29 Commits (7101fbb0ee939d24756695508845e78e41a1cb59)

Author	SHA1	Message	Date
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
Herman Slatman	d82e51b748	Update AllowWildcardNames configuration name	2 years ago
Herman Slatman	2b7f6931f3	Change Subject Common Name verification ... Subject Common Names can now also be configured to be allowed or denied, similar to SANs. When a Subject Common Name is not explicitly allowed or denied, its type will be determined and its value will be validated according to the constraints for that type of name (i.e. URI).	2 years ago
Herman Slatman	2a7620641f	Fix more PR comments	2 years ago
Herman Slatman	7f9034d22a	Add additional policy options	2 years ago
Herman Slatman	628d7448de	Don't return policy in provisioner JSON	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Herman Slatman	066bf32086	Fix part of PR comments	2 years ago
Herman Slatman	6440870a80	Clean up, improve test cases and coverage	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
max furman	da9f0b09af	Ignore `null` string for x509 and ssh templateData.	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	f437b86a7b	Merge branch 'cert-templates' into ssh-cert-templates	4 years ago
Mariano Cano	c8d225a763	Use x509util from go.step.sm/crypto/x509util	4 years ago
Mariano Cano	aa657cdb4b	Use SSHOptions inside provisioner options.	4 years ago
Mariano Cano	f75a12e10a	Add omitempty tag option.	4 years ago
Mariano Cano	3e80f41c19	Change provisioner options to have X509 as a field.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	02c4f9817d	Set full token payload instead of only the known properties.	4 years ago
Mariano Cano	0c8376a7f6	Fix existing unit tests.	4 years ago
Mariano Cano	71be83b25e	Add iss#sub uri in OIDC certificates. ... Admin will use the CR template if none is provided.	4 years ago
Mariano Cano	c58117b30d	Allow to use base64 when defining a template in the ca.json.	4 years ago
Mariano Cano	b2ca3176f5	Prepend insecure to user and CR variables names.	4 years ago
Mariano Cano	b11486f41f	Fix option method for template variable.	4 years ago
Mariano Cano	13b704aeed	Add template support for AWS provisioner.	4 years ago
Mariano Cano	e6fed5e0aa	Minor fixes and comments.	4 years ago
Mariano Cano	95c3a41bf0	Rename UserData to TemplateData and fix unmarshaling.	4 years ago
Mariano Cano	ef0ed0ff95	Integrate simple templates in the JWK provisioner.	4 years ago