Commit Graph

164 Commits (3ac388612a5cc3b469a1444106aa869798ebfded)

Author SHA1 Message Date
Mariano Cano 08eac1b00d Make sure to define the KeyID from the token if available. 5 years ago
max furman 9caadbb341 Fix authority calling wrong revoke method 5 years ago
max furman 414a94b210 Instrument getIdentity func for OIDC ssh provisioner 5 years ago
max furman 3d970b45c8 remove printfs 5 years ago
max furman f74cd04a6a Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
5 years ago
Mariano Cano a86dc78b5d Add missing comment. 5 years ago
Mariano Cano 7db7b1ee4c Fix some provisioner tests 5 years ago
Mariano Cano d4627d1282 Make provisioner tests compile, they are still failing. 5 years ago
Mariano Cano cf592fa0e1 Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
5 years ago
max furman 5788ac3f4f sshpop token should not allow renew/rekey of user ssh certs 5 years ago
max furman 54e3cf7322 Add multiuse capability to k8ssa provisioners 5 years ago
max furman 29853ae016 sshpop provisioner + ssh renew | revoke | rekey first pass 5 years ago
max furman c04f1e1bd4 sshpop first pass 5 years ago
max furman 8f07ff6a39 Add kubernetes service account provisioner 5 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
Mariano Cano 59526d3225
Merge pull request #105 from smallstep/okta-support
Address support on OIDC provisioners
5 years ago
Mariano Cano 39b41b5e83
Merge pull request #107 from smallstep/ssh-valid-after
Truncate to seconds ValidAfter
5 years ago
Mariano Cano d59a5b222f Truncate to seconds to avoid rounding up times.
It can cause that certs are not valid yet, if they are used right away.
5 years ago
max furman fe7973c060 wip 5 years ago
Mariano Cano adc1d54b0d Define valid after as 1m before now.
It avoids errors with immediate use of cert.
5 years ago
Mariano Cano 72f1a61f06 Increase coverage. 5 years ago
Mariano Cano b7045f27a9 Increase coverage. 5 years ago
Mariano Cano a16b2125bc Fix tests. 5 years ago
Mariano Cano 6c4abfabbb Make /.well-known/openid-configuration optional 5 years ago
Mariano Cano 3527ee6940 Add support for listenAddress parameter if OIDC provisioners.
Fixes smallstep/cli#150
5 years ago
max furman 44e864030d Remove debug logging 5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
max furman d204469280 Add a few more validity checks to default ssh cert validator 5 years ago
Mariano Cano 396b4222aa Implement validator for ssh keys.
Fixes #100
5 years ago
max furman 61d52a8510 Small fixes associated with PR review
* additions and grammar edits to documentation
* clarification of error msgs
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman ac234771c7 Remove unknown provisioner WARNning and leave TODO 5 years ago
max furman ca8daf5f12 Update comment and warn 5 years ago
Mariano Cano 9200f11ed8 Skip unsupported provisioners. 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
max furman 635c59ed24 Accept emails SANs 5 years ago
Mariano Cano 34e1e3380a Fix lint errors. 5 years ago
Mariano Cano 57a529cc1a Allow to enable the SSH CA per provisioner 5 years ago
Mariano Cano e71072d389 Add experimental support for provisioning users. 5 years ago
Mariano Cano dc657565a7 Add SSH test for GCP. 5 years ago
Mariano Cano 7983aa8661 Add azure ssh tests. 5 years ago
Mariano Cano 2cac85a8c8 Add aws tests. 5 years ago
Mariano Cano f8a71899fd Add missing file. 5 years ago
Mariano Cano d231bfb764 Update jwk and oidc tests. 5 years ago
Mariano Cano a8f4ad1b8e Set default SSH options if no user options are given. 5 years ago
Mariano Cano c17375a10a Create convenient method to mock the timeduration. 5 years ago
Mariano Cano 4c1a11c1bc Add Unix method to TimeDuration. 5 years ago
Mariano Cano b0240772da Add tests for SSH certs with JWK provisioners. 5 years ago
Mariano Cano 780eeb5487 Remove debug print. 5 years ago
Mariano Cano ad91842d06 Add test for SanitizeSSHUserPrincipal 5 years ago