Commit Graph

399 Commits (aaf71ce66a7f52c87ca4c4e1cd530a0e66168eb2)

Author SHA1 Message Date
Mariano Cano 557a45abfa Update template tests. 5 years ago
max furman 656f35e522 Use an actual Hosts type when returning ssh hosts 5 years ago
Mariano Cano 03bb26fb91 Add missing version.go file. 5 years ago
Mariano Cano c60641701b Add version endpoint. 5 years ago
max furman f92bb06b6c change func def for getSSHHosts
* continue to return all hosts if injection method not specified
5 years ago
Mariano Cano 11c8639782 Add identity certificate in ssh response. 5 years ago
max furman d940ab7c20 Add getSSHHosts injection func 5 years ago
max furman 414a94b210 Instrument getIdentity func for OIDC ssh provisioner 5 years ago
max furman 3d970b45c8 remove printfs 5 years ago
max furman f74cd04a6a Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
5 years ago
Mariano Cano 8bf3bf701e Add support for /ssh/bastion method. 5 years ago
Mariano Cano a6edcd0a3d Make test to compile, they still fail. 5 years ago
Mariano Cano 000885dea7 Move Option type to a new file. 5 years ago
Mariano Cano a86dc78b5d Add missing comment. 5 years ago
Mariano Cano 7db7b1ee4c Fix some provisioner tests 5 years ago
Mariano Cano 29be322b1c Make audiences compatible with the old version. 5 years ago
Mariano Cano 39ae5636fe Complete AuthDB interface. 5 years ago
Mariano Cano d4627d1282 Make provisioner tests compile, they are still failing. 5 years ago
Mariano Cano a8a6d0ada3 Fix indentation. 5 years ago
Mariano Cano cf592fa0e1 Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
5 years ago
max furman 5788ac3f4f sshpop token should not allow renew/rekey of user ssh certs 5 years ago
max furman 54e3cf7322 Add multiuse capability to k8ssa provisioners 5 years ago
max furman 29853ae016 sshpop provisioner + ssh renew | revoke | rekey first pass 5 years ago
max furman c04f1e1bd4 sshpop first pass 5 years ago
max furman 5616386eed Add SSH getHosts api 5 years ago
Mariano Cano c7e4cc96a4 Change default user duration to 16h. 5 years ago
Mariano Cano c729c5f925 Fix list of user ssh public keys. 5 years ago
Mariano Cano ee22778264 Fix lint error. 5 years ago
Mariano Cano 8939caace4 Add tests for ssh authority methods. 5 years ago
Mariano Cano 4f06f3901e Add some ssh related tests. 5 years ago
Mariano Cano 08850d5334 Add support for federated keys. 5 years ago
Mariano Cano 37f17213bb Add initial support for check-host endpoint. 5 years ago
Mariano Cano d08db4df23 Rename SSH methods. 5 years ago
Mariano Cano b5bc249e1c Add support for multiple ssh roots.
Fixes #125
5 years ago
Mariano Cano 91130b9c3f Add support for user data in templates. 5 years ago
Mariano Cano a35988ff08 Add initial support for ssh config.
Related to smallstep/cli#170
5 years ago
Mariano Cano d4c47cf3e1 Fix tests. 5 years ago
Mariano Cano 961be1fbc7 Add endpoint to return the SSH public keys.
Related to smallstep/ca-component#195
5 years ago
Mariano Cano a197158426 Add initial implementation of ssh config. 5 years ago
Mariano Cano 69a1b68283 Merge branch 'ssh' into kms 5 years ago
max furman 92c48949d7 Remove test that is no longer implemented by the method. 5 years ago
max furman 1e5763031b Add backdate validation to sshCertValidityValidator. 5 years ago
max furman 99e5bf4782 Remove all references to old apiError. 5 years ago
max furman b265877050 Simplify statuscoder error generators. 5 years ago
max furman c387b21808 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
5 years ago
Mariano Cano 9021951f1a Fix types. 5 years ago
Mariano Cano 9641ab33b8 Use crypto.Signer instead of ssh.Signer in SSH options. 5 years ago
Mariano Cano e98d7832b9 Add options to read the roots and federated roots from a bundle. 5 years ago
Mariano Cano 44eccc6bd8 Merge branch 'ssh' into kms 5 years ago
Mariano Cano 085ae82163 Remove the use of custom x509 package.
Upgrade cli dependency.
5 years ago
Mariano Cano c62526b39f Add wip support for kms. 5 years ago
Mariano Cano 77af30bfa3 Remove debug statement. 5 years ago
Mariano Cano f46dc03111 Add tests of profileLimitDuration with backdate. 5 years ago
Mariano Cano 165a91858e Add tests for backdate and sshDefaultDuration 5 years ago
Mariano Cano 7e33aeb8d3 Add unit test for profileDefaultDuration. 5 years ago
Mariano Cano f06db4099e Add backdate support on ssh rekey. 5 years ago
Mariano Cano 935d0d4542 Add support for backdate to SSH certificates. 5 years ago
Mariano Cano e67ccd9e3d Add fault tolerance against clock skew accross system on TLS certificates. 5 years ago
max furman f9ef5070f9 Move api errors to their own package and modify the typedef 5 years ago
Mariano Cano 6d6f496331 Allow no provisioners. 5 years ago
Mariano Cano 96b6989658 Addapt test to api change. 5 years ago
Max 1f42637ba1
Merge pull request #143 from smallstep/expired-cert
Expired cert
5 years ago
max furman 1e17ec7d33 Use x5cInsecure token for /ssh/check-host endpoint 5 years ago
Mariano Cano e841a86b48 Make sure to define the KeyID from the token if available. 5 years ago
Mariano Cano 8eeb82d0ce Store renew certificate in the database. 5 years ago
Mariano Cano 50152391a3 Add leeway in identity not before. 5 years ago
max furman 55237d635c Fix authority calling wrong revoke method 5 years ago
Mariano Cano 92d1db1616 Make test compilable. 5 years ago
Mariano Cano 5d35586402 Update template tests. 5 years ago
max furman c2a3bcfab5 resolving merge 5 years ago
max furman 927784237d Use an actual Hosts type when returning ssh hosts 5 years ago
Mariano Cano 7a06a60f88 Add missing version.go file. 5 years ago
Mariano Cano 2f18a26d4f Add version endpoint. 5 years ago
max furman 35912cc906 change func def for getSSHHosts
* continue to return all hosts if injection method not specified
5 years ago
Mariano Cano 3fda081e42 Add identity certificate in ssh response. 5 years ago
max furman c407a9319b Add getSSHHosts injection func 5 years ago
max furman 8b2105a8f9 Instrument getIdentity func for OIDC ssh provisioner 5 years ago
max furman f25a2a43eb remove printfs 5 years ago
max furman 6ca1df5081 Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
5 years ago
Mariano Cano 86a0558587 Add support for /ssh/bastion method. 5 years ago
Mariano Cano 8585b29711 Make test to compile, they still fail. 5 years ago
Mariano Cano 43b663e0c3 Move Option type to a new file. 5 years ago
Mariano Cano be93c9e1f4 Add missing comment. 5 years ago
Mariano Cano fcccb06696 Fix some provisioner tests 5 years ago
Mariano Cano 2cb6bd880b Make audiences compatible with the old version. 5 years ago
Mariano Cano efc2180c4a Complete AuthDB interface. 5 years ago
Mariano Cano a4fd76f1a8 Make provisioner tests compile, they are still failing. 5 years ago
Mariano Cano 0c3b9ebf45 Fix indentation. 5 years ago
Mariano Cano 69a7058ff0 Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
5 years ago
max furman e679deddd7 sshpop token should not allow renew/rekey of user ssh certs 5 years ago
max furman 946094d2b7 Add multiuse capability to k8ssa provisioners 5 years ago
max furman a9ea292bd4 sshpop provisioner + ssh renew | revoke | rekey first pass 5 years ago
max furman b5f15531d8 sshpop first pass 5 years ago
max furman 64b69374fa Add SSH getHosts api 5 years ago
Mariano Cano cf2b9301c0 Change default user duration to 16h. 5 years ago
Mariano Cano e5da24f269 Fix list of user ssh public keys. 5 years ago
Mariano Cano 91ccc3802c Fix lint error. 5 years ago
Mariano Cano c2e20c7877 Add tests for ssh authority methods. 5 years ago
Mariano Cano 40052a1824 Add some ssh related tests. 5 years ago
Mariano Cano 38d735be6e Add support for federated keys. 5 years ago