Commit Graph

1428 Commits (38fa780775af5a660c0682076784a62a27ba6e2d)
 

Author SHA1 Message Date
Mariano Cano 38fa780775 Add interface to get root certificate from CAS.
This change makes easier the configuration of cloudCAS as it does
not require to configure the root or intermediate certificate
in the ca.json. CloudCAS will get the root certificate using
the configured certificateAuthority.
4 years ago
Mariano Cano fa099f2ae2 Change method name. 4 years ago
Mariano Cano a332c40530 Merge branch 'master' into cas 4 years ago
Mariano Cano 87bbcee239 Update go.sum 4 years ago
Mariano Cano 9573b47efb
Merge pull request #369 from acipia/master
avoid using yubikey attestation cert
4 years ago
max furman 3e874a1e72 Fix RHEL/CentOS install docs 4 years ago
Mariano Cano 884a6f5dd0 Skip test on CI. 4 years ago
Mariano Cano 91aa1e87f1 Do not use go 1.15 methods. 4 years ago
Mariano Cano 60515d92c5 Remove unnecessary properties. 4 years ago
Pierre Laden 692f7692a2 fix #2 indentation 4 years ago
Pierre Laden 290d5ee979 fix gofmt complain 4 years ago
Pierre Laden 179e793f1a - provide PINpolicy always to piv-go to avoid trying to use attestation cert, which we might not have
- bump piv-go version to 1.6.0
4 years ago
Mariano Cano f2dd5c48cc Fix linting errors. 4 years ago
Mariano Cano 8957e5e5a2 Add missing tests 4 years ago
Mariano Cano e146b3fe16 Add Unit tests for softcas. 4 years ago
Mariano Cano 1550a21f68 Fix unit tests. 4 years ago
Mariano Cano e17ce39e3a Add support for Revoke using CAS. 4 years ago
Mariano Cano 144ffe73dd Complete unit tests for Google CAS. 4 years ago
Mariano Cano f7d066fca8 Fix key usages. 4 years ago
Mariano Cano 01e6495f43 Add most of cloudcas unit tests and minor fixes. 4 years ago
Mariano Cano 8eff4e77a8 Comment request structs. 4 years ago
Mariano Cano bd8dd9da41 Do not read issuer and signer twice. 4 years ago
Mariano Cano aad8f9e582 Pass issuer and signer to softCAS options.
Remove commented code and initialize CAS properly.
Minor fixes in CloudCAS.
4 years ago
Mariano Cano c8d9cb0a1d Complete cloudcas using CAS v1beta1. 4 years ago
Max 946aedca92
Merge pull request #368 from gucchisk/error_message
Fix error message of bad request
4 years ago
gucchisk 4ad6be2680 Fix error message of bad request 4 years ago
Mariano Cano 1b1f73dec6 Early attempt to develop a CAS interface. 4 years ago
Carl Tashian b792f9144f
Merge pull request #364 from smallstep/docker-tweaks
Update Dockerfile.step-ca to match best practices
4 years ago
Mariano Cano 276e307a1d Add extra tests for CustomSSHTemplateOptions 4 years ago
Mariano Cano 3fc9124559
Merge pull request #366 from smallstep/max/ignore-null
Ignore `null` string for x509 and ssh templateData.
4 years ago
max furman da9f0b09af Ignore `null` string for x509 and ssh templateData. 4 years ago
Carl Tashian 3b31c6d2f5 Change `HEALTHCHECK` to use `step ca health`. Change shell `CMD exec` to skip redundant `/bin/sh -c` 4 years ago
Mariano Cano 81c6e01269 Fix unit test. 4 years ago
Mariano Cano 3ac0ef2eaa Update crypto to v0.6.0 4 years ago
Mariano Cano 50d09c183b Fix example and use ClientCAs.
Server trust client certificates using ClientCAs instead of RootCAs.
4 years ago
Carl Tashian 6ffc438ed1 Update Dockerfile.step-ca to match best practices
- See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/
- Added a .dockerignore file to reduce the build context size
- Added a HEALTHCHECK (curl the CA)
4 years ago
Max 54e43604ff
Merge pull request #363 from smallstep/max/k8ssa
Standardize k8ssa check on issuer name
4 years ago
Mariano Cano f3b65e54ac Update go.step.sm to v0.5.0
Solves the problem of enforcing the signature algorithm. This
causes issues if the intermediate key is not an ECDSA key.
4 years ago
max furman ce9af5c20f Standardize k8ssa check on issuer name 4 years ago
max furman 925edaede2 revert to skip_cleanup in travis 4 years ago
Mariano Cano 8ee246edda Upgrade go.step.sm to v0.4.0 4 years ago
Mariano Cano ce5e1b4934 Fix merge issue. 4 years ago
Mariano Cano 35bd3ec383
Merge pull request #329 from smallstep/ssh-cert-templates
SSH cert templates
4 years ago
Mariano Cano cef0475e71 Make clear what's a template/unsigned certificate. 4 years ago
Mariano Cano 4d375a06f5 Make clearer what's an unsigned cert. 4 years ago
Mariano Cano b7269b6579 Fix comment. 4 years ago
Mariano Cano 193d18ee21 Hide unnecessary error. 4 years ago
Mariano Cano ef86bedb2c Upgrade go.step.sm dependency to v0.3.0 4 years ago
Mariano Cano c94a1c51be Merge branch 'master' into ssh-cert-templates 4 years ago
Mariano Cano ba918100d0 Use go.step.sm/crypto/jose
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago