283 Commits (7688ca18ac6530d93b2f7f164ce63b24320916e3)

Author	SHA1	Message	Date
max furman	2ae43ef2dc	[acme db interface] wip errors	4 years ago
max furman	16665c97f0	Allow empty SAN in CSR for validation ... ... - The default template will always use the SANs from the token. - If there are any SANs they must be validated against the token.	4 years ago
Mariano Cano	5017b7d21f	Recalculate token id instead of validating it.	4 years ago
Mariano Cano	86c947babc	Upgrade crypto and fix test.	4 years ago
Mariano Cano	0cf594a003	Validate payload ID. ... Related to #435	4 years ago
Mariano Cano	39b23c057d	Add all AWS certificates used to verify base64 signatures.	4 years ago
Mariano Cano	7d1686dc53	Add option to specify the AWS IID certificates to use. ... This changes adds a new option `iidRoots` that allows a user to define one or more certificates that will be used for AWS IID signature validation. Fixes #393	4 years ago
Mariano Cano	4c8bf87dc1	Use new admin template for K8ssa and admin-OIDC provisioners. ... This change replaces the .Insecure.CR template to one that sets all the SANs, but uses key usages and extended key usages for regular TLS certificates.	4 years ago
Mariano Cano	276e307a1d	Add extra tests for CustomSSHTemplateOptions	4 years ago
max furman	da9f0b09af	Ignore `null` string for x509 and ssh templateData.	4 years ago
Mariano Cano	81c6e01269	Fix unit test.	4 years ago
max furman	ce9af5c20f	Standardize k8ssa check on issuer name	4 years ago
Mariano Cano	8ee246edda	Upgrade go.step.sm to v0.4.0	4 years ago
Mariano Cano	35bd3ec383	Merge pull request #329 from smallstep/ssh-cert-templates ... SSH cert templates	4 years ago
Mariano Cano	b7269b6579	Fix comment.	4 years ago
Mariano Cano	c94a1c51be	Merge branch 'master' into ssh-cert-templates	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
max furman	46fc922afd	Remove unused code; fix usage wrong word; add gap time for unit test	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	aaaa7e9b4e	Merge branch 'master' into cert-templates	4 years ago
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	4 years ago
Mariano Cano	f437b86a7b	Merge branch 'cert-templates' into ssh-cert-templates	4 years ago
Mariano Cano	c8d225a763	Use x509util from go.step.sm/crypto/x509util	4 years ago
Mariano Cano	37f84e9bb3	Add delay in test.	4 years ago
Mariano Cano	8d89bbd62f	Remove unused code.	4 years ago
Mariano Cano	c4bbc81d9f	Fix authority tests.	4 years ago
Mariano Cano	413af88aad	Fix provisioning tests.	4 years ago
Mariano Cano	b66bdfabcd	Enforce an OIDC users to send all template variables.	4 years ago
Mariano Cano	9822305bb6	Use only the IID template on IID provisioners. ... Use always sshutil.DefaultIIDCertificate and require at least one principal on IID provisioners.	4 years ago
Mariano Cano	aa657cdb4b	Use SSHOptions inside provisioner options.	4 years ago
Mariano Cano	02379d494b	Add support for extensions and critical options on the identity ... function.	4 years ago
Mariano Cano	8ff8d90f8c	On JWK and X5C validate the key id on the request.	4 years ago
Mariano Cano	a78f7e8913	Add template support on k8ssa provisioner.	4 years ago
Mariano Cano	6c36ceb158	Add initial template support for iid provisisioners.	4 years ago
Mariano Cano	8e7bf96769	Fix error prefix.	4 years ago
Mariano Cano	e0dce54338	Add missing argument.	4 years ago
Mariano Cano	c1fc45c872	Simplify SSH modifiers with options. ... It also changes the behavior of the request options to modify only the validity of the certificate.	4 years ago
Mariano Cano	ad28f0f59a	Move variable where it is used.	4 years ago
Mariano Cano	715eb4eacc	Add initial support for ssh templates on OIDC.	4 years ago
Mariano Cano	c2dc76550c	Add ssh certificate template to X5C provisioner.	4 years ago
Mariano Cano	380a0d6daf	Add ssh certificate templates to JWK provisioner.	4 years ago
Mariano Cano	f75a12e10a	Add omitempty tag option.	4 years ago
Mariano Cano	570ede45e7	Do not enforce number of principals or extensions.	4 years ago
Mariano Cano	631f1612a1	Add TemplateData to SignSSHOptions.	4 years ago
Mariano Cano	c6746425a3	Add methods to initialize ssh templates in provisioners.	4 years ago
Mariano Cano	3e80f41c19	Change provisioner options to have X509 as a field.	4 years ago
David Cowden	86efe7aff0	aws: use http.NoBody instead of nil ... It's a little more descriptive.	4 years ago
David Cowden	2b121efc8f	aws: test constructor with empty IDMS string array	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
David Cowden	dc39eef721	aws: test badIDMS functional path ... The existing test only covers the constructor logic. Also test the live code path that is executed when a bad IDMS version is supplied.	4 years ago