Mariano Cano
392a18465f
Add initial implementation of Azure Key Vault KMS.
...
Fixes #462
3 years ago
Mariano Cano
ad82d8a250
Upgrade go.step.sm/crypto as long with go-jose.v2
...
There was a typo in the OKP template causing bad fingerprints for
Ed25519 keys.
See a10ff54e00
Fixes #705
3 years ago
Herman Slatman
73d0a11a20
Update github.com/micromdm/scep/v2
3 years ago
Herman Slatman
611859eec4
Update go.mozilla.org/pkcs7
...
This includes the fix as described in https://github.com/mozilla-services/pkcs7/pull/59 ,
which was the reason a fork of the library was used.
3 years ago
Mariano Cano
9e7a3cd897
Update go.step.sm/crypto
3 years ago
Mariano Cano
352acf8faa
Upgrade golang.org/x/crypto
3 years ago
Mariano Cano
42fde8ba28
Merge branch 'master' into linkedca
3 years ago
max furman
2317bf183b
Nosql and badger bump
3 years ago
max furman
cc9bc9c84b
Bump Badger
3 years ago
max furman
f53f78974e
Badger bump to fix issue with caddy build
3 years ago
Mariano Cano
456ffd8806
Use linkedca v0.5.0
3 years ago
Mariano Cano
28e882c9b3
Add deployment type to export.
3 years ago
Mariano Cano
798b90c359
Move linkedca configuration to the main package.
3 years ago
Mariano Cano
de292fbed6
Use branch version of linkedca.
3 years ago
Mariano Cano
dc1ec18b52
Create a way to export ca configurations.
3 years ago
Mariano Cano
d0c1530f89
Remove replace of linkedca package.
3 years ago
Mariano Cano
4ad82a2f76
Check linkedca for revocation.
3 years ago
Mariano Cano
71f8019243
Store x509 and ssh certificates on linkedca if enabled.
3 years ago
Mariano Cano
17eef81c91
Remove linkerd replace.
3 years ago
Mariano Cano
a72eab915b
Use linkedca v0.1.0
3 years ago
Mariano Cano
8fb5340dc9
Use a token at start time to configure linkedca.
...
Instead of using `step-ca login` we will use a new token provided
as a flag to configure and start linkedca. Certificates will be kept
in memory and refreshed automatically.
3 years ago
Mariano Cano
f7e09af9df
Implement the login command.
...
The login commands creates a new certificate for the linked ca.
This certificate will be used to sync data with the linkedca
endpoint.
3 years ago
max furman
77fdfc9fa3
Merge branch 'master' into max/cert-mgr-crud
3 years ago
max furman
9fdef64709
Admin level API for provisioner mgmt v1
3 years ago
Mariano Cano
65dacc2795
Replace golint with revive
3 years ago
Mariano Cano
2a97389f1b
Upgrade dependencies.
3 years ago
Mariano Cano
072bd0dcf4
Add support for Google CAS v1
3 years ago
Herman Slatman
66a67ed691
Update to v2.0.0 of github.com/micromdm/scep
3 years ago
Herman Slatman
75cd3ab0ac
Change to a fixed fork of go.mozilla.org/pkcs7
...
Hopefully this will be a temporary change until
the fix is merged in the upstream module.
3 years ago
Herman Slatman
2a249d20de
Refactor initialization of SCEP authority
3 years ago
Herman Slatman
48c86716a0
Add rudimentary (and incomplete) support for SCEP
3 years ago
Herman Slatman
bc2bb53009
Merge branch 'master' into hs/scep
3 years ago
Mariano Cano
f84c8f846a
Upgrade x/crypto
...
Although this does not affects us the old version had the vulnerability
CVE-2020-29652
3 years ago
max furman
b205f50412
bump crypto to 0.8.3 and go mod tidy
3 years ago
Herman Slatman
c3d9cef497
Update to v2.0.0 of github.com/micromdm/scep
4 years ago
Herman Slatman
c5e4ea08b3
Merge branch 'master' into hs/scep
4 years ago
Mariano Cano
561341a6f2
Update go.step.sm/crypto.
4 years ago
Herman Slatman
efd5501aca
Merge branch 'master' into hs/scep
4 years ago
Mariano Cano
d74f1fa55e
Use cli-utils v0.2.0
4 years ago
Mariano Cano
a1a7e38a49
Add support for cli-utils with powershell support.
4 years ago
Herman Slatman
9df5f513e7
Change to a fixed fork of go.mozilla.org/pkcs7
...
Hopefully this will be a temporary change until
the fix is merged in the upstream module.
4 years ago
Herman Slatman
7ad90d10b3
Refactor initialization of SCEP authority
4 years ago
Herman Slatman
9e43dc85d8
Merge branch 'master' into hs/scep-master
4 years ago
Mariano Cano
3eb24d7d01
Remove duplicated replace.
4 years ago
Herman Slatman
ffdd58ea3c
Add rudimentary (and incomplete) support for SCEP
4 years ago
Mariano Cano
f289d1ee1f
Update to crypto11 v1.2.4
...
This version now includes my changes to delete a certificate.
4 years ago
Mariano Cano
4fbf7569fa
Merge branch 'master' into pkcs11
4 years ago
Mariano Cano
1d47a7284d
Upgrade nosql with a version of badger compatible with 32bits
4 years ago
Mariano Cano
6c0cf99b24
Upgrade nosql with a 32-bit version of badger.
4 years ago
Mariano Cano
8dca652bc7
Add support for PKCS #11 KMS.
...
The implementation works with YubiHSM2. Unit tests are still pending.
Fixes #301
4 years ago
Mariano Cano
c61222de1d
Upgrade nosql version.
...
nosql has newer version of badgers v1 and v2.
4 years ago
Derek Gaffney
8416bd633d
Bump go-piv to v1.7.0 for x32 overflow fix
4 years ago
Mariano Cano
86c947babc
Upgrade crypto and fix test.
4 years ago
Mariano Cano
d6ea8b13ab
Upgrade crypto.
...
Related to #435
4 years ago
Mariano Cano
921de7e07f
Upgrade crypto to v0.7.1
...
Add basic constraints extensions if defined.
4 years ago
Mariano Cano
736a6fb64e
Fix rebase.
4 years ago
Mariano Cano
b275758018
Complete CloudCAS tests.
...
Upgrade cloud.google.com/go
4 years ago
Mariano Cano
b2ae112dd2
Add initial tests for CreateCertificateAuthority.
4 years ago
Mariano Cano
461735718d
Update go.step.sm/crypto dependency.
4 years ago
Mariano Cano
2b4b902975
Add initial support for `step ca init` with cloud cas.
...
Fixes smallstep/cli#363
4 years ago
Mariano Cano
b79701202b
Use cli-utils@v0.1.0
4 years ago
Mariano Cano
40d0596b71
Use smallstep/cli-utils instead of smallstep/cli
4 years ago
max furman
81a0df9e45
go mod tidy
4 years ago
max furman
bf45e6ff16
Bump cli to v0.15.3
4 years ago
max furman
3f4d041082
bump cli to master
4 years ago
Mariano Cano
647b9b4541
Merge pull request #367 from smallstep/cas
...
Support for CAS Interface and CloudCAS
4 years ago
Mariano Cano
4c8bf87dc1
Use new admin template for K8ssa and admin-OIDC provisioners.
...
This change replaces the .Insecure.CR template to one that sets
all the SANs, but uses key usages and extended key usages for
regular TLS certificates.
4 years ago
Mariano Cano
a332c40530
Merge branch 'master' into cas
4 years ago
Pierre Laden
179e793f1a
- provide PINpolicy always to piv-go to avoid trying to use attestation cert, which we might not have
...
- bump piv-go version to 1.6.0
4 years ago
Mariano Cano
c8d9cb0a1d
Complete cloudcas using CAS v1beta1.
4 years ago
Mariano Cano
1b1f73dec6
Early attempt to develop a CAS interface.
4 years ago
Mariano Cano
3ac0ef2eaa
Update crypto to v0.6.0
4 years ago
Mariano Cano
f3b65e54ac
Update go.step.sm to v0.5.0
...
Solves the problem of enforcing the signature algorithm. This
causes issues if the intermediate key is not an ECDSA key.
4 years ago
Mariano Cano
8ee246edda
Upgrade go.step.sm to v0.4.0
4 years ago
Mariano Cano
ef86bedb2c
Upgrade go.step.sm dependency to v0.3.0
4 years ago
Mariano Cano
c94a1c51be
Merge branch 'master' into ssh-cert-templates
4 years ago
Mariano Cano
ba918100d0
Use go.step.sm/crypto/jose
...
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago
Mariano Cano
03d642e59c
Update go.step.sm/crypto to v0.2.0
...
Fixes #302
4 years ago
max furman
cb594ed2e0
go mod tidy and golang 1.15.0 cleanup ...
...
- cs.NegotiatedProtocolIsMutual has been deprecated but we still build
in travis with 1.14 so for now we'll ignore this linting error
- string(int) was resolving to string of a single rune rather than
string of digits -> use fmt.Sprint
4 years ago
max furman
795648e5d5
bump cli to v0.15.0
4 years ago
Mariano Cano
32ba80f446
Use pemutil branch.
4 years ago
Mariano Cano
d30a95236d
Use always go.step.sm/crypto
4 years ago
Mariano Cano
aaaa7e9b4e
Merge branch 'master' into cert-templates
4 years ago
Mariano Cano
533ad0ca20
Use always go.step.sm/crypto/x509util
4 years ago
Mariano Cano
4943ae58d8
Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates.
4 years ago
Mariano Cano
e83e47a91e
Use sshutil and randutil from go.step.sm/crypto.
4 years ago
Mariano Cano
c8d225a763
Use x509util from go.step.sm/crypto/x509util
4 years ago
max furman
3f844c5e23
Update the way SubjectKeyId is calculated, and more ...
...
- swith lint to first in line for `make all`
- update tests to conform with new subjectkeyid
4 years ago
David Cowden
dc39eef721
aws: test badIDMS functional path
...
The existing test only covers the constructor logic. Also test the live
code path that is executed when a bad IDMS version is supplied.
4 years ago
Mariano Cano
978ad7e2b6
Fix merged tests.
4 years ago
Mariano Cano
0de15b0a42
Update cli dependency to master.
4 years ago
Mariano Cano
6736ddee69
Use smallstep/cli v0.14.6
4 years ago
max furman
e1fdd9300c
go mod tidy
4 years ago
max furman
f5da56e19f
Bump version of cli to v0.14.5.
4 years ago
max furman
b200e84967
Pull most recent cli and go mod tidy
4 years ago
Mariano Cano
c32abb76cd
Add initial implementation to support AWS KMS.
4 years ago
Mariano Cano
6868190fff
Add initial support for yubikey.
4 years ago
max furman
c1a84c1405
go mod tidy
4 years ago
max furman
1b6bf38b52
Bump cli to v0.14.3
4 years ago
max furman
30e38dc501
Bumpt the version of cli for a certificates RC.
5 years ago
Mariano Cano
df3b9f637e
Use a tagged version of nosql.
5 years ago
max furman
3be95a82d0
Update version of nosql.
5 years ago
max furman
0573c00bd3
Simultaneous support for Badger V1+V2 and ...
...
* valueLogLoadingMode config for low RAM badger environments
5 years ago
max furman
fc50523779
go mod tidy
5 years ago
max furman
4b8e2f5948
Tag v0.14.2
5 years ago
max furman
e03ce33cd9
go mod tidy and verify
5 years ago
max furman
17097eb9f0
Bump cli to v0.14.1 to break dependency cycle.
5 years ago
max furman
344e7b99fb
bump cli dependency
5 years ago
Mariano Cano
3480ed44c7
Upgrade github.com/x/crypto to fix a vulnerability in ssh.
...
* CVE-2020-9283
5 years ago
Mariano Cano
21bd339b86
Merge branch 'master' into kms
5 years ago
Mariano Cano
752bfeeccd
Update cli dependency.
5 years ago
Mariano Cano
cbf1053255
Merge branch 'master' into kms
5 years ago
max furman
c66b183783
Update cli dep
5 years ago
Mariano Cano
3fb42935b4
Update cli dependency
5 years ago
Mariano Cano
549291c2ca
Upgrade smallste/cli
5 years ago
Mariano Cano
895d3054a3
Remove the use of custom x509 package.
...
Upgrade cli dependency.
5 years ago
Mariano Cano
53334ce1e0
Update assert package.
5 years ago
Mariano Cano
e6cafb89b6
Update cli dependency.
5 years ago
max furman
ed7ef7229f
cli dep update
5 years ago
max furman
74f1c111a9
updating dependencies
5 years ago
max furman
af8b8584dd
Update cli dep
5 years ago
max furman
b9f6aacb0f
Move api errors to their own package and modify the typedef
5 years ago
Mariano Cano
79b408dcf7
Update dependencies.
5 years ago
Mariano Cano
3029addbf6
Use new version of nosql.
5 years ago
max furman
93320fd977
update cli dep
5 years ago
max furman
3ac388612a
Use x5cInsecure token for /ssh/check-host endpoint
5 years ago
Mariano Cano
e29892e9eb
Update cli dependency.
5 years ago
Mariano Cano
000885dea7
Move Option type to a new file.
5 years ago
max furman
c04f1e1bd4
sshpop first pass
5 years ago
Mariano Cano
8e794259eb
Update dependencies.
5 years ago
Mariano Cano
ec90c41de6
Use nosql version with go mod.
5 years ago
Mariano Cano
d59a07ad89
Upgrade cli version.
5 years ago
Mariano Cano
bceb12a169
Upgrade go-jose to 2.4.0.
5 years ago
Mariano Cano
6489c26d4c
Use github.com/Masterminds/sprig/v3
5 years ago
Mariano Cano
69a1b68283
Merge branch 'ssh' into kms
5 years ago
Mariano Cano
ec2046bba8
Add grpc dependency.
5 years ago
Mariano Cano
44eccc6bd8
Merge branch 'ssh' into kms
5 years ago
Mariano Cano
3ce267cdd6
Upgrade smallste/cli
5 years ago
Mariano Cano
085ae82163
Remove the use of custom x509 package.
...
Upgrade cli dependency.
5 years ago
Mariano Cano
995375013d
Update dependencies for kms support.
5 years ago
Mariano Cano
50717b3ffa
Update assert package.
5 years ago
Mariano Cano
1fa35491ea
Update cli dependency.
5 years ago
max furman
6200aeaad0
cli dep update
5 years ago
Mariano Cano
ba11f6acb7
Update dependencies.
5 years ago
Mariano Cano
d210082113
Use new version of nosql.
5 years ago
max furman
623be4ef09
update cli dep
5 years ago
max furman
1e17ec7d33
Use x5cInsecure token for /ssh/check-host endpoint
5 years ago
Mariano Cano
f99d1007bc
Update cli dependency.
5 years ago
Mariano Cano
43b663e0c3
Move Option type to a new file.
5 years ago
max furman
b5f15531d8
sshpop first pass
5 years ago
Mariano Cano
45d94fa4bd
Update dependencies.
5 years ago
Mariano Cano
ba9eb47818
Use nosql version with go mod.
5 years ago
Mariano Cano
af64bf8d96
Upgrade cli version.
5 years ago
Mariano Cano
e8ad06ef35
Upgrade go-jose to 2.4.0.
5 years ago
Mariano Cano
f47516a15d
Use github.com/Masterminds/sprig/v3
5 years ago
Mariano Cano
5cdb8f63b2
Add ignored files go.mod and go.sum
5 years ago