Commit Graph

258 Commits (499d698c75d165101f13e6bc108fb8e4d3d30644)

Author SHA1 Message Date
max furman a9ea292bd4 sshpop provisioner + ssh renew | revoke | rekey first pass 5 years ago
max furman b5f15531d8 sshpop first pass 5 years ago
max furman 64b69374fa Add SSH getHosts api 5 years ago
Mariano Cano cf2b9301c0 Change default user duration to 16h. 5 years ago
Mariano Cano e5da24f269 Fix list of user ssh public keys. 5 years ago
Mariano Cano 91ccc3802c Fix lint error. 5 years ago
Mariano Cano c2e20c7877 Add tests for ssh authority methods. 5 years ago
Mariano Cano 40052a1824 Add some ssh related tests. 5 years ago
Mariano Cano 38d735be6e Add support for federated keys. 5 years ago
Mariano Cano 3ee0dcec93 Add initial support for check-host endpoint. 5 years ago
Mariano Cano a50d59338e Rename SSH methods. 5 years ago
Mariano Cano e84489775b Add support for multiple ssh roots.
Fixes #125
5 years ago
Mariano Cano caa2174efc Add support for user data in templates. 5 years ago
Mariano Cano 7b8bb6deb4 Add initial support for ssh config.
Related to smallstep/cli#170
5 years ago
Mariano Cano c6a5772356 Fix tests. 5 years ago
Mariano Cano fe3149cf52 Add endpoint to return the SSH public keys.
Related to smallstep/ca-component#195
5 years ago
Mariano Cano dc6ffb7670 Add initial implementation of ssh config. 5 years ago
max furman 8f07ff6a39 Add kubernetes service account provisioner 5 years ago
Max 0a96062b76
Merge pull request #128 from jkralik/returnCertChain
Change api of functions Authority.Sign, Authority.Renew
5 years ago
max furman d368791606 Add x5c provisioner capabilities 5 years ago
Jozef Kralik bc6074f596 Change api of functions Authority.Sign, Authority.Renew
Returns certificate chain instead of 2 members.

Implements #126
5 years ago
Mariano Cano 59526d3225
Merge pull request #105 from smallstep/okta-support
Address support on OIDC provisioners
5 years ago
Mariano Cano 39b41b5e83
Merge pull request #107 from smallstep/ssh-valid-after
Truncate to seconds ValidAfter
5 years ago
Mariano Cano d59a5b222f Truncate to seconds to avoid rounding up times.
It can cause that certs are not valid yet, if they are used right away.
5 years ago
max furman fe7973c060 wip 5 years ago
Mariano Cano adc1d54b0d Define valid after as 1m before now.
It avoids errors with immediate use of cert.
5 years ago
Mariano Cano 72f1a61f06 Increase coverage. 5 years ago
Mariano Cano b7045f27a9 Increase coverage. 5 years ago
Mariano Cano a16b2125bc Fix tests. 5 years ago
Mariano Cano 6c4abfabbb Make /.well-known/openid-configuration optional 5 years ago
Mariano Cano 3527ee6940 Add support for listenAddress parameter if OIDC provisioners.
Fixes smallstep/cli#150
5 years ago
max furman 44e864030d Remove debug logging 5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
max furman d204469280 Add a few more validity checks to default ssh cert validator 5 years ago
Mariano Cano 396b4222aa Implement validator for ssh keys.
Fixes #100
5 years ago
max furman 61d52a8510 Small fixes associated with PR review
* additions and grammar edits to documentation
* clarification of error msgs
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman ac234771c7 Remove unknown provisioner WARNning and leave TODO 5 years ago
max furman ca8daf5f12 Update comment and warn 5 years ago
Mariano Cano 9200f11ed8 Skip unsupported provisioners. 5 years ago
Max 5dac2459c3
Merge pull request #96 from smallstep/max/2084
Enforce >= 2048 bit rsa keys in CSRs
5 years ago
max furman d3e74a0d2e switch from metalinter to golangci-lint 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
max furman 635c59ed24 Accept emails SANs 5 years ago
Mariano Cano db4baa0487 Add tests for authority sign ssh methods. 5 years ago
Mariano Cano 34e1e3380a Fix lint errors. 5 years ago
Mariano Cano 57a529cc1a Allow to enable the SSH CA per provisioner 5 years ago
Mariano Cano e71072d389 Add experimental support for provisioning users. 5 years ago
Mariano Cano 390aecca0b Check for error creating signers. 5 years ago
Mariano Cano 004ea12212 Allow to use custom SSH user/host key files. 5 years ago