683 Commits (5c71e8a0ee61f1a7c15422a4a167297154d70671)

Author	SHA1	Message	Date
Mariano Cano	d7e590908e	Use sshutil for ssh renewing and rekeying.	4 years ago
Mariano Cano	b66d123572	Use sshutil for SSH certificate signing.	4 years ago
Mariano Cano	570ede45e7	Do not enforce number of principals or extensions.	4 years ago
Mariano Cano	631f1612a1	Add TemplateData to SignSSHOptions.	4 years ago
Mariano Cano	c6746425a3	Add methods to initialize ssh templates in provisioners.	4 years ago
Mariano Cano	3e80f41c19	Change provisioner options to have X509 as a field.	4 years ago
max furman	3f844c5e23	Update the way SubjectKeyId is calculated, and more ... ... - swith lint to first in line for `make all` - update tests to conform with new subjectkeyid	4 years ago
Mariano Cano	a7b65f1e1e	Add authority.Sign test with custom templates.	4 years ago
David Cowden	86efe7aff0	aws: use http.NoBody instead of nil ... It's a little more descriptive.	4 years ago
David Cowden	2b121efc8f	aws: test constructor with empty IDMS string array	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
David Cowden	dc39eef721	aws: test badIDMS functional path ... The existing test only covers the constructor logic. Also test the live code path that is executed when a bad IDMS version is supplied.	4 years ago
David Cowden	51f16ee2e0	aws: add tests covering metadata service versions ... * Add constructor tests for the aws provisioner. * Add a test to make sure the "v1" logic continues to work. By and large, v2 is the way to go. However, there are some instances of things that specifically request metadata service version 1 and so this adds minimal coverage to make sure we don't accidentally break the path should anyone need to depend on the former logic.	4 years ago
David Cowden	5efe5f3573	metadata-v2: pull in joshathysolate-master ... Taking of this PR to get it across the goal line.	4 years ago
Mariano Cano	978ad7e2b6	Fix merged tests.	4 years ago
Mariano Cano	5ac3f8a160	Add provisioner options tests.	4 years ago
Mariano Cano	02c4f9817d	Set full token payload instead of only the known properties.	4 years ago
Mariano Cano	0c8376a7f6	Fix existing unit tests.	4 years ago
Mariano Cano	d64cb99a22	Fix authority package tests.	4 years ago
Mariano Cano	ccc705cdcd	Use alias x509legacy to cli x509util in tls.go.	4 years ago
Mariano Cano	8f0dd811af	Allow to send errors from template to cli.	4 years ago
Mariano Cano	a7fe0104c4	Remove ACME restrictions and add proper template support.	4 years ago
Mariano Cano	cf2989a848	Add token and subject to K8sSA provisioner to be used in custom ... templates.	4 years ago
Mariano Cano	71be83b25e	Add iss#sub uri in OIDC certificates. ... Admin will use the CR template if none is provided.	4 years ago
Mariano Cano	c58117b30d	Allow to use base64 when defining a template in the ca.json.	4 years ago
Mariano Cano	b2ca3176f5	Prepend insecure to user and CR variables names.	4 years ago
Mariano Cano	b11486f41f	Fix option method for template variable.	4 years ago
Mariano Cano	04f5053a7a	Add template support for x5c.	4 years ago
Mariano Cano	eb8886d828	Add CR subject as iid default subject. ... Add a minimal subject with just a common name to iid provisioners in case we want to use it.	4 years ago
Mariano Cano	e60ea419cc	Add template support for gcp provisioner.	4 years ago
Mariano Cano	32646c49bf	Add templates support to Azure provisioner.	4 years ago
Mariano Cano	a44f0ca866	Add token payload.	4 years ago
Mariano Cano	00fd41a3d0	Add template support to K8sSA provisioners.	4 years ago
Mariano Cano	13b704aeed	Add template support for AWS provisioner.	4 years ago
Mariano Cano	49b9aa6e3f	Fix log string.	4 years ago
Mariano Cano	4795e371bd	Add back the support for ca.json DN template.	4 years ago
Mariano Cano	e6fed5e0aa	Minor fixes and comments.	4 years ago
Mariano Cano	81cd288104	Enable templates in acme provisioners.	4 years ago
Mariano Cano	ca2fb42d68	Move options to the provisioner.	4 years ago
Mariano Cano	206bc6757a	Add initial support for templates in the OIDC provisioner.	4 years ago
Mariano Cano	95c3a41bf0	Rename UserData to TemplateData and fix unmarshaling.	4 years ago
Mariano Cano	9f3acc254b	Set the token payload in the JWK provisioner.	4 years ago
Mariano Cano	ef0ed0ff95	Integrate simple templates in the JWK provisioner.	4 years ago
Mariano Cano	d1d9ae42d6	Use certificates x509util instead of cli for certificate signing.	4 years ago
Mariano Cano	9032018cf2	Convert x509util.WithOptions to new modifiers.	4 years ago
Carl Tashian	912e298043	Whitelist -> Allowlist per https://tools.ietf.org/id/draft-knodel-terminology-01.html	4 years ago
max furman	fd05f3249b	A few last fixes and tests added for rekey/renew ... ... - remove all `renewOrRekey` - explicitly test difference between renew and rekey (diff pub keys) - add back tests for renew	4 years ago
Max	ea9bc493b8	Merge pull request #307 from dharanikumar-s/master ... Add support for rekeying Fixes #292	4 years ago
dharanikumar-s	57fb0c80cf	Removed calculating SubjectKeyIdentifier on Rekey	4 years ago
dharanikumar-s	dfda497929	Renamed RenewOrRekey to Rekey	4 years ago
dharanikumar-s	fe73154a20	Corrected misspelling	4 years ago
dharanikumar-s	0c21f0ae9e	Added error check after GenerateDefaultKeyPair	4 years ago
dharanikumar-s	2479371c06	Added error check while marshalling public key	4 years ago
dharanikumar-s	b368a53149	Modified TestAuthority_Renew to TestAuthority_RenewOrRekey	4 years ago
dharanikumar-s	c8c3581e2f	SubjectKeyIdentifier extention is calculated from public key passed to this function instead of copying from old certificate	4 years ago
dharanikumar-s	8f504483ce	Added RenewOrRekey function based on @maraino suggestion. RenewOrReky is called from Renew.	4 years ago
dharanikumar-s	3813f57b1a	Add support for rekeying Fixes #292	4 years ago
Max	debce1cec2	Merge pull request #299 from smallstep/max/refactor ... Refactor	4 years ago
max furman	accf1be7e9	wip	4 years ago
max furman	71d87b4e61	wip	4 years ago
max furman	d25e7f64c2	wip	4 years ago
max furman	3636ba3228	wip	4 years ago
Mariano Cano	39650637d4	Merge pull request #297 from smallstep/no-bastion-bastion ... Do not return bastion for the configured bastion host.	4 years ago
Mariano Cano	fcfc4e9b2b	Fix ssh federated template variables.	4 years ago
max furman	1951669e13	wip	4 years ago
Mariano Cano	b0fdd0b2be	Do not return bastion for the configured bastion host. ... Fixes #296	4 years ago
Mariano Cano	ff32746312	Add test case for error executing template.	4 years ago
Mariano Cano	e3ae751b57	Use templates from authority instead of config.	4 years ago
Mariano Cano	237baa5169	Check for required variables in templates. ... Fixes smallstep/cli#232	4 years ago
Mariano Cano	6c844a0618	Load default templates if no templates are configured.	4 years ago
Max	2ebfc73f77	Merge pull request #290 from smallstep/max/profileLimit ... Update profileLimitDuration validator ...	4 years ago
max furman	7d5cf34ce5	Update profileLimitDuration validator ... ... - respect notBefore of the provisioner - modify/fix the reported errors	4 years ago
Mariano Cano	9832d1538b	Avoid nil pointer panic on step ssh config with no templates.	4 years ago
Mariano Cano	4ac51dd508	Merge pull request #274 from smallstep/oidc-raw-locals ... Allow dots and other symbols in principals for OIDC	4 years ago
Mariano Cano	3246a3e81f	Add missing test case.	4 years ago
max furman	6e69f99310	Always set nbf and naf for new ACME orders ... ... - Use the default value from the ACME provisioner if values are not defined in the request.	4 years ago
Mariano Cano	0b5fd156e8	Add a third principal on OIDC tokens with the raw local part of the email. ... For the email first.last@example.com it will create the principals ["firstlast", "first.last", "first.last@example.com"] Fixes #253, #254	4 years ago
Josh Hogle	e9b500daf2	Updated error message	4 years ago
Josh Hogle	044d00045a	Fixed missing initialization of IMDS versions	4 years ago
Josh Hogle	18ac5c07e2	Added support for specifying IMDS version preference	4 years ago
Josh Hogle	8c6a46887b	Added token URL fixes to tests	4 years ago
Josh Hogle	dd27901b12	Moved token URL and TTL to config values	4 years ago
Josh Hogle	bbbe4738c7	Added status code checking	4 years ago
Josh Hogle	af0f21d744	added support for IMDSv2 API	4 years ago
Mariano Cano	2bc69d3edd	Merge pull request #252 from smallstep/yubikey ... Yubikey support	4 years ago
Oleksandr Kovalchuk	4cd01b6868	Implement tests for forceCNOption modifier ... Implement unit tests which checks forceCNOption modifier (implemented in 322200b7db) is not broken and works correctly. Ref: https://github.com/smallstep/certificates/issues/259	4 years ago
Oleksandr Kovalchuk	893a53793a	Modify existing tests to accept forceCNOption modifier ... Modify existing tests to pass with changes introduced in commit 322200b7db. This is safe to do as tests assert exact length of modifiers, which has changed.	4 years ago
Oleksandr Kovalchuk	322200b7db	Implement modifier to set CommonName ... Implement modifier which sets CommonName to the certificate if CommonName is empty and forceCN is set in the config. Replace previous implementation introduced in 0218018cee with new modifier. Closes https://github.com/smallstep/certificates/issues/259 Ref: https://github.com/smallstep/certificates/pull/260#issuecomment-628961322	4 years ago
Oleksandr Kovalchuk	503c9f6101	Add config option to force CN ... Add configuration option `forceCN` to ACME provisioner. When this option is set to `true`, provisioner should generate Subject.CommonName for certificate if it was not present in the request. Default value of `false` should keep the existing behavior (do not modify CSR and certificate). Ref: https://github.com/smallstep/certificates/issues/259	4 years ago
Mariano Cano	c02fe77998	Close the key manager before shutting down.	4 years ago
Mariano Cano	4e544344f9	Initialize the required config fields on embedded authorities. ... This change is to make easier the use of embedded authorities. It can be difficult for third parties to know what fields are required. The new init methods will define the minimum usable configuration.	4 years ago
Mariano Cano	b5eab009b2	Rename method to NewEmbedded	4 years ago
Mariano Cano	824374bde0	Create a method to initialize the authority without a config file. ... When the CA is embedded in a third party product like Caddy, the config needed to use placeholders to be valid. This change adds a new method `NewEmbeddedAuthority` that allows to create an authority with the given options, the minimum options are a root and intermediate certificate, and the intermediate key. Fixes #218	4 years ago
Mariano Cano	4e9bff0986	Add support for OIDC multitoken tenants for azure.	4 years ago
Mariano Cano	8bc3b05232	Add new extra test case.	4 years ago
Mariano Cano	b0ff731d18	Add support for user provisioner certificates on OIDC provisioners. ... OIDC provisioners create an SSH certificate with two principals. This was avoiding the creationg of user provisioner certificates for those provisioners. Fixes smallstep/cli#268	4 years ago
Mariano Cano	a2dfa6faa8	Fix unit tests.	4 years ago
Mariano Cano	13507efb35	Remove the requirement for CSR to have a common name. ... Fixes #226	4 years ago
Mariano Cano	02ed784a9b	Do not enable by default ForwardAgent.	4 years ago
Mariano Cano	bfe1f4952d	Rename interface to CertificateEnforcer and add tests.	4 years ago
Mariano Cano	64f26c0f40	Enforce a duration for identity certificates.	4 years ago
Mariano Cano	fa416336a8	Add context to tests.	4 years ago
Mariano Cano	c49a9d5e33	Add context parameter to all SSH methods.	4 years ago
Mariano Cano	f868e07a76	Allow to use custom principals on cloud provisioners. ... Fixes #203	4 years ago
Mariano Cano	59fc8cdd2d	Fix typo in comments.	4 years ago
Mariano Cano	5c8c741fab	Fix linting issues.	4 years ago
Mariano Cano	05cc1437b7	Remove unnecessary parse of certificate.	4 years ago
Mariano Cano	2d4f369db2	Add options to set root and federated certificates using x509.Certificate	4 years ago
Mariano Cano	43bd8113aa	Remove unnecessary comments.	4 years ago
Mariano Cano	4eaeede77d	Fix unit tests.	4 years ago
Mariano Cano	21bd339b86	Merge branch 'master' into kms	4 years ago
Mariano Cano	7846696fbb	Fix return sign options on ssh sign.	4 years ago
max furman	d482ae2fb5	Remove test that is no longer implemented by the method.	4 years ago
max furman	397a181d10	Add backdate validation to sshCertValidityValidator.	4 years ago
max furman	df60fe3f0d	Remove all references to old apiError.	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	895d3054a3	Remove the use of custom x509 package. ... Upgrade cli dependency.	4 years ago
Mariano Cano	144acb9ee3	Remove debug statement.	4 years ago
Mariano Cano	06411d1715	Add tests of profileLimitDuration with backdate.	4 years ago
Mariano Cano	8297e5c717	Add tests for backdate and sshDefaultDuration	4 years ago
Mariano Cano	93b65bee7c	Add unit test for profileDefaultDuration.	4 years ago
Mariano Cano	74b5d7f984	Add backdate support on ssh rekey.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
Mariano Cano	5565d61bf3	Add fault tolerance against clock skew accross system on TLS certificates.	4 years ago
max furman	b9f6aacb0f	Move api errors to their own package and modify the typedef	4 years ago
Mariano Cano	f033422ffa	Allow no provisioners.	4 years ago
Mariano Cano	f4615d6258	Addapt test to api change.	4 years ago
max furman	3ac388612a	Use x5cInsecure token for /ssh/check-host endpoint	4 years ago
Mariano Cano	08eac1b00d	Make sure to define the KeyID from the token if available.	4 years ago
Mariano Cano	de3ba58455	Store renew certificate in the database.	4 years ago
Mariano Cano	caa2b8dbb7	Add leeway in identity not before.	4 years ago
max furman	9caadbb341	Fix authority calling wrong revoke method	4 years ago
Mariano Cano	f26103d150	Make test compilable.	4 years ago
Mariano Cano	557a45abfa	Update template tests.	4 years ago
max furman	656f35e522	Use an actual Hosts type when returning ssh hosts	4 years ago
Mariano Cano	03bb26fb91	Add missing version.go file.	4 years ago
Mariano Cano	c60641701b	Add version endpoint.	4 years ago
max furman	f92bb06b6c	change func def for getSSHHosts ... * continue to return all hosts if injection method not specified	4 years ago
Mariano Cano	11c8639782	Add identity certificate in ssh response.	4 years ago
max furman	d940ab7c20	Add getSSHHosts injection func	4 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	4 years ago
max furman	3d970b45c8	remove printfs	4 years ago
max furman	f74cd04a6a	Add WithGetIdentityFunc option and attr to authority ... * Add Identity type to provisioner	4 years ago
Mariano Cano	8bf3bf701e	Add support for /ssh/bastion method.	4 years ago
Mariano Cano	a6edcd0a3d	Make test to compile, they still fail.	4 years ago
Mariano Cano	000885dea7	Move Option type to a new file.	4 years ago
Mariano Cano	a86dc78b5d	Add missing comment.	4 years ago
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	4 years ago
Mariano Cano	29be322b1c	Make audiences compatible with the old version.	4 years ago
Mariano Cano	39ae5636fe	Complete AuthDB interface.	4 years ago
Mariano Cano	d4627d1282	Make provisioner tests compile, they are still failing.	4 years ago
Mariano Cano	a8a6d0ada3	Fix indentation.	4 years ago
Mariano Cano	cf592fa0e1	Remove global check for number of k8sSA provisioners. ... This was causing a bug in the reload of the ca.	4 years ago
max furman	5788ac3f4f	sshpop token should not allow renew/rekey of user ssh certs	4 years ago
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	4 years ago
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	4 years ago
max furman	c04f1e1bd4	sshpop first pass	4 years ago
max furman	5616386eed	Add SSH getHosts api	4 years ago
Mariano Cano	c7e4cc96a4	Change default user duration to 16h.	4 years ago
Mariano Cano	c729c5f925	Fix list of user ssh public keys.	4 years ago
Mariano Cano	ee22778264	Fix lint error.	4 years ago
Mariano Cano	8939caace4	Add tests for ssh authority methods.	4 years ago
Mariano Cano	4f06f3901e	Add some ssh related tests.	4 years ago
Mariano Cano	08850d5334	Add support for federated keys.	4 years ago
Mariano Cano	37f17213bb	Add initial support for check-host endpoint.	4 years ago
Mariano Cano	d08db4df23	Rename SSH methods.	4 years ago
Mariano Cano	b5bc249e1c	Add support for multiple ssh roots. ... Fixes #125	4 years ago
Mariano Cano	91130b9c3f	Add support for user data in templates.	4 years ago
Mariano Cano	a35988ff08	Add initial support for ssh config. ... Related to smallstep/cli#170	4 years ago
Mariano Cano	d4c47cf3e1	Fix tests.	4 years ago
Mariano Cano	961be1fbc7	Add endpoint to return the SSH public keys. ... Related to smallstep/ca-component#195	4 years ago
Mariano Cano	a197158426	Add initial implementation of ssh config.	4 years ago
Mariano Cano	69a1b68283	Merge branch 'ssh' into kms	4 years ago
max furman	92c48949d7	Remove test that is no longer implemented by the method.	4 years ago
max furman	1e5763031b	Add backdate validation to sshCertValidityValidator.	4 years ago
max furman	99e5bf4782	Remove all references to old apiError.	4 years ago
max furman	b265877050	Simplify statuscoder error generators.	4 years ago
max furman	c387b21808	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	5 years ago
Mariano Cano	9021951f1a	Fix types.	5 years ago
Mariano Cano	9641ab33b8	Use crypto.Signer instead of ssh.Signer in SSH options.	5 years ago
Mariano Cano	e98d7832b9	Add options to read the roots and federated roots from a bundle.	5 years ago
Mariano Cano	44eccc6bd8	Merge branch 'ssh' into kms	5 years ago
Mariano Cano	085ae82163	Remove the use of custom x509 package. ... Upgrade cli dependency.	5 years ago
Mariano Cano	c62526b39f	Add wip support for kms.	5 years ago
Mariano Cano	77af30bfa3	Remove debug statement.	5 years ago
Mariano Cano	f46dc03111	Add tests of profileLimitDuration with backdate.	5 years ago
Mariano Cano	165a91858e	Add tests for backdate and sshDefaultDuration	5 years ago
Mariano Cano	7e33aeb8d3	Add unit test for profileDefaultDuration.	5 years ago
Mariano Cano	f06db4099e	Add backdate support on ssh rekey.	5 years ago
Mariano Cano	935d0d4542	Add support for backdate to SSH certificates.	5 years ago
Mariano Cano	e67ccd9e3d	Add fault tolerance against clock skew accross system on TLS certificates.	5 years ago
max furman	f9ef5070f9	Move api errors to their own package and modify the typedef	5 years ago
Mariano Cano	6d6f496331	Allow no provisioners.	5 years ago
Mariano Cano	96b6989658	Addapt test to api change.	5 years ago
Max	1f42637ba1	Merge pull request #143 from smallstep/expired-cert ... Expired cert	5 years ago
max furman	1e17ec7d33	Use x5cInsecure token for /ssh/check-host endpoint	5 years ago
Mariano Cano	e841a86b48	Make sure to define the KeyID from the token if available.	5 years ago
Mariano Cano	8eeb82d0ce	Store renew certificate in the database.	5 years ago
Mariano Cano	50152391a3	Add leeway in identity not before.	5 years ago
max furman	55237d635c	Fix authority calling wrong revoke method	5 years ago
Mariano Cano	92d1db1616	Make test compilable.	5 years ago
Mariano Cano	5d35586402	Update template tests.	5 years ago
max furman	c2a3bcfab5	resolving merge	5 years ago
max furman	927784237d	Use an actual Hosts type when returning ssh hosts	5 years ago
Mariano Cano	7a06a60f88	Add missing version.go file.	5 years ago
Mariano Cano	2f18a26d4f	Add version endpoint.	5 years ago
max furman	35912cc906	change func def for getSSHHosts ... * continue to return all hosts if injection method not specified	5 years ago
Mariano Cano	3fda081e42	Add identity certificate in ssh response.	5 years ago
max furman	c407a9319b	Add getSSHHosts injection func	5 years ago
max furman	8b2105a8f9	Instrument getIdentity func for OIDC ssh provisioner	5 years ago
max furman	f25a2a43eb	remove printfs	5 years ago
max furman	6ca1df5081	Add WithGetIdentityFunc option and attr to authority ... * Add Identity type to provisioner	5 years ago
Mariano Cano	86a0558587	Add support for /ssh/bastion method.	5 years ago
Mariano Cano	8585b29711	Make test to compile, they still fail.	5 years ago
Mariano Cano	43b663e0c3	Move Option type to a new file.	5 years ago
Mariano Cano	be93c9e1f4	Add missing comment.	5 years ago
Mariano Cano	fcccb06696	Fix some provisioner tests	5 years ago
Mariano Cano	2cb6bd880b	Make audiences compatible with the old version.	5 years ago
Mariano Cano	efc2180c4a	Complete AuthDB interface.	5 years ago
Mariano Cano	a4fd76f1a8	Make provisioner tests compile, they are still failing.	5 years ago
Mariano Cano	0c3b9ebf45	Fix indentation.	5 years ago
Mariano Cano	69a7058ff0	Remove global check for number of k8sSA provisioners. ... This was causing a bug in the reload of the ca.	5 years ago
max furman	e679deddd7	sshpop token should not allow renew/rekey of user ssh certs	5 years ago
max furman	946094d2b7	Add multiuse capability to k8ssa provisioners	5 years ago
max furman	a9ea292bd4	sshpop provisioner + ssh renew | revoke | rekey first pass	5 years ago
max furman	b5f15531d8	sshpop first pass	5 years ago
max furman	64b69374fa	Add SSH getHosts api	5 years ago
Mariano Cano	cf2b9301c0	Change default user duration to 16h.	5 years ago
Mariano Cano	e5da24f269	Fix list of user ssh public keys.	5 years ago
Mariano Cano	91ccc3802c	Fix lint error.	5 years ago
Mariano Cano	c2e20c7877	Add tests for ssh authority methods.	5 years ago
Mariano Cano	40052a1824	Add some ssh related tests.	5 years ago
Mariano Cano	38d735be6e	Add support for federated keys.	5 years ago
Mariano Cano	3ee0dcec93	Add initial support for check-host endpoint.	5 years ago
Mariano Cano	a50d59338e	Rename SSH methods.	5 years ago
Mariano Cano	e84489775b	Add support for multiple ssh roots. ... Fixes #125	5 years ago
Mariano Cano	caa2174efc	Add support for user data in templates.	5 years ago
Mariano Cano	7b8bb6deb4	Add initial support for ssh config. ... Related to smallstep/cli#170	5 years ago
Mariano Cano	c6a5772356	Fix tests.	5 years ago
Mariano Cano	fe3149cf52	Add endpoint to return the SSH public keys. ... Related to smallstep/ca-component#195	5 years ago
Mariano Cano	dc6ffb7670	Add initial implementation of ssh config.	5 years ago
max furman	8f07ff6a39	Add kubernetes service account provisioner	5 years ago
Max	0a96062b76	Merge pull request #128 from jkralik/returnCertChain ... Change api of functions Authority.Sign, Authority.Renew	5 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
Jozef Kralik	bc6074f596	Change api of functions Authority.Sign, Authority.Renew ... Returns certificate chain instead of 2 members. Implements #126	5 years ago
Mariano Cano	59526d3225	Merge pull request #105 from smallstep/okta-support ... Address support on OIDC provisioners	5 years ago
Mariano Cano	39b41b5e83	Merge pull request #107 from smallstep/ssh-valid-after ... Truncate to seconds ValidAfter	5 years ago
Mariano Cano	d59a5b222f	Truncate to seconds to avoid rounding up times. ... It can cause that certs are not valid yet, if they are used right away.	5 years ago
max furman	fe7973c060	wip	5 years ago