Commit Graph

242 Commits (50c8b10a4f4804ab4556477c8f54624b87a2ce06)

Author SHA1 Message Date
Mariano Cano 50c8b10a4f Add support for user data in templates. 5 years ago
Mariano Cano eb210ccc70 Add initial support for ssh config.
Related to smallstep/cli#170
5 years ago
Mariano Cano 43771b341f Fix tests. 5 years ago
Mariano Cano 3d3598a1a9 Add endpoint to return the SSH public keys.
Related to smallstep/ca-component#195
5 years ago
Mariano Cano 0a61c4035b Add initial implementation of ssh config. 5 years ago
Mariano Cano 59526d3225
Merge pull request #105 from smallstep/okta-support
Address support on OIDC provisioners
5 years ago
Mariano Cano 39b41b5e83
Merge pull request #107 from smallstep/ssh-valid-after
Truncate to seconds ValidAfter
5 years ago
Mariano Cano d59a5b222f Truncate to seconds to avoid rounding up times.
It can cause that certs are not valid yet, if they are used right away.
5 years ago
max furman fe7973c060 wip 5 years ago
Mariano Cano adc1d54b0d Define valid after as 1m before now.
It avoids errors with immediate use of cert.
5 years ago
Mariano Cano 72f1a61f06 Increase coverage. 5 years ago
Mariano Cano b7045f27a9 Increase coverage. 5 years ago
Mariano Cano a16b2125bc Fix tests. 5 years ago
Mariano Cano 6c4abfabbb Make /.well-known/openid-configuration optional 5 years ago
Mariano Cano 3527ee6940 Add support for listenAddress parameter if OIDC provisioners.
Fixes smallstep/cli#150
5 years ago
max furman 44e864030d Remove debug logging 5 years ago
max furman e3826dd1c3 Add ACME CA capabilities 5 years ago
max furman d204469280 Add a few more validity checks to default ssh cert validator 5 years ago
Mariano Cano 396b4222aa Implement validator for ssh keys.
Fixes #100
5 years ago
max furman 61d52a8510 Small fixes associated with PR review
* additions and grammar edits to documentation
* clarification of error msgs
5 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman ac234771c7 Remove unknown provisioner WARNning and leave TODO 5 years ago
max furman ca8daf5f12 Update comment and warn 5 years ago
Mariano Cano 9200f11ed8 Skip unsupported provisioners. 5 years ago
Max 5dac2459c3
Merge pull request #96 from smallstep/max/2084
Enforce >= 2048 bit rsa keys in CSRs
5 years ago
max furman d3e74a0d2e switch from metalinter to golangci-lint 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
max furman 635c59ed24 Accept emails SANs 5 years ago
Mariano Cano db4baa0487 Add tests for authority sign ssh methods. 5 years ago
Mariano Cano 34e1e3380a Fix lint errors. 5 years ago
Mariano Cano 57a529cc1a Allow to enable the SSH CA per provisioner 5 years ago
Mariano Cano e71072d389 Add experimental support for provisioning users. 5 years ago
Mariano Cano 390aecca0b Check for error creating signers. 5 years ago
Mariano Cano 004ea12212 Allow to use custom SSH user/host key files. 5 years ago
Mariano Cano dc657565a7 Add SSH test for GCP. 5 years ago
Mariano Cano 7983aa8661 Add azure ssh tests. 5 years ago
Mariano Cano 2cac85a8c8 Add aws tests. 5 years ago
Mariano Cano f8a71899fd Add missing file. 5 years ago
Mariano Cano d231bfb764 Update jwk and oidc tests. 5 years ago
Mariano Cano a8f4ad1b8e Set default SSH options if no user options are given. 5 years ago
Mariano Cano c17375a10a Create convenient method to mock the timeduration. 5 years ago
Mariano Cano 4c1a11c1bc Add Unix method to TimeDuration. 5 years ago
Mariano Cano b0240772da Add tests for SSH certs with JWK provisioners. 5 years ago
Mariano Cano 780eeb5487 Remove debug print. 5 years ago
Mariano Cano ad91842d06 Add test for SanitizeSSHUserPrincipal 5 years ago
Mariano Cano f8cacc11b1 Fix tests. 5 years ago
Mariano Cano b827a59e96 Add SSH host certificate support for GCP provisioner. 5 years ago
Mariano Cano 221d323b68 Fix containsAllMembers 5 years ago
Mariano Cano 18a285e847 Change azure ssh key id. 5 years ago
Mariano Cano aef52e4334 Add support for SSH host certificates in azure. 5 years ago