179 Commits (64f26c0f4019bf5ab548b711bc8455a3f508dfb5)

Author	SHA1	Message	Date
Mariano Cano	64f26c0f40	Enforce a duration for identity certificates.	5 years ago
Mariano Cano	fa416336a8	Add context to tests.	5 years ago
Mariano Cano	c49a9d5e33	Add context parameter to all SSH methods.	5 years ago
Mariano Cano	f868e07a76	Allow to use custom principals on cloud provisioners. ... Fixes #203	5 years ago
Mariano Cano	59fc8cdd2d	Fix typo in comments.	5 years ago
max furman	397a181d10	Add backdate validation to sshCertValidityValidator.	5 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	5 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	5 years ago
Mariano Cano	895d3054a3	Remove the use of custom x509 package. ... Upgrade cli dependency.	5 years ago
Mariano Cano	144acb9ee3	Remove debug statement.	5 years ago
Mariano Cano	06411d1715	Add tests of profileLimitDuration with backdate.	5 years ago
Mariano Cano	8297e5c717	Add tests for backdate and sshDefaultDuration	5 years ago
Mariano Cano	93b65bee7c	Add unit test for profileDefaultDuration.	5 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	5 years ago
Mariano Cano	5565d61bf3	Add fault tolerance against clock skew accross system on TLS certificates.	5 years ago
Mariano Cano	08eac1b00d	Make sure to define the KeyID from the token if available.	5 years ago
max furman	9caadbb341	Fix authority calling wrong revoke method	5 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	5 years ago
max furman	3d970b45c8	remove printfs	5 years ago
max furman	f74cd04a6a	Add WithGetIdentityFunc option and attr to authority ... * Add Identity type to provisioner	5 years ago
Mariano Cano	a86dc78b5d	Add missing comment.	5 years ago
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	5 years ago
Mariano Cano	d4627d1282	Make provisioner tests compile, they are still failing.	5 years ago
Mariano Cano	cf592fa0e1	Remove global check for number of k8sSA provisioners. ... This was causing a bug in the reload of the ca.	5 years ago
max furman	5788ac3f4f	sshpop token should not allow renew/rekey of user ssh certs	5 years ago
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	5 years ago
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	5 years ago
max furman	c04f1e1bd4	sshpop first pass	5 years ago
max furman	8f07ff6a39	Add kubernetes service account provisioner	5 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
Mariano Cano	59526d3225	Merge pull request #105 from smallstep/okta-support ... Address support on OIDC provisioners	5 years ago
Mariano Cano	39b41b5e83	Merge pull request #107 from smallstep/ssh-valid-after ... Truncate to seconds ValidAfter	5 years ago
Mariano Cano	d59a5b222f	Truncate to seconds to avoid rounding up times. ... It can cause that certs are not valid yet, if they are used right away.	5 years ago
max furman	fe7973c060	wip	5 years ago
Mariano Cano	adc1d54b0d	Define valid after as 1m before now. ... It avoids errors with immediate use of cert.	5 years ago
Mariano Cano	72f1a61f06	Increase coverage.	5 years ago
Mariano Cano	b7045f27a9	Increase coverage.	5 years ago
Mariano Cano	a16b2125bc	Fix tests.	5 years ago
Mariano Cano	6c4abfabbb	Make /.well-known/openid-configuration optional	5 years ago
Mariano Cano	3527ee6940	Add support for listenAddress parameter if OIDC provisioners. ... Fixes smallstep/cli#150	5 years ago
max furman	44e864030d	Remove debug logging	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago
max furman	d204469280	Add a few more validity checks to default ssh cert validator	5 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. ... Fixes #100	5 years ago
max furman	61d52a8510	Small fixes associated with PR review ... * additions and grammar edits to documentation * clarification of error msgs	5 years ago
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	5 years ago
max furman	ac234771c7	Remove unknown provisioner WARNning and leave TODO	5 years ago
max furman	ca8daf5f12	Update comment and warn	5 years ago
Mariano Cano	9200f11ed8	Skip unsupported provisioners.	5 years ago
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer ... * Fixes #94 * In the future this should be configurable by provisioner	5 years ago