37 Commits (84ff17209340fa4203471c9985852c94774c18bd)

Author	SHA1	Message	Date
Mariano Cano	5565d61bf3	Add fault tolerance against clock skew accross system on TLS certificates.	4 years ago
Mariano Cano	f033422ffa	Allow no provisioners.	4 years ago
Mariano Cano	caa2b8dbb7	Add leeway in identity not before.	4 years ago
Mariano Cano	11c8639782	Add identity certificate in ssh response.	4 years ago
Mariano Cano	29be322b1c	Make audiences compatible with the old version.	4 years ago
Mariano Cano	cf592fa0e1	Remove global check for number of k8sSA provisioners. ... This was causing a bug in the reload of the ca.	4 years ago
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	4 years ago
Mariano Cano	c7e4cc96a4	Change default user duration to 16h.	4 years ago
Mariano Cano	b5bc249e1c	Add support for multiple ssh roots. ... Fixes #125	4 years ago
Mariano Cano	a35988ff08	Add initial support for ssh config. ... Related to smallstep/cli#170	4 years ago
Mariano Cano	57a529cc1a	Allow to enable the SSH CA per provisioner	5 years ago
Mariano Cano	e71072d389	Add experimental support for provisioning users.	5 years ago
Mariano Cano	004ea12212	Allow to use custom SSH user/host key files.	5 years ago
Mariano Cano	1c8f610ca9	Add initial implementation of an SSH CA using the JWK provisioner. ... Fixes smallstep/ca-component#187	5 years ago
max furman	ff20d9f5af	Fix composite literal uses unkeyed field	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	5 years ago
Mariano Cano	507fd01062	Remove provisioner intermediate type.	5 years ago
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	5 years ago
Mariano Cano	34ff388828	Use new types in config.	5 years ago
max furman	2c72ada610	remove dead code	6 years ago
max furman	6dc89f46d8	make Duration public	6 years ago
max furman	0615f7eb11	don't wrap time.Duration	6 years ago
max furman	4b742042ee	make Duration wrapper publicly accessible	6 years ago
Mariano Cano	6e620073f5	Rename method Empties to HasEmpties	6 years ago
Mariano Cano	98cc243a37	Add support for multiple roots.	6 years ago
Mariano Cano	722bcb7e7a	Add initial support for federated root certificates.	6 years ago
Mariano Cano	7e95fc0e45	Strip ports on audience check. ... Services might have proxies behind them so we cannot rely on them. Fixes #17	6 years ago
Mariano Cano	d6cad2a7f3	Add provisioner option to disable renewal. ... Fixes smallstep/ca-component#108	6 years ago
max furman	c74fcd57a7	ca-component -> certificates ... * fix redundant error check * add README	6 years ago
max furman	b457b15292	fix: omit empty claims in AuthConfig	6 years ago
max furman	d2872564b4	accidentally removed DisableIssuedAtCheck during merge	6 years ago
max furman	ee7db4006a	change sign + authorize authority api | add provisioners ... * authorize returns []interface{} - operators in this list can conform to any interface the user decides - our implementation has a combination of certificate claim validators and certificate template modifiers. * provisioners can set and enforce tls cert options	6 years ago
Mariano Cano	1c1ac1b3fb	Add disableIssuedAt check functionality ... Fixes #86	6 years ago
max furman	0b5f6487e1	change provisioners api ... * /provisioners -> /provisioners/jwk-set-by-issuer * /provisioners now returns a list of Provisioners	6 years ago
max furman	f1dc00c810	add Provisioner config validation	6 years ago
max furman	c284a2c0ab	first commit	6 years ago