Commit Graph

26 Commits (369b8f81c3828b8decaab5f46790587eb07d4ea0)

Author SHA1 Message Date
Mariano Cano 369b8f81c3 Use go.step.sm/crypto/kms
Fixes #975
2 years ago
Mariano Cano 9408d0f24b Send RA provisioner information to the CA 2 years ago
Mariano Cano 3aebe8d019 Add missing comma in comment. 2 years ago
Mariano Cano 37b521ec6c
Merge branch 'master' into feat/vault 2 years ago
Mariano Cano abf5fc32a3 Format comment. 2 years ago
Mariano Cano c480936ba4 Split comments. 2 years ago
Mariano Cano 955d4cf80d Add authority.WithX509SignerFunc
This change adds a new authority option that allows to pass a callback
that returns the certificate chain and signer used to sign X.509
certificates.

This option will be used by Caddy, they renew the intermediate
certificate weekly and there's no other way to replace it without
re-creating the embedded CA.

Fixes #874
2 years ago
Ahmet DEMIR d957a57e24
fix: apply mariano suggestions and fixes
* use json.RawMessage to remote mapstructure in options
* use vault secretid structure to support multiple source aka string, file and env
* remove log prefix
* return raw cert on error on newline for cert and csr
* clean sans, commonName in createCertificate (bad copy/paste from StepCAS)
* verify authority fingerprint
* convert serial on revoke to bigint, bytes and vault dashed representation
2 years ago
Ahmet DEMIR 16390694e1
feat(vault): adding hashicorp vault cas 2 years ago
Ahmet DEMIR 26d7b70957
feat(cas): add generic Config parameter to allow more flexible configuration on CAS 2 years ago
Mariano Cano de719eb6f0 Add an option to avoid password prompts on step cas
When we are using `step ca init` to create a stepcas RA we don't
have access to the password for verify the provisioner.
3 years ago
Mariano Cano 35e6cc275a Fix typos in comments. 3 years ago
Mariano Cano ac3c754a6d Use known CA and add tier and gcs bucket options. 3 years ago
Mariano Cano 529eb4bae9 Rename CAPool to CaPool. 3 years ago
Mariano Cano 072bd0dcf4 Add support for Google CAS v1 3 years ago
Mariano Cano d9f93ccfde Fix typo. 3 years ago
Mariano Cano edc7c4d90e Add support for password encrypted files 3 years ago
Mariano Cano a6115e29c2 Add initial implementation of StepCAS.
StepCAS allows to configure step-ca as an RA using another step-ca
as the main CA.
3 years ago
Miclain K Keffeler 7a1eb43bb1
Update options.go 3 years ago
Miclain Keffeler 7545b4a625 leverage intermediate_ca.crt for appending certs. 3 years ago
Mariano Cano 2b4b902975 Add initial support for `step ca init` with cloud cas.
Fixes smallstep/cli#363
4 years ago
Mariano Cano 9f21813dd6 Rename option. 4 years ago
Mariano Cano fa099f2ae2 Change method name. 4 years ago
Mariano Cano aad8f9e582 Pass issuer and signer to softCAS options.
Remove commented code and initialize CAS properly.
Minor fixes in CloudCAS.
4 years ago
Mariano Cano c8d9cb0a1d Complete cloudcas using CAS v1beta1. 4 years ago
Mariano Cano 1b1f73dec6 Early attempt to develop a CAS interface. 4 years ago