Mariano Cano
|
557a45abfa
|
Update template tests.
|
5 years ago |
max furman
|
656f35e522
|
Use an actual Hosts type when returning ssh hosts
|
5 years ago |
Mariano Cano
|
03bb26fb91
|
Add missing version.go file.
|
5 years ago |
Mariano Cano
|
c60641701b
|
Add version endpoint.
|
5 years ago |
max furman
|
f92bb06b6c
|
change func def for getSSHHosts
* continue to return all hosts if injection method not specified
|
5 years ago |
Mariano Cano
|
11c8639782
|
Add identity certificate in ssh response.
|
5 years ago |
max furman
|
d940ab7c20
|
Add getSSHHosts injection func
|
5 years ago |
max furman
|
414a94b210
|
Instrument getIdentity func for OIDC ssh provisioner
|
5 years ago |
max furman
|
3d970b45c8
|
remove printfs
|
5 years ago |
max furman
|
f74cd04a6a
|
Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
|
5 years ago |
Mariano Cano
|
8bf3bf701e
|
Add support for /ssh/bastion method.
|
5 years ago |
Mariano Cano
|
a6edcd0a3d
|
Make test to compile, they still fail.
|
5 years ago |
Mariano Cano
|
000885dea7
|
Move Option type to a new file.
|
5 years ago |
Mariano Cano
|
a86dc78b5d
|
Add missing comment.
|
5 years ago |
Mariano Cano
|
7db7b1ee4c
|
Fix some provisioner tests
|
5 years ago |
Mariano Cano
|
29be322b1c
|
Make audiences compatible with the old version.
|
5 years ago |
Mariano Cano
|
39ae5636fe
|
Complete AuthDB interface.
|
5 years ago |
Mariano Cano
|
d4627d1282
|
Make provisioner tests compile, they are still failing.
|
5 years ago |
Mariano Cano
|
a8a6d0ada3
|
Fix indentation.
|
5 years ago |
Mariano Cano
|
cf592fa0e1
|
Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
|
5 years ago |
max furman
|
5788ac3f4f
|
sshpop token should not allow renew/rekey of user ssh certs
|
5 years ago |
max furman
|
54e3cf7322
|
Add multiuse capability to k8ssa provisioners
|
5 years ago |
max furman
|
29853ae016
|
sshpop provisioner + ssh renew | revoke | rekey first pass
|
5 years ago |
max furman
|
c04f1e1bd4
|
sshpop first pass
|
5 years ago |
max furman
|
5616386eed
|
Add SSH getHosts api
|
5 years ago |
Mariano Cano
|
c7e4cc96a4
|
Change default user duration to 16h.
|
5 years ago |
Mariano Cano
|
c729c5f925
|
Fix list of user ssh public keys.
|
5 years ago |
Mariano Cano
|
ee22778264
|
Fix lint error.
|
5 years ago |
Mariano Cano
|
8939caace4
|
Add tests for ssh authority methods.
|
5 years ago |
Mariano Cano
|
4f06f3901e
|
Add some ssh related tests.
|
5 years ago |
Mariano Cano
|
08850d5334
|
Add support for federated keys.
|
5 years ago |
Mariano Cano
|
37f17213bb
|
Add initial support for check-host endpoint.
|
5 years ago |
Mariano Cano
|
d08db4df23
|
Rename SSH methods.
|
5 years ago |
Mariano Cano
|
b5bc249e1c
|
Add support for multiple ssh roots.
Fixes #125
|
5 years ago |
Mariano Cano
|
91130b9c3f
|
Add support for user data in templates.
|
5 years ago |
Mariano Cano
|
a35988ff08
|
Add initial support for ssh config.
Related to smallstep/cli#170
|
5 years ago |
Mariano Cano
|
d4c47cf3e1
|
Fix tests.
|
5 years ago |
Mariano Cano
|
961be1fbc7
|
Add endpoint to return the SSH public keys.
Related to smallstep/ca-component#195
|
5 years ago |
Mariano Cano
|
a197158426
|
Add initial implementation of ssh config.
|
5 years ago |
Mariano Cano
|
69a1b68283
|
Merge branch 'ssh' into kms
|
5 years ago |
max furman
|
92c48949d7
|
Remove test that is no longer implemented by the method.
|
5 years ago |
max furman
|
1e5763031b
|
Add backdate validation to sshCertValidityValidator.
|
5 years ago |
max furman
|
99e5bf4782
|
Remove all references to old apiError.
|
5 years ago |
max furman
|
b265877050
|
Simplify statuscoder error generators.
|
5 years ago |
max furman
|
c387b21808
|
Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
|
5 years ago |
Mariano Cano
|
9021951f1a
|
Fix types.
|
5 years ago |
Mariano Cano
|
9641ab33b8
|
Use crypto.Signer instead of ssh.Signer in SSH options.
|
5 years ago |
Mariano Cano
|
e98d7832b9
|
Add options to read the roots and federated roots from a bundle.
|
5 years ago |
Mariano Cano
|
44eccc6bd8
|
Merge branch 'ssh' into kms
|
5 years ago |
Mariano Cano
|
085ae82163
|
Remove the use of custom x509 package.
Upgrade cli dependency.
|
5 years ago |
Mariano Cano
|
c62526b39f
|
Add wip support for kms.
|
5 years ago |
Mariano Cano
|
77af30bfa3
|
Remove debug statement.
|
5 years ago |
Mariano Cano
|
f46dc03111
|
Add tests of profileLimitDuration with backdate.
|
5 years ago |
Mariano Cano
|
165a91858e
|
Add tests for backdate and sshDefaultDuration
|
5 years ago |
Mariano Cano
|
7e33aeb8d3
|
Add unit test for profileDefaultDuration.
|
5 years ago |
Mariano Cano
|
f06db4099e
|
Add backdate support on ssh rekey.
|
5 years ago |
Mariano Cano
|
935d0d4542
|
Add support for backdate to SSH certificates.
|
5 years ago |
Mariano Cano
|
e67ccd9e3d
|
Add fault tolerance against clock skew accross system on TLS certificates.
|
5 years ago |
max furman
|
f9ef5070f9
|
Move api errors to their own package and modify the typedef
|
5 years ago |
Mariano Cano
|
6d6f496331
|
Allow no provisioners.
|
5 years ago |
Mariano Cano
|
96b6989658
|
Addapt test to api change.
|
5 years ago |
Max
|
1f42637ba1
|
Merge pull request #143 from smallstep/expired-cert
Expired cert
|
5 years ago |
max furman
|
1e17ec7d33
|
Use x5cInsecure token for /ssh/check-host endpoint
|
5 years ago |
Mariano Cano
|
e841a86b48
|
Make sure to define the KeyID from the token if available.
|
5 years ago |
Mariano Cano
|
8eeb82d0ce
|
Store renew certificate in the database.
|
5 years ago |
Mariano Cano
|
50152391a3
|
Add leeway in identity not before.
|
5 years ago |
max furman
|
55237d635c
|
Fix authority calling wrong revoke method
|
5 years ago |
Mariano Cano
|
92d1db1616
|
Make test compilable.
|
5 years ago |
Mariano Cano
|
5d35586402
|
Update template tests.
|
5 years ago |
max furman
|
c2a3bcfab5
|
resolving merge
|
5 years ago |
max furman
|
927784237d
|
Use an actual Hosts type when returning ssh hosts
|
5 years ago |
Mariano Cano
|
7a06a60f88
|
Add missing version.go file.
|
5 years ago |
Mariano Cano
|
2f18a26d4f
|
Add version endpoint.
|
5 years ago |
max furman
|
35912cc906
|
change func def for getSSHHosts
* continue to return all hosts if injection method not specified
|
5 years ago |
Mariano Cano
|
3fda081e42
|
Add identity certificate in ssh response.
|
5 years ago |
max furman
|
c407a9319b
|
Add getSSHHosts injection func
|
5 years ago |
max furman
|
8b2105a8f9
|
Instrument getIdentity func for OIDC ssh provisioner
|
5 years ago |
max furman
|
f25a2a43eb
|
remove printfs
|
5 years ago |
max furman
|
6ca1df5081
|
Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
|
5 years ago |
Mariano Cano
|
86a0558587
|
Add support for /ssh/bastion method.
|
5 years ago |
Mariano Cano
|
8585b29711
|
Make test to compile, they still fail.
|
5 years ago |
Mariano Cano
|
43b663e0c3
|
Move Option type to a new file.
|
5 years ago |
Mariano Cano
|
be93c9e1f4
|
Add missing comment.
|
5 years ago |
Mariano Cano
|
fcccb06696
|
Fix some provisioner tests
|
5 years ago |
Mariano Cano
|
2cb6bd880b
|
Make audiences compatible with the old version.
|
5 years ago |
Mariano Cano
|
efc2180c4a
|
Complete AuthDB interface.
|
5 years ago |
Mariano Cano
|
a4fd76f1a8
|
Make provisioner tests compile, they are still failing.
|
5 years ago |
Mariano Cano
|
0c3b9ebf45
|
Fix indentation.
|
5 years ago |
Mariano Cano
|
69a7058ff0
|
Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
|
5 years ago |
max furman
|
e679deddd7
|
sshpop token should not allow renew/rekey of user ssh certs
|
5 years ago |
max furman
|
946094d2b7
|
Add multiuse capability to k8ssa provisioners
|
5 years ago |
max furman
|
a9ea292bd4
|
sshpop provisioner + ssh renew | revoke | rekey first pass
|
5 years ago |
max furman
|
b5f15531d8
|
sshpop first pass
|
5 years ago |
max furman
|
64b69374fa
|
Add SSH getHosts api
|
5 years ago |
Mariano Cano
|
cf2b9301c0
|
Change default user duration to 16h.
|
5 years ago |
Mariano Cano
|
e5da24f269
|
Fix list of user ssh public keys.
|
5 years ago |
Mariano Cano
|
91ccc3802c
|
Fix lint error.
|
5 years ago |
Mariano Cano
|
c2e20c7877
|
Add tests for ssh authority methods.
|
5 years ago |
Mariano Cano
|
40052a1824
|
Add some ssh related tests.
|
5 years ago |
Mariano Cano
|
38d735be6e
|
Add support for federated keys.
|
5 years ago |