Commit Graph

115 Commits (335435decfd395879f6f087f1a919ec371d5f1fb)

Author SHA1 Message Date
Mariano Cano 561341a6f2 Update go.step.sm/crypto. 3 years ago
Mariano Cano d74f1fa55e Use cli-utils v0.2.0 3 years ago
Mariano Cano a1a7e38a49 Add support for cli-utils with powershell support. 3 years ago
Mariano Cano 3eb24d7d01 Remove duplicated replace. 3 years ago
Mariano Cano f289d1ee1f Update to crypto11 v1.2.4
This version now includes my changes to delete a certificate.
3 years ago
Mariano Cano 4fbf7569fa Merge branch 'master' into pkcs11 3 years ago
Mariano Cano 1d47a7284d Upgrade nosql with a version of badger compatible with 32bits 3 years ago
Mariano Cano 6c0cf99b24 Upgrade nosql with a 32-bit version of badger. 3 years ago
Mariano Cano 8dca652bc7 Add support for PKCS #11 KMS.
The implementation works with YubiHSM2. Unit tests are still pending.

Fixes #301
3 years ago
Mariano Cano c61222de1d Upgrade nosql version.
nosql has newer version of badgers v1 and v2.
3 years ago
Derek Gaffney 8416bd633d Bump go-piv to v1.7.0 for x32 overflow fix 3 years ago
Mariano Cano 86c947babc Upgrade crypto and fix test. 4 years ago
Mariano Cano d6ea8b13ab Upgrade crypto.
Related to #435
4 years ago
Mariano Cano 921de7e07f Upgrade crypto to v0.7.1
Add basic constraints extensions if defined.
4 years ago
Mariano Cano 736a6fb64e Fix rebase. 4 years ago
Mariano Cano b275758018 Complete CloudCAS tests.
Upgrade cloud.google.com/go
4 years ago
Mariano Cano b2ae112dd2 Add initial tests for CreateCertificateAuthority. 4 years ago
Mariano Cano 461735718d Update go.step.sm/crypto dependency. 4 years ago
Mariano Cano 2b4b902975 Add initial support for `step ca init` with cloud cas.
Fixes smallstep/cli#363
4 years ago
Mariano Cano b79701202b Use cli-utils@v0.1.0 4 years ago
Mariano Cano 40d0596b71 Use smallstep/cli-utils instead of smallstep/cli 4 years ago
max furman 81a0df9e45 go mod tidy 4 years ago
max furman bf45e6ff16 Bump cli to v0.15.3 4 years ago
max furman 3f4d041082 bump cli to master 4 years ago
Mariano Cano 647b9b4541
Merge pull request #367 from smallstep/cas
Support for CAS Interface and CloudCAS
4 years ago
Mariano Cano 4c8bf87dc1 Use new admin template for K8ssa and admin-OIDC provisioners.
This change replaces the .Insecure.CR template to one that sets
all the SANs, but uses key usages and extended key usages for
regular TLS certificates.
4 years ago
Mariano Cano a332c40530 Merge branch 'master' into cas 4 years ago
Pierre Laden 179e793f1a - provide PINpolicy always to piv-go to avoid trying to use attestation cert, which we might not have
- bump piv-go version to 1.6.0
4 years ago
Mariano Cano c8d9cb0a1d Complete cloudcas using CAS v1beta1. 4 years ago
Mariano Cano 1b1f73dec6 Early attempt to develop a CAS interface. 4 years ago
Mariano Cano 3ac0ef2eaa Update crypto to v0.6.0 4 years ago
Mariano Cano f3b65e54ac Update go.step.sm to v0.5.0
Solves the problem of enforcing the signature algorithm. This
causes issues if the intermediate key is not an ECDSA key.
4 years ago
Mariano Cano 8ee246edda Upgrade go.step.sm to v0.4.0 4 years ago
Mariano Cano ef86bedb2c Upgrade go.step.sm dependency to v0.3.0 4 years ago
Mariano Cano c94a1c51be Merge branch 'master' into ssh-cert-templates 4 years ago
Mariano Cano ba918100d0 Use go.step.sm/crypto/jose
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago
Mariano Cano 03d642e59c Update go.step.sm/crypto to v0.2.0
Fixes #302
4 years ago
max furman cb594ed2e0 go mod tidy and golang 1.15.0 cleanup ...
- cs.NegotiatedProtocolIsMutual has been deprecated but we still build
in travis with 1.14 so for now we'll ignore this linting error
- string(int) was resolving to string of a single rune rather than
string of digits -> use fmt.Sprint
4 years ago
max furman 795648e5d5 bump cli to v0.15.0 4 years ago
Mariano Cano 32ba80f446 Use pemutil branch. 4 years ago
Mariano Cano d30a95236d Use always go.step.sm/crypto 4 years ago
Mariano Cano aaaa7e9b4e Merge branch 'master' into cert-templates 4 years ago
Mariano Cano 533ad0ca20 Use always go.step.sm/crypto/x509util 4 years ago
Mariano Cano 4943ae58d8 Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates. 4 years ago
Mariano Cano e83e47a91e Use sshutil and randutil from go.step.sm/crypto. 4 years ago
Mariano Cano c8d225a763 Use x509util from go.step.sm/crypto/x509util 4 years ago
max furman 3f844c5e23 Update the way SubjectKeyId is calculated, and more ...
- swith lint to first in line for `make all`
- update tests to conform with new subjectkeyid
4 years ago
David Cowden dc39eef721 aws: test badIDMS functional path
The existing test only covers the constructor logic. Also test the live
code path that is executed when a bad IDMS version is supplied.
4 years ago
Mariano Cano 978ad7e2b6 Fix merged tests. 4 years ago
Mariano Cano 0de15b0a42 Update cli dependency to master. 4 years ago