Commit Graph

2436 Commits

Author SHA1 Message Date
Herman Slatman
60a1c34f05
Merge branch 'master' into hs/acme-eab 2021-10-30 15:44:30 +02:00
Herman Slatman
3151255a25
Merge branch 'master' into hs/acme-revocation 2021-10-30 15:41:29 +02:00
Mariano Cano
24a6900de2
Merge pull request #613 from gdbelvin/extractable
Extractable private keys and certs
2021-10-29 15:44:41 -07:00
Mariano Cano
91fb57e8aa Add entry to changelog. 2021-10-29 15:09:53 -07:00
Mariano Cano
7ec1424cb6 Fix help. 2021-10-29 14:47:57 -07:00
Mariano Cano
8366b7ddf1 Revert "Remove extractable from StoreCertificate."
This reverts commit 614ee79489.
2021-10-29 14:45:10 -07:00
Mariano Cano
614ee79489 Remove extractable from StoreCertificate. 2021-10-29 12:02:24 -07:00
Mariano Cano
fa11e82b67 Add tests with extractable property. 2021-10-28 19:45:19 -07:00
Mariano Cano
886b9a1d8d Store the certificate passed. 2021-10-28 18:16:16 -07:00
Mariano Cano
aa80bf9f07 Merge branch 'smallstep_master' into extractable 2021-10-28 18:11:42 -07:00
Mariano Cano
6be383da34 Refactor pkcs#11 extractable certs and keys. 2021-10-28 18:04:11 -07:00
Mariano Cano
d68090ebce
Merge pull request #729 from smallstep/funcmap
Use the common method for template functions
2021-10-28 15:34:43 -07:00
Mariano Cano
cb4a2a5f9a Use the same method to return the templating functions. 2021-10-27 16:11:47 -07:00
Mariano Cano
cf4944ea8e
Merge pull request #728 from smallstep/env
Remove "env" and "expandenv"
2021-10-27 14:04:49 -07:00
Mariano Cano
9958e0645f Replace promptui with apache-compatible fork.
Promptui depends on github.com/juju/ansiterm that is licensed under
LGPL. The fork replaces ansiterm.TabWriter with the one in the
standard library.
2021-10-27 12:38:16 -07:00
Mariano Cano
0f63d43a91 Remove sprig "env" and "expandenv" functions. 2021-10-27 11:51:37 -07:00
Mariano Cano
0927e0d22a Upgrade go.step.sm/crypto dependency
The new version removes "env" and "expandenv" sprig functions.
2021-10-27 11:48:29 -07:00
Mariano Cano
b7d4b48316
Merge pull request #724 from smallstep/sign-with-retry
Azure sign with retry
2021-10-26 18:01:40 -07:00
Mariano Cano
bef50bd7d9 Fix typo in variable name. 2021-10-26 17:57:59 -07:00
Mariano Cano
ead394fba7 Add strategy to retry the sign operation if the key is not yet ready 2021-10-20 18:09:50 -07:00
Carl Tashian
66a8158f26
Update README.md 2021-10-20 15:53:04 -07:00
max furman
da3c6af10f changelog update 2021-10-20 14:31:33 -07:00
max furman
5c71e8a0ee [action] replace goreleaser complicated build targets with 'targets' 2021-10-20 14:10:40 -07:00
max furman
12b32b0a90 Changelog update for v0.17.5 2021-10-20 13:41:26 -07:00
Carl Tashian
6f16938774
Update README.md
* Add SCEP support
* Fix ACME tutorial URLs
2021-10-19 16:53:41 -07:00
Carl Tashian
655d7f59fd install-step-ra.sh: Properly quote the RA DNS names in ca.json 2021-10-19 16:14:41 -07:00
Carl Tashian
482482e717 install-step-ra.sh: Don't try to create a JWK provisioner, because the web app's OAuth flow doesn't support OOB with STEP_CONSOLE=true. 2021-10-19 15:22:30 -07:00
Herman Slatman
4d726d6b4c
Add pagination to ACME EAB credentials endpoint 2021-10-17 22:42:36 +02:00
Herman Slatman
bc5f0e429b
Fix gocritic remark 2021-10-17 12:53:02 +02:00
Herman Slatman
d354d55e7f
Improve handling duplicate ACME EAB references 2021-10-16 14:44:56 +02:00
Herman Slatman
bcd1240a0e
Merge branch 'master' into hs/acme-eab 2021-10-16 13:32:13 +02:00
Mariano Cano
48efd94994
Merge pull request #723 from smallstep/keep-alive
Use Golang's default keepalive.
2021-10-15 14:31:52 -07:00
Mariano Cano
36b622bfc2 Use Golang's default keep-alive.
Since Go 1.13 a net.Listen keep-alive is enabled by default if
the protocol and OS supports it. The new one is 15s to match
the net.Dial default one. Previously http.Server ListenAndServe
and ListenAndServeTLS used to add a wrapper with 3m that we
replicated.

See https://github.com/golang/go/issues/31510
2021-10-15 14:12:43 -07:00
Mariano Cano
59d8d805d5
Merge pull request #722 from smallstep/keyvault-api
Allow to configure azurekms using the URI
2021-10-13 13:09:11 -07:00
Mariano Cano
edd475b81b Allow to configure azurekms using the URI
With an URI, azurekms can be configured with client credentials,
and it can define a default vault and protection level.
2021-10-12 18:24:58 -07:00
Max
710f76cb00
Merge pull request #721 from smallstep/max/simplify-releases
[action] Simplify goreleaser targets
2021-10-12 19:43:06 -04:00
max furman
9f8ffcf196 [action] remove windows_amd64, add freebsd_amd64 2021-10-12 16:40:24 -07:00
Mariano Cano
e3220232a0
Merge pull request #717 from smallstep/keyvault
Azure Key Vault KMS
2021-10-12 15:58:32 -07:00
max furman
02d601861b [action] Simply goreleaser targets 2021-10-12 15:44:04 -07:00
Mariano Cano
44f0d61354 Fix typo. 2021-10-12 15:41:41 -07:00
Mariano Cano
a2b03083c8 Fix gocritic warnings. 2021-10-12 15:28:08 -07:00
Mariano Cano
2aee71b4c0 Fix typo. 2021-10-12 15:18:17 -07:00
Mariano Cano
e15b5faf7d Merge branch 'master' into keyvault 2021-10-12 15:15:35 -07:00
Mariano Cano
5d0bd7d155 Fix grammar in comments. 2021-10-12 15:14:01 -07:00
Herman Slatman
dd4b4b0435
Fix remaining gocritic remarks 2021-10-11 23:34:23 +02:00
Herman Slatman
a4660f73fa
Fix some of the gocritic remarks 2021-10-11 23:10:16 +02:00
Herman Slatman
94f8e58bea
Update go.step.sm/linkedca to v0.8.0 2021-10-11 23:03:30 +02:00
Herman Slatman
e0b495e4c8
Merge branch 'master' into hs/acme-eab 2021-10-09 01:06:49 +02:00
Herman Slatman
c26041f835
Add ACME EAB nosql tests 2021-10-09 01:02:00 +02:00
Mariano Cano
781d5fb6e8 Fix creation of ssh certificates on step ca init. 2021-10-08 14:25:24 -07:00