd682a91016a4106b03bb332cc)
 

Author SHA1 Message Date
max furman 2d5bfd3485 fix comment 3 years ago
Carl Tashian 04784be03e
Update cert-renewer@.service
Wrap command line env variables in braces so they are treated as a single argument (rather than split on whitespace)
3 years ago
Mariano Cano 845fa07064
Merge pull request #708 from smallstep/helm-fix
Use badgerv2 the default DB in helm
3 years ago
Mariano Cano 4fde7b5250 Use badgerv2 the default in helm too.
Use also port 443 for the ca-url, as we usually access through the
service, this can be overridden by --with-ca-url flag in the cli.
3 years ago
Mariano Cano ebf1afa96e
Merge pull request #707 from smallstep/password-flags
Add support for setting individual password for ssh and tls keys
3 years ago
Mariano Cano cfe08ad6fe Add flags to usage. 3 years ago
Mariano Cano 6729c79253 Add support for setting individual password for ssh and tls keys
This change add the following flags:
 * --ssh-host-password-file
 * --ssh-user-password-file

Fixes #693
3 years ago
max furman 8df9f629b1 go mod tidy 3 years ago
Max 4daef5dd0b
Merge pull request #703 from hslatman/hs/update-pkcs7
Update go.mozilla.org/pkcs7
3 years ago
Herman Slatman 73d0a11a20
Update github.com/micromdm/scep/v2 3 years ago
Herman Slatman 611859eec4
Update go.mozilla.org/pkcs7
This includes the fix as described in https://github.com/mozilla-services/pkcs7/pull/59,
which was the reason a fork of the library was used.
3 years ago
Carl Tashian e3acea9704 Add release page link to install docs 3 years ago
Max 23add69c9b
Merge pull request #702 from smallstep/max/release-header
[action] add official package links to github release header (via goreleaser)
3 years ago
max furman 6d644ddb2a [action] goreleaser pkg link cli -> certificates 3 years ago
max furman fcf322023a [action] goreleaser github release footer fix missing close braces 3 years ago
max furman 494da3d668 [action] goreleaser header packages 3 years ago
max furman 2cce795d8f [action] reference correct pub key in cosign example release header 3 years ago
max furman 8a99f7e458 [action] add header and footer to github release page 3 years ago
Mariano Cano ae42daf288
Merge pull request #700 from smallstep/cloudcas-signature-algorithm
Allow to kms signers to define the SignatureAlgorithm
3 years ago
Mariano Cano e4e799ca85 Fix typos in comment. 3 years ago
Mariano Cano 6e0d515a55 Add entry to changelog. 3 years ago
Mariano Cano 6d644880bd Allow to kms signers to define the SignatureAlgorithm
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.

On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
3 years ago
Mariano Cano 837db2e147
Merge pull request #699 from fofloinn/master
Converts group and subgroup to lowercase for comparison.
3 years ago
Mariano Cano 141c519171 Simplify check of principals in a case insensitive way
Fixes #679
3 years ago
Max feb2b45cf1
Merge pull request #698 from Slamdunk/patch-1
CHANGELOG: use ISO-8601 dates
3 years ago
Fearghal O Floinn 7a94b0c157 Converts group and subgroup to lowercase for comparison.
Fixes #679
3 years ago
Filippo Tessarotto 913bd0f24a
CHANGELOG: use ISO-8601 dates 3 years ago
Max efac0926df
Merge pull request #697 from smallstep/max/deb-checksum
Add deb checksum, add golang 1.17 for tests, build with golang 1.17
3 years ago
max furman 9ed84d71f6 [action] Add .releases to .gitignore 3 years ago
max furman 9641354675 [action] tmate debugger 3 years ago
max furman 9df5cc40b6 [action] remove duplicate debian step 3 years ago
max furman 23d3232d75 Changelog updates 3 years ago
max furman 8ba9013f5d gofmt linting errors 3 years ago
max furman 8bec473f8e fix gofmt linting errors 3 years ago
max furman e4739171b4 [action] Build deb during goreleaser action, add to checksum and ...
- add go 1.17 to test matrix
- build with go 1.17
3 years ago
max furman 19726aa61f update changelog 3 years ago
Max 8a2b2db608
Merge pull request #694 from smallstep/max/docker-cosign
[action] sign and push sigs for multi-arch docker containers w/ cosign
3 years ago
max furman e73612da07 [action] sign and push sigs for multi-arch docker containers w/ cosign 3 years ago
Kevin cb2c24fc88
Merge pull request #691 from smallstep/0.17.1-rn
update changelog
3 years ago
Kevin Chen 12153c96ae update changelog 3 years ago
max furman 96762226cd changelog update for 0.17.2 3 years ago
Max 72e365a7ac
Merge pull request #690 from smallstep/max/cosign
[action] use cosign to sign over goreleaser artifacts
3 years ago
Mariano Cano bcc6ed9a8c
Merge pull request #689 from smallstep/azure-oidc
Azure OIDC
3 years ago
max furman d6203eb251 [action] use cosign to sign over goreleaser artifacts 3 years ago
Mariano Cano f919535475 Add an extra way to distinguish Azure and Azure OIDC tokens.
We used to distinguish these tokens using the azp claim, but this
claim does not appear on new azure oidc tokens, at least on some
configurations.

This change will try to load by audience (client id) if the token
contains an email, required for OIDC.
3 years ago
Mariano Cano 097a918da7 Fix tests when we create re-use a token with a new authority. 3 years ago
Max 08115f584c
Merge pull request #687 from smallstep/max/golangci-bump
Bump golangci-lint to latest
3 years ago
max furman 6ec8a1f114 Bump golangci-lint to latest 3 years ago
Mariano Cano 9e7a3cd897 Update go.step.sm/crypto 3 years ago
Mariano Cano af41ef1ab8
Merge pull request #683 from smallstep/imds-versions
Initialize required IMDSVersions for GetIdentityToken
3 years ago