Commit Graph

2139 Commits (494da3d668b3fc79dc6972e9a37c34650ba24eb6)
 

Author SHA1 Message Date
max furman 494da3d668 [action] goreleaser header packages 3 years ago
max furman 2cce795d8f [action] reference correct pub key in cosign example release header 3 years ago
max furman 8a99f7e458 [action] add header and footer to github release page 3 years ago
Mariano Cano ae42daf288
Merge pull request #700 from smallstep/cloudcas-signature-algorithm
Allow to kms signers to define the SignatureAlgorithm
3 years ago
Mariano Cano e4e799ca85 Fix typos in comment. 3 years ago
Mariano Cano 6e0d515a55 Add entry to changelog. 3 years ago
Mariano Cano 6d644880bd Allow to kms signers to define the SignatureAlgorithm
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.

On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
3 years ago
Mariano Cano 837db2e147
Merge pull request #699 from fofloinn/master
Converts group and subgroup to lowercase for comparison.
3 years ago
Mariano Cano 141c519171 Simplify check of principals in a case insensitive way
Fixes #679
3 years ago
Max feb2b45cf1
Merge pull request #698 from Slamdunk/patch-1
CHANGELOG: use ISO-8601 dates
3 years ago
Fearghal O Floinn 7a94b0c157 Converts group and subgroup to lowercase for comparison.
Fixes #679
3 years ago
Filippo Tessarotto 913bd0f24a
CHANGELOG: use ISO-8601 dates 3 years ago
Max efac0926df
Merge pull request #697 from smallstep/max/deb-checksum
Add deb checksum, add golang 1.17 for tests, build with golang 1.17
3 years ago
max furman 9ed84d71f6 [action] Add .releases to .gitignore 3 years ago
max furman 9641354675 [action] tmate debugger 3 years ago
max furman 9df5cc40b6 [action] remove duplicate debian step 3 years ago
max furman 23d3232d75 Changelog updates 3 years ago
max furman 8ba9013f5d gofmt linting errors 3 years ago
max furman 8bec473f8e fix gofmt linting errors 3 years ago
max furman e4739171b4 [action] Build deb during goreleaser action, add to checksum and ...
- add go 1.17 to test matrix
- build with go 1.17
3 years ago
max furman 19726aa61f update changelog 3 years ago
Max 8a2b2db608
Merge pull request #694 from smallstep/max/docker-cosign
[action] sign and push sigs for multi-arch docker containers w/ cosign
3 years ago
max furman e73612da07 [action] sign and push sigs for multi-arch docker containers w/ cosign 3 years ago
Kevin cb2c24fc88
Merge pull request #691 from smallstep/0.17.1-rn
update changelog
3 years ago
Kevin Chen 12153c96ae update changelog 3 years ago
max furman 96762226cd changelog update for 0.17.2 3 years ago
Max 72e365a7ac
Merge pull request #690 from smallstep/max/cosign
[action] use cosign to sign over goreleaser artifacts
3 years ago
Mariano Cano bcc6ed9a8c
Merge pull request #689 from smallstep/azure-oidc
Azure OIDC
3 years ago
max furman d6203eb251 [action] use cosign to sign over goreleaser artifacts 3 years ago
Mariano Cano f919535475 Add an extra way to distinguish Azure and Azure OIDC tokens.
We used to distinguish these tokens using the azp claim, but this
claim does not appear on new azure oidc tokens, at least on some
configurations.

This change will try to load by audience (client id) if the token
contains an email, required for OIDC.
3 years ago
Mariano Cano 097a918da7 Fix tests when we create re-use a token with a new authority. 3 years ago
Max 08115f584c
Merge pull request #687 from smallstep/max/golangci-bump
Bump golangci-lint to latest
3 years ago
max furman 6ec8a1f114 Bump golangci-lint to latest 3 years ago
Mariano Cano 9e7a3cd897 Update go.step.sm/crypto 3 years ago
Mariano Cano af41ef1ab8
Merge pull request #683 from smallstep/imds-versions
Initialize required IMDSVersions for GetIdentityToken
3 years ago
Mariano Cano 470b546d59
Merge pull request #557 from joejulian/http01-isv
use InsecureSkipVerify for validation
3 years ago
Mariano Cano 40e77f6e9a Initialize required variables on GetIdentityToken
Fixes smallstep/cli#465
3 years ago
Mariano Cano 352acf8faa Upgrade golang.org/x/crypto 3 years ago
Mariano Cano 8acce7b092
Merge pull request #682 from smallstep/helm-ssh
Fix ssh in helm chart values
3 years ago
Mariano Cano 8cb62b6d67 Fix ssh in helm chart values. 3 years ago
Mariano Cano c43d0362a4
Merge pull request #680 from smallstep/identity-cert-lifetime
Identity certificate lifetime
3 years ago
Mariano Cano 833d28cb6a Clone the certificate in case we need to look at it later. 3 years ago
Mariano Cano 9e57e4db2c
Merge pull request #633 from smallstep/linkedca
Linkedca
3 years ago
Mariano Cano 2c5080aae0 go mod tidy 3 years ago
Mariano Cano 42fde8ba28
Merge branch 'master' into linkedca 3 years ago
max furman 2317bf183b Nosql and badger bump 3 years ago
max furman cc9bc9c84b Bump Badger 3 years ago
Alan Christopher Thomas 21b2057ecd
Add Certificate Manager notice for the pragmatic folks 3 years ago
Mariano Cano 516b74f43a Add comment about unused code. 3 years ago
Mariano Cano ff25f4974f Fix comment. 3 years ago