55 Commits (6e1f8dd7aba9f76ebcc925606f5961fb63f5fca2)

Author	SHA1	Message	Date
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Herman Slatman	88c7b63c9d	Split SSH user and cert policy configuration and execution	2 years ago
Herman Slatman	512b8d6730	Refactor instantiation of policy engines ... Instead of using the `base` struct, the x509 and SSH policy engines are now added to each provisioner directly.	2 years ago
Herman Slatman	066bf32086	Fix part of PR comments	2 years ago
Herman Slatman	1e808b61e5	Merge logic for X509 and SSH policy	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago
Mariano Cano	e0fee84694	Add comment about public key validator.	3 years ago
Mariano Cano	c3f98fd04d	Change some bad requests to forbidded. ... Change in the sign options bad requests to forbidded if is the provisioner the one adding a restriction, e.g. list of dns names, validity, ...	3 years ago
Mariano Cano	a33709ce8d	Fix sign ssh options tests.	3 years ago
Mariano Cano	1da7ea6646	Return always http errors in sign ssh options.	3 years ago
Mariano Cano	b6ebd118fc	Update temporal solution for sending message to users	3 years ago
Mariano Cano	668d3ea6c7	Modify errs.Wrap() with bad request to send messages to users.	3 years ago
Mariano Cano	1aadd63cef	Use always badRequest on duration errors.	3 years ago
Mariano Cano	41fec1577d	Report duration errors directly to the cli.	3 years ago
Mariano Cano	141c519171	Simplify check of principals in a case insensitive way ... Fixes #679	3 years ago
Fearghal O Floinn	7a94b0c157	Converts group and subgroup to lowercase for comparison. ... Fixes #679	3 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	8d89bbd62f	Remove unused code.	4 years ago
Mariano Cano	c4bbc81d9f	Fix authority tests.	4 years ago
Mariano Cano	413af88aad	Fix provisioning tests.	4 years ago
Mariano Cano	9822305bb6	Use only the IID template on IID provisioners. ... Use always sshutil.DefaultIIDCertificate and require at least one principal on IID provisioners.	4 years ago
Mariano Cano	a78f7e8913	Add template support on k8ssa provisioner.	4 years ago
Mariano Cano	e0dce54338	Add missing argument.	4 years ago
Mariano Cano	c1fc45c872	Simplify SSH modifiers with options. ... It also changes the behavior of the request options to modify only the validity of the certificate.	4 years ago
Mariano Cano	570ede45e7	Do not enforce number of principals or extensions.	4 years ago
Mariano Cano	631f1612a1	Add TemplateData to SignSSHOptions.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
max furman	397a181d10	Add backdate validation to sshCertValidityValidator.	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	144acb9ee3	Remove debug statement.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	4 years ago
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	4 years ago
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
Mariano Cano	d59a5b222f	Truncate to seconds to avoid rounding up times. ... It can cause that certs are not valid yet, if they are used right away.	5 years ago
Mariano Cano	adc1d54b0d	Define valid after as 1m before now. ... It avoids errors with immediate use of cert.	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago
max furman	d204469280	Add a few more validity checks to default ssh cert validator	5 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. ... Fixes #100	5 years ago
max furman	61d52a8510	Small fixes associated with PR review ... * additions and grammar edits to documentation * clarification of error msgs	5 years ago
Mariano Cano	34e1e3380a	Fix lint errors.	5 years ago
Mariano Cano	e71072d389	Add experimental support for provisioning users.	5 years ago
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	5 years ago
Mariano Cano	780eeb5487	Remove debug print.	5 years ago
Mariano Cano	221d323b68	Fix containsAllMembers	5 years ago
Mariano Cano	7583f1c739	Do not require all principals, allow subgroups.	5 years ago