c0525381eb
Merge branch 'master' into feat/vault
3 years ago
ab5197500c
fix: a certificat must excldue the root and you should use verified chained intermediate
3 years ago
c7c5c3c94e
Merge branch 'master' into herman/scep-macos-renewal-fixes
3 years ago
09a9b3e1c8
Upgrade go.step.sm/crypto
3 years ago
3b72d241e0
Add LinkedCA integration for improved SCEP provisioner
3 years ago
d957a57e24
fix: apply mariano suggestions and fixes
...
* use json.RawMessage to remote mapstructure in options
* use vault secretid structure to support multiple source aka string, file and env
* remove log prefix
* return raw cert on error on newline for cert and csr
* clean sans, commonName in createCertificate (bad copy/paste from StepCAS)
* verify authority fingerprint
* convert serial on revoke to bigint, bytes and vault dashed representation
3 years ago
16390694e1
feat(vault): adding hashicorp vault cas
3 years ago
01a76445ea
Upgrade go.step.sm/crypto
3 years ago
98044cf08d
Use a tagged version of linkedca
3 years ago
6a1d0cb9f8
Add linkedca conversions.
3 years ago
9ec0276887
Update certificate set with new api.
3 years ago
32390a2964
Add initial implementation of a nebula provisioner.
...
A nebula provisioner will generate a X509 or SSH certificate with
the identities in the nebula certificate embedded in the token.
The token is signed with the private key of the nebula certificate.
3 years ago
7fac8c96c3
Merge branch 'master' into max/context
3 years ago
196f6b45c9
bump cli-utils to 0.7.0
3 years ago
b5bf79b84e
bump nosql library
3 years ago
555431448c
bump version ofcli-utils
3 years ago
2c05f488f6
Remove support for Go 1.15
3 years ago
62a20c7db5
Upgrade cli-utils with latest version of promptui
3 years ago
9958e0645f
Replace promptui with apache-compatible fork.
...
Promptui depends on github.com/juju/ansiterm that is licensed under
LGPL. The fork replaces ansiterm.TabWriter with the one in the
standard library.
3 years ago
0927e0d22a
Upgrade go.step.sm/crypto dependency
...
The new version removes "env" and "expandenv" sprig functions.
3 years ago
e15b5faf7d
Merge branch 'master' into keyvault
3 years ago
d8720c3723
Update linkedca package.
3 years ago
48549bf317
Initialize windows terminal on all binaries.
3 years ago
6389100325
Add unit tests for azurekms.
3 years ago
392a18465f
Add initial implementation of Azure Key Vault KMS.
...
Fixes #462
3 years ago
ad82d8a250
Upgrade go.step.sm/crypto as long with go-jose.v2
...
There was a typo in the OKP template causing bad fingerprints for
Ed25519 keys.
See a10ff54e00Fixes #705
3 years ago
8df9f629b1
go mod tidy
3 years ago
73d0a11a20
Update github.com/micromdm/scep/v2
3 years ago
611859eec4
Update go.mozilla.org/pkcs7
...
This includes the fix as described in https://github.com/mozilla-services/pkcs7/pull/59 ,
which was the reason a fork of the library was used.
3 years ago
9e7a3cd897
Update go.step.sm/crypto
3 years ago
352acf8faa
Upgrade golang.org/x/crypto
3 years ago
2c5080aae0
go mod tidy
3 years ago
42fde8ba28
Merge branch 'master' into linkedca
3 years ago
2317bf183b
Nosql and badger bump
3 years ago
cc9bc9c84b
Bump Badger
3 years ago
f53f78974e
Badger bump to fix issue with caddy build
3 years ago
456ffd8806
Use linkedca v0.5.0
3 years ago
28e882c9b3
Add deployment type to export.
3 years ago
798b90c359
Move linkedca configuration to the main package.
3 years ago
de292fbed6
Use branch version of linkedca.
3 years ago
d0c1530f89
Remove replace of linkedca package.
3 years ago
17eef81c91
Remove linkerd replace.
3 years ago
a72eab915b
Use linkedca v0.1.0
3 years ago
f7e09af9df
Implement the login command.
...
The login commands creates a new certificate for the linked ca.
This certificate will be used to sync data with the linkedca
endpoint.
3 years ago
77fdfc9fa3
Merge branch 'master' into max/cert-mgr-crud
3 years ago
9fdef64709
Admin level API for provisioner mgmt v1
3 years ago
65dacc2795
Replace golint with revive
3 years ago
2a97389f1b
Upgrade dependencies.
3 years ago
072bd0dcf4
Add support for Google CAS v1
3 years ago
66a67ed691
Update to v2.0.0 of github.com/micromdm/scep
3 years ago
75cd3ab0ac
Change to a fixed fork of go.mozilla.org/pkcs7
...
Hopefully this will be a temporary change until
the fix is merged in the upstream module.
3 years ago
2a249d20de
Refactor initialization of SCEP authority
3 years ago
48c86716a0
Add rudimentary (and incomplete) support for SCEP
3 years ago
bc2bb53009
Merge branch 'master' into hs/scep
3 years ago
f84c8f846a
Upgrade x/crypto
...
Although this does not affects us the old version had the vulnerability
CVE-2020-29652
3 years ago
b205f50412
bump crypto to 0.8.3 and go mod tidy
3 years ago
c3d9cef497
Update to v2.0.0 of github.com/micromdm/scep
4 years ago
c5e4ea08b3
Merge branch 'master' into hs/scep
4 years ago
a526065d0c
Merge branch 'master' into hs/scep
4 years ago
561341a6f2
Update go.step.sm/crypto.
4 years ago
6861202762
go.sum update
4 years ago
efd5501aca
Merge branch 'master' into hs/scep
4 years ago
d74f1fa55e
Use cli-utils v0.2.0
4 years ago
a1a7e38a49
Add support for cli-utils with powershell support.
4 years ago
9df5f513e7
Change to a fixed fork of go.mozilla.org/pkcs7
...
Hopefully this will be a temporary change until
the fix is merged in the upstream module.
4 years ago
7948f65ac0
Merge branch 'master' into hs/scep
4 years ago
7ad90d10b3
Refactor initialization of SCEP authority
4 years ago
8b4bbd3d39
go mod tidy
4 years ago
9e43dc85d8
Merge branch 'master' into hs/scep-master
4 years ago
ffdd58ea3c
Add rudimentary (and incomplete) support for SCEP
4 years ago
f289d1ee1f
Update to crypto11 v1.2.4
...
This version now includes my changes to delete a certificate.
4 years ago
4fbf7569fa
Merge branch 'master' into pkcs11
4 years ago
1d47a7284d
Upgrade nosql with a version of badger compatible with 32bits
4 years ago
6c0cf99b24
Upgrade nosql with a 32-bit version of badger.
4 years ago
8dca652bc7
Add support for PKCS #11 KMS.
...
The implementation works with YubiHSM2. Unit tests are still pending.
Fixes #301
4 years ago
c61222de1d
Upgrade nosql version.
...
nosql has newer version of badgers v1 and v2.
4 years ago
71a8e87eec
Update go.sum with new version of go-piv.
4 years ago
86c947babc
Upgrade crypto and fix test.
4 years ago
d6ea8b13ab
Upgrade crypto.
...
Related to #435
4 years ago
1feb4fcb26
Merge branch 'glance--sshagentkms'
4 years ago
ccc403cf89
Fix comments, and return an error instead of fatal.
4 years ago
7d9997618f
Upgrade crypto to v0.7.1
...
Add basic constraints extensions if defined.
4 years ago
2c164f39cc
Fix rebase.
4 years ago
a01c3defc0
Complete CloudCAS tests.
...
Upgrade cloud.google.com/go
4 years ago
2611fc04d4
Add initial tests for CreateCertificateAuthority.
4 years ago
fe7db340b0
Update go.step.sm/crypto dependency.
4 years ago
5deca85b14
Add initial support for `step ca init` with cloud cas.
...
Fixes smallstep/cli#363
4 years ago
921de7e07f
Upgrade crypto to v0.7.1
...
Add basic constraints extensions if defined.
4 years ago
736a6fb64e
Fix rebase.
4 years ago
b275758018
Complete CloudCAS tests.
...
Upgrade cloud.google.com/go
4 years ago
b2ae112dd2
Add initial tests for CreateCertificateAuthority.
4 years ago
461735718d
Update go.step.sm/crypto dependency.
4 years ago
2b4b902975
Add initial support for `step ca init` with cloud cas.
...
Fixes smallstep/cli#363
4 years ago
b79701202b
Use cli-utils@v0.1.0
4 years ago
40d0596b71
Use smallstep/cli-utils instead of smallstep/cli
4 years ago
81a0df9e45
go mod tidy
4 years ago
3f4d041082
bump cli to master
4 years ago
647b9b4541
Merge pull request #367 from smallstep/cas
...
Support for CAS Interface and CloudCAS
4 years ago
4c8bf87dc1
Use new admin template for K8ssa and admin-OIDC provisioners.
...
This change replaces the .Insecure.CR template to one that sets
all the SANs, but uses key usages and extended key usages for
regular TLS certificates.
4 years ago
a332c40530
Merge branch 'master' into cas
4 years ago
Mariano Cano
Ahmet DEMIR
Herman Slatman
max furman
Mariano Cano