Commit Graph

207 Commits (340aa3206c1b01177292eb9347c17d851e806370)

Author SHA1 Message Date
Mariano Cano fe9c3cf753
Merge branch 'master' into ahmet2mir-feat/vault 2 years ago
Mariano Cano 674dc3c844 Rename unreleased claim to allowRenewalAfterExpiry for consistency. 2 years ago
Mariano Cano 9134bad22c Run go mod tidy. 2 years ago
Mariano Cano 37b521ec6c
Merge branch 'master' into feat/vault 2 years ago
Mariano Cano d4013f0df6 Update linkedca 2 years ago
Mariano Cano f5bf46b950 Upgrade go.step.sm/crypto 2 years ago
Herman Slatman 1dbaa62740
Update cloud.google.com/go/kms 2 years ago
Mariano Cano c903f00cd4 Rename claim to allowRenewAfterExpiry. 2 years ago
Mariano Cano 616490a9c6 Refactor renew after expiry token authorization
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
Mariano Cano 3fb5e57f12 Upgrade nosql package
The new version of the package allows filtering out database drivers
using Go tags.
2 years ago
Mariano Cano 6f46cdb432
Merge pull request #829 from vijayjt/new-azure-token-authz-options
Add subscription and object ID validation options to Azure provisioner
2 years ago
vijayjt 7a32c312bf Update linkedca dependency version 2 years ago
max furman 9d885e6914 bump nosql for postgres support 2 years ago
Mariano Cano c0525381eb Merge branch 'master' into feat/vault 2 years ago
Ahmet DEMIR ab5197500c
fix: a certificat must excldue the root and you should use verified chained intermediate 2 years ago
Herman Slatman c7c5c3c94e
Merge branch 'master' into herman/scep-macos-renewal-fixes 2 years ago
Mariano Cano 09a9b3e1c8 Upgrade go.step.sm/crypto 2 years ago
Herman Slatman 3b72d241e0
Add LinkedCA integration for improved SCEP provisioner 2 years ago
Ahmet DEMIR d957a57e24
fix: apply mariano suggestions and fixes
* use json.RawMessage to remote mapstructure in options
* use vault secretid structure to support multiple source aka string, file and env
* remove log prefix
* return raw cert on error on newline for cert and csr
* clean sans, commonName in createCertificate (bad copy/paste from StepCAS)
* verify authority fingerprint
* convert serial on revoke to bigint, bytes and vault dashed representation
2 years ago
Ahmet DEMIR 16390694e1
feat(vault): adding hashicorp vault cas 2 years ago
Mariano Cano 01a76445ea Upgrade go.step.sm/crypto 2 years ago
Mariano Cano 98044cf08d Use a tagged version of linkedca 2 years ago
Mariano Cano 6a1d0cb9f8 Add linkedca conversions. 2 years ago
Mariano Cano 9ec0276887 Update certificate set with new api. 2 years ago
Mariano Cano 32390a2964 Add initial implementation of a nebula provisioner.
A nebula provisioner will generate a X509 or SSH certificate with
the identities in the nebula certificate embedded in the token.
The token is signed with the private key of the nebula certificate.
2 years ago
max furman 7fac8c96c3 Merge branch 'master' into max/context 3 years ago
max furman 196f6b45c9 bump cli-utils to 0.7.0 3 years ago
max furman b5bf79b84e bump nosql library 3 years ago
max furman 555431448c bump version ofcli-utils 3 years ago
Herman Slatman 2c05f488f6
Remove support for Go 1.15 3 years ago
Mariano Cano 62a20c7db5 Upgrade cli-utils with latest version of promptui 3 years ago
Mariano Cano 9958e0645f Replace promptui with apache-compatible fork.
Promptui depends on github.com/juju/ansiterm that is licensed under
LGPL. The fork replaces ansiterm.TabWriter with the one in the
standard library.
3 years ago
Mariano Cano 0927e0d22a Upgrade go.step.sm/crypto dependency
The new version removes "env" and "expandenv" sprig functions.
3 years ago
Mariano Cano e15b5faf7d Merge branch 'master' into keyvault 3 years ago
Mariano Cano d8720c3723 Update linkedca package. 3 years ago
Mariano Cano 48549bf317 Initialize windows terminal on all binaries. 3 years ago
Mariano Cano 6389100325 Add unit tests for azurekms. 3 years ago
Mariano Cano 392a18465f Add initial implementation of Azure Key Vault KMS.
Fixes #462
3 years ago
Mariano Cano ad82d8a250 Upgrade go.step.sm/crypto as long with go-jose.v2
There was a typo in the OKP template causing bad fingerprints for
Ed25519 keys.

See a10ff54e00

Fixes #705
3 years ago
max furman 8df9f629b1 go mod tidy 3 years ago
Herman Slatman 73d0a11a20
Update github.com/micromdm/scep/v2 3 years ago
Herman Slatman 611859eec4
Update go.mozilla.org/pkcs7
This includes the fix as described in https://github.com/mozilla-services/pkcs7/pull/59,
which was the reason a fork of the library was used.
3 years ago
Mariano Cano 9e7a3cd897 Update go.step.sm/crypto 3 years ago
Mariano Cano 352acf8faa Upgrade golang.org/x/crypto 3 years ago
Mariano Cano 2c5080aae0 go mod tidy 3 years ago
Mariano Cano 42fde8ba28
Merge branch 'master' into linkedca 3 years ago
max furman 2317bf183b Nosql and badger bump 3 years ago
max furman cc9bc9c84b Bump Badger 3 years ago
max furman f53f78974e Badger bump to fix issue with caddy build 3 years ago
Mariano Cano 456ffd8806 Use linkedca v0.5.0 3 years ago