a9359522e6
Add provisioner and super admin subject output to `ca init`
...
When initializing a CA with `--remote-management`, it wasn't made
clear that the default JWK provisioner is used when authenticating
for administration purposes and that a default `step` user is
created to login with. This commit adds some additional information
to the CLI output on completion of `ca init`.
2 years ago
e90fe4bfa0
Update CHANGELOG.md with provisioner migration
2 years ago
9d04e7d1dc
Remove period in log output
2 years ago
54c560f620
Improve configuration file initialization log output
2 years ago
fd38dd34f9
Fix PR comments
2 years ago
49718f1bbb
Fix some comments
2 years ago
70da534893
Merge branch 'master' into herman/remote-management-helm
2 years ago
398213af51
Merge pull request #1123 from smallstep/renew-raw-subject
...
Use RawSubject on renew and rekey
2 years ago
caf0628b8c
Merge pull request #1122 from smallstep/fix-1114
...
Split build and download in Dockerfiles
2 years ago
aefdfc7be7
Use RawSubject on renew and rekey
...
Renew was not replicating exactly the subject because extra names
gets decoded into pkix.Name.Names, the non-default ones should be
added to pkix.Name.ExtraNames. Instead of doing that, this commit
sets the RawSubject that will also keep the order.
Fixes #1106
2 years ago
18555a3cb2
Split build and download in Dockerfiles
...
On systems with low resources the command `go mod download` can fail.
This causes long builds of the docker images. This change adds a new
layer in the docker build splitting the build and download in two
steps.
Fixes #1114
2 years ago
53f2ecdad9
Merge pull request #1121 from smallstep/fix-1115
...
Use sh instead of bash in .version.sh script
2 years ago
d07c9accea
Use sh instead of bash in .version.sh script
...
Fixes #1115
2 years ago
7b45968198
Merge pull request #1119 from smallstep/max/common-triage
2 years ago
91775f6d67
[action] move oss triage wofkow to common workflows
2 years ago
361e2b2907
Merge pull request #1116 from smallstep/max/docs-revocation-link
...
Update revocation docs link
2 years ago
c103458ee9
Merge pull request #1110 from smallstep/dependabot/go_modules/google.golang.org/api-0.99.0
...
Bump google.golang.org/api from 0.98.0 to 0.99.0
2 years ago
e436c36f8b
Update revocation docs link
2 years ago
b83f268b4d
Bump google.golang.org/api from 0.98.0 to 0.99.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.98.0 to 0.99.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.98.0...v0.99.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
f410ef6628
Merge pull request #1112 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.6.0
...
Bump github.com/googleapis/gax-go/v2 from 2.5.1 to 2.6.0
2 years ago
c3f6dcf7e7
Bump github.com/googleapis/gax-go/v2 from 2.5.1 to 2.6.0
...
Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go ) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/googleapis/gax-go/releases )
- [Commits](https://github.com/googleapis/gax-go/compare/v2.5.1...v2.6.0 )
---
updated-dependencies:
- dependency-name: github.com/googleapis/gax-go/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
f7d153efa7
Merge pull request #1109 from smallstep/herman/remove-acme-revoke-authorization-todo
...
Remove TODO and clarify ACME revoke authorization method docs
2 years ago
70828b882f
Merge pull request #1111 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.8.1
...
Bump github.com/hashicorp/vault/api from 1.8.0 to 1.8.1
2 years ago
a7db13d47b
Merge pull request #1113 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.50.1
...
Bump google.golang.org/grpc from 1.50.0 to 1.50.1
2 years ago
9ee11fd850
Bump google.golang.org/grpc from 1.50.0 to 1.50.1
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.50.0 to 1.50.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.50.0...v1.50.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
3676c59599
Bump github.com/hashicorp/vault/api from 1.8.0 to 1.8.1
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.8.0...v1.8.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
cbc0864370
Remove TODO and clarify ACME revoke authorization method docs
2 years ago
d981b9e0dc
Add `--admin-subject` flag to `ca init`
...
The first super admin subject can now be provided through the
`--admin-subject` flag when initializing a CA.
It's not yet possible to configure the subject of the first
super admin when provisioners are migrated from `ca.json` to the
database. This effectively limits usage of the flag to scenarios
in which the provisioners are written to the database immediately,
so when `--remote-management` is enabled. It currently also doesn't
work with Helm deployments, because there's no mechanism yet to
pass this type of option to the Helm chart.
This commit partially addresses https://github.com/smallstep/cli/issues/697
2 years ago
57001168a5
Add default `SSHPOP` provisioner to Helm template output
2 years ago
c423e2f664
Improve Helm test data to be more realistic
2 years ago
459bfc4c4f
Add gibberish test key bytes to Helm tests
2 years ago
3262ffd43b
Add X.509 intermedaite and root certificates to Helm tests
2 years ago
1a5523f5c0
Add default JWK to the Helm tests
2 years ago
da5d2b405c
Merge branch 'master' into herman/remote-management-helm
2 years ago
65b5a636df
Merge pull request #1104 from smallstep/max/err-assert
...
Fix err assert linter warnings - upgrade outdated package
2 years ago
7203739369
Fix err assert linter warnings - upgrade outdated package
2 years ago
6516384160
Trigger CI
2 years ago
e0994bed9d
Merge pull request #1102 from smallstep/yubikey-no-ca
...
Add test simulating YubiKey v5.2.4
2 years ago
a7e597450a
Update acme/challenge_test.go
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
2 years ago
317efa4568
Add some TODOs for improvingin PKI initialization maintainability
2 years ago
8616d3160f
Add tests for writing the Helm template
2 years ago
674206320c
Write updated CA configuration after migrating provisioners
2 years ago
b5837f20c9
Merge branch 'master' into herman/remote-management-helm
2 years ago
c9ee4a9f9d
Disable initialization log output if started with `--quiet`
2 years ago
7a78c76199
Add test simulating YubiKey v5.2.4
...
There are YubiKeys v5.2.4 where the attestation intermediate (f9)
does not have a basic constraint extension, so that certificate
is not marked as a CA. The test and CA in this commit imitates
that use case. Currently the test case returns an error as we
don't support it. But if we change the verification to support
this use case, the test should change accordingly.
2 years ago
b142fc70f7
Merge pull request #1099 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.50.0
...
Bump google.golang.org/grpc from 1.49.0 to 1.50.0
2 years ago
32edc54946
Merge pull request #1100 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.9.0
...
Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
2 years ago
8598ff6a1c
Merge pull request #1101 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.21.0
...
Bump go.step.sm/crypto from 0.20.0 to 0.21.0
2 years ago
b27d36d556
Bump go.step.sm/crypto from 0.20.0 to 0.21.0
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.20.0 to 0.21.0.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.20.0...v0.21.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
2522efe27a
Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
...
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus ) from 1.8.1 to 1.9.0.
- [Release notes](https://github.com/sirupsen/logrus/releases )
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sirupsen/logrus/compare/v1.8.1...v1.9.0 )
---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 years ago
Herman Slatman
Mariano Cano
Mariano Cano
Max
dependabot[bot]
Herman Slatman