Commit Graph

227 Commits (821743f71e71888e936d3a96fd99f18c34a79412)

Author SHA1 Message Date
Mariano Cano 821743f71e Upgrade newrelic to v3 2 years ago
Aaron Bieber 135c481893 Update deps to bring in support for OpenBSD
OpenBSD support was added to the following deps:
 - github.com/go-piv/piv-go in https://github.com/go-piv/piv-go/pull/101
 - github.com/newrelic/go-agent in https://github.com/newrelic/go-agent/pull/455
 - github.com/miekg/pkcs11 in https://github.com/miekg/pkcs11/pull/140

With these deps bumped, tests all pass on OpenBSD amd64.
2 years ago
Mariano Cano 2adf8caac7 Fix Dependabot warning on an indirect dependency 2 years ago
Erik De Lamarter dec1067add
vault kubernetes auth 2 years ago
Herman Slatman d1ab1d5431
Merge branch 'master' into herman/update-crypto-0.16.2 2 years ago
Herman Slatman b75ce3acbd
Update to go.step.sm/crypto v0.16.2
This patch release of go.step.sm/crypto fixes an issue with
not all `Subject` names being available for usage in a template
as `ExtraNames`.
2 years ago
Herman Slatman 7030dbb7a1
Use github.com/smallstep/pkcs7 fork with patches applied 2 years ago
Herman Slatman ed231d29e2
Update to go.step.sm/linkedca@v0.16.1 2 years ago
Herman Slatman f0272dc717
Fix import replacement of linkedca 2 years ago
Herman Slatman 60d8b22d89
Change context retrievers to MustTFromContext 2 years ago
Herman Slatman ad2de16299
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano fe9c3cf753
Merge branch 'master' into ahmet2mir-feat/vault 2 years ago
Herman Slatman d6be9450be
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano 674dc3c844 Rename unreleased claim to allowRenewalAfterExpiry for consistency. 2 years ago
Mariano Cano 9134bad22c Run go mod tidy. 2 years ago
Mariano Cano 37b521ec6c
Merge branch 'master' into feat/vault 2 years ago
Herman Slatman 9797b3350e
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano d4013f0df6 Update linkedca 2 years ago
Herman Slatman 7df52dbb76
Add ACME EAB policy 2 years ago
Herman Slatman 235a2c9d04
Pin to specific version of go.step.sm/linkedca 2 years ago
Herman Slatman 5daa9fc0b1
Merge branch 'master' into herman/allow-deny 2 years ago
Mariano Cano f5bf46b950 Upgrade go.step.sm/crypto 2 years ago
Herman Slatman 2fbdf7d5b0
Merge branch 'master' into herman/allow-deny 2 years ago
Herman Slatman 1dbaa62740
Update cloud.google.com/go/kms 2 years ago
Herman Slatman dc23fd23bf
Merge branch 'master' into herman/allow-deny-next 2 years ago
Herman Slatman 6b620c8e9c
Improve protobuf unmarshaling error handling 2 years ago
Herman Slatman 81b0c6c37c
Add API implementation for authority and provisioner policy 2 years ago
Mariano Cano c903f00cd4 Rename claim to allowRenewAfterExpiry. 2 years ago
Mariano Cano 616490a9c6 Refactor renew after expiry token authorization
This changes adds a new authority method that authorizes the
renew after expiry tokens.
2 years ago
Mariano Cano 3fb5e57f12 Upgrade nosql package
The new version of the package allows filtering out database drivers
using Go tags.
2 years ago
Mariano Cano 6f46cdb432
Merge pull request #829 from vijayjt/new-azure-token-authz-options
Add subscription and object ID validation options to Azure provisioner
2 years ago
vijayjt 7a32c312bf Update linkedca dependency version 2 years ago
max furman 9d885e6914 bump nosql for postgres support 2 years ago
Mariano Cano c0525381eb Merge branch 'master' into feat/vault 2 years ago
Ahmet DEMIR ab5197500c
fix: a certificat must excldue the root and you should use verified chained intermediate 2 years ago
Herman Slatman c7c5c3c94e
Merge branch 'master' into herman/scep-macos-renewal-fixes 2 years ago
Mariano Cano 09a9b3e1c8 Upgrade go.step.sm/crypto 2 years ago
Herman Slatman 3b72d241e0
Add LinkedCA integration for improved SCEP provisioner 2 years ago
Ahmet DEMIR d957a57e24
fix: apply mariano suggestions and fixes
* use json.RawMessage to remote mapstructure in options
* use vault secretid structure to support multiple source aka string, file and env
* remove log prefix
* return raw cert on error on newline for cert and csr
* clean sans, commonName in createCertificate (bad copy/paste from StepCAS)
* verify authority fingerprint
* convert serial on revoke to bigint, bytes and vault dashed representation
2 years ago
Ahmet DEMIR 16390694e1
feat(vault): adding hashicorp vault cas 2 years ago
Mariano Cano 01a76445ea Upgrade go.step.sm/crypto 2 years ago
Mariano Cano 98044cf08d Use a tagged version of linkedca 2 years ago
Mariano Cano 6a1d0cb9f8 Add linkedca conversions. 2 years ago
Mariano Cano 9ec0276887 Update certificate set with new api. 2 years ago
Mariano Cano 32390a2964 Add initial implementation of a nebula provisioner.
A nebula provisioner will generate a X509 or SSH certificate with
the identities in the nebula certificate embedded in the token.
The token is signed with the private key of the nebula certificate.
2 years ago
max furman 7fac8c96c3 Merge branch 'master' into max/context 3 years ago
max furman 196f6b45c9 bump cli-utils to 0.7.0 3 years ago
max furman b5bf79b84e bump nosql library 3 years ago
max furman 555431448c bump version ofcli-utils 3 years ago
Herman Slatman 2c05f488f6
Remove support for Go 1.15 3 years ago