Ahmet DEMIR
26d7b70957
feat(cas): add generic Config parameter to allow more flexible configuration on CAS
3 years ago
Herman Slatman
e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues
3 years ago
Mariano Cano
e15b5faf7d
Merge branch 'master' into keyvault
3 years ago
max furman
933b40a02a
Introduce gocritic linter and address warnings
3 years ago
Mariano Cano
52a18e0c2d
Add key name to CreateCertificateAuthority
3 years ago
Mariano Cano
e4e799ca85
Fix typos in comment.
3 years ago
Mariano Cano
6d644880bd
Allow to kms signers to define the SignatureAlgorithm
...
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.
On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
3 years ago
Mariano Cano
de719eb6f0
Add an option to avoid password prompts on step cas
...
When we are using `step ca init` to create a stepcas RA we don't
have access to the password for verify the provisioner.
3 years ago
max furman
77fdfc9fa3
Merge branch 'master' into max/cert-mgr-crud
3 years ago
max furman
9fdef64709
Admin level API for provisioner mgmt v1
3 years ago
Mariano Cano
35e6cc275a
Fix typos in comments.
3 years ago
Mariano Cano
dce1b290bd
Remove debug statements.
3 years ago
Mariano Cano
ac3c754a6d
Use known CA and add tier and gcs bucket options.
3 years ago
Mariano Cano
529eb4bae9
Rename CAPool to CaPool.
3 years ago
Mariano Cano
9db68db509
Add tests with cloudCAS EnableCertificateAuthority.
3 years ago
Mariano Cano
48bc4e549d
Fix cloudcas tests.
3 years ago
Mariano Cano
072bd0dcf4
Add support for Google CAS v1
3 years ago
Herman Slatman
491c2b8d93
Improve initialization of SCEP authority
3 years ago
Herman Slatman
2a249d20de
Refactor initialization of SCEP authority
3 years ago
Herman Slatman
c5e4ea08b3
Merge branch 'master' into hs/scep
4 years ago
Mariano Cano
84018ec71b
Clarify comment.
4 years ago
Mariano Cano
a9297100d8
Allow to configure the JWK using the encrypted key.
4 years ago
Mariano Cano
d9f93ccfde
Fix typo.
4 years ago
Mariano Cano
edc7c4d90e
Add support for password encrypted files
4 years ago
Mariano Cano
80542d6d9a
Add JWK as an issuer for stepcas.
4 years ago
Mariano Cano
ce3e6bfdf6
Fix linting errors.
4 years ago
Mariano Cano
96de4e6ec8
Return a non-implemented error in stepcas.RenewCertificate.
4 years ago
Mariano Cano
348815f4f6
Fix error message.
4 years ago
Herman Slatman
583d60dc0d
Address (most) PR comments
4 years ago
Mariano Cano
e7a6c46e54
Fix linting errors.
4 years ago
Mariano Cano
08e75b614e
Do not depend on Go 1.16.
4 years ago
Mariano Cano
6fd6270e7d
Remove debug statements.
4 years ago
Mariano Cano
7958f6ebb5
Add support for lifetime.
4 years ago
Mariano Cano
ae4b8f58b8
Add support for emails, ips and uris.
4 years ago
Mariano Cano
dbb48ecf8d
Add tests for stepcas.
4 years ago
Mariano Cano
bcf70206ac
Add support for revocation using an extra provisioner in the RA.
4 years ago
Mariano Cano
a6115e29c2
Add initial implementation of StepCAS.
...
StepCAS allows to configure step-ca as an RA using another step-ca
as the main CA.
4 years ago
Herman Slatman
e1cab4966f
Improve initialization of SCEP authority
4 years ago
Herman Slatman
7ad90d10b3
Refactor initialization of SCEP authority
4 years ago
Miclain Keffeler
ffbfcfb1f2
format.
4 years ago
Miclain K Keffeler
7a1eb43bb1
Update options.go
4 years ago
Miclain K Keffeler
f3396bf964
Update softcas.go
4 years ago
Miclain Keffeler
7545b4a625
leverage intermediate_ca.crt for appending certs.
4 years ago
Mariano Cano
a97fab4119
Fix mispell.
4 years ago
Mariano Cano
b057c6677a
Use test/bufconn instead of a real listener.
4 years ago
Mariano Cano
4f9200cc47
Add missing docs.
4 years ago
Mariano Cano
41a46bbd75
Enable default cas implementation.
4 years ago
Mariano Cano
7020011842
Add some extra tests.
4 years ago
Mariano Cano
7aa8a8fe1e
Complete tests for softCAS.
4 years ago
Mariano Cano
bb4f2aef2f
Fix lint error.
4 years ago
Mariano Cano
b275758018
Complete CloudCAS tests.
...
Upgrade cloud.google.com/go
4 years ago
Mariano Cano
10c2ce3071
Add missing files, mocks created using mockgen.
4 years ago
Mariano Cano
b2ae112dd2
Add initial tests for CreateCertificateAuthority.
4 years ago
Mariano Cano
b68344ec36
Fix unexpected error.
4 years ago
Mariano Cano
dff00a0218
Add support for local signing or cloudCAS intermediates.
4 years ago
Mariano Cano
2b4b902975
Add initial support for `step ca init` with cloud cas.
...
Fixes smallstep/cli#363
4 years ago
Mariano Cano
2654231c49
Update option property.
4 years ago
Mariano Cano
9f21813dd6
Rename option.
4 years ago
Mariano Cano
8381e9bd17
Fix typos.
4 years ago
Mariano Cano
8e6d7accf8
Do not add the CRL distribution points extension.
...
This extension is added by CloudCAS.
4 years ago
Mariano Cano
38fa780775
Add interface to get root certificate from CAS.
...
This change makes easier the configuration of cloudCAS as it does
not require to configure the root or intermediate certificate
in the ca.json. CloudCAS will get the root certificate using
the configured certificateAuthority.
4 years ago
Mariano Cano
fa099f2ae2
Change method name.
4 years ago
Mariano Cano
884a6f5dd0
Skip test on CI.
4 years ago
Mariano Cano
91aa1e87f1
Do not use go 1.15 methods.
4 years ago
Mariano Cano
f2dd5c48cc
Fix linting errors.
4 years ago
Mariano Cano
8957e5e5a2
Add missing tests
4 years ago
Mariano Cano
e146b3fe16
Add Unit tests for softcas.
4 years ago
Mariano Cano
1550a21f68
Fix unit tests.
4 years ago
Mariano Cano
144ffe73dd
Complete unit tests for Google CAS.
4 years ago
Mariano Cano
f7d066fca8
Fix key usages.
4 years ago
Mariano Cano
01e6495f43
Add most of cloudcas unit tests and minor fixes.
4 years ago
Mariano Cano
8eff4e77a8
Comment request structs.
4 years ago
Mariano Cano
aad8f9e582
Pass issuer and signer to softCAS options.
...
Remove commented code and initialize CAS properly.
Minor fixes in CloudCAS.
4 years ago
Mariano Cano
c8d9cb0a1d
Complete cloudcas using CAS v1beta1.
4 years ago
Mariano Cano
1b1f73dec6
Early attempt to develop a CAS interface.
4 years ago