Commit Graph

301 Commits (b26587705025ed7823a2f002a2cc0d9fa669860a)

Author SHA1 Message Date
max furman b265877050 Simplify statuscoder error generators. 5 years ago
max furman c387b21808 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
5 years ago
Mariano Cano 085ae82163 Remove the use of custom x509 package.
Upgrade cli dependency.
5 years ago
Mariano Cano 77af30bfa3 Remove debug statement. 5 years ago
Mariano Cano f46dc03111 Add tests of profileLimitDuration with backdate. 5 years ago
Mariano Cano 165a91858e Add tests for backdate and sshDefaultDuration 5 years ago
Mariano Cano 7e33aeb8d3 Add unit test for profileDefaultDuration. 5 years ago
Mariano Cano f06db4099e Add backdate support on ssh rekey. 5 years ago
Mariano Cano 935d0d4542 Add support for backdate to SSH certificates. 5 years ago
Mariano Cano e67ccd9e3d Add fault tolerance against clock skew accross system on TLS certificates. 5 years ago
max furman f9ef5070f9 Move api errors to their own package and modify the typedef 5 years ago
Mariano Cano 6d6f496331 Allow no provisioners. 5 years ago
Mariano Cano 96b6989658 Addapt test to api change. 5 years ago
Max 1f42637ba1
Merge pull request #143 from smallstep/expired-cert
Expired cert
5 years ago
max furman 1e17ec7d33 Use x5cInsecure token for /ssh/check-host endpoint 5 years ago
Mariano Cano e841a86b48 Make sure to define the KeyID from the token if available. 5 years ago
Mariano Cano 8eeb82d0ce Store renew certificate in the database. 5 years ago
Mariano Cano 50152391a3 Add leeway in identity not before. 5 years ago
max furman 55237d635c Fix authority calling wrong revoke method 5 years ago
Mariano Cano 92d1db1616 Make test compilable. 5 years ago
Mariano Cano 5d35586402 Update template tests. 5 years ago
max furman c2a3bcfab5 resolving merge 5 years ago
max furman 927784237d Use an actual Hosts type when returning ssh hosts 5 years ago
Mariano Cano 7a06a60f88 Add missing version.go file. 5 years ago
Mariano Cano 2f18a26d4f Add version endpoint. 5 years ago
max furman 35912cc906 change func def for getSSHHosts
* continue to return all hosts if injection method not specified
5 years ago
Mariano Cano 3fda081e42 Add identity certificate in ssh response. 5 years ago
max furman c407a9319b Add getSSHHosts injection func 5 years ago
max furman 8b2105a8f9 Instrument getIdentity func for OIDC ssh provisioner 5 years ago
max furman f25a2a43eb remove printfs 5 years ago
max furman 6ca1df5081 Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
5 years ago
Mariano Cano 86a0558587 Add support for /ssh/bastion method. 5 years ago
Mariano Cano 8585b29711 Make test to compile, they still fail. 5 years ago
Mariano Cano 43b663e0c3 Move Option type to a new file. 5 years ago
Mariano Cano be93c9e1f4 Add missing comment. 5 years ago
Mariano Cano fcccb06696 Fix some provisioner tests 5 years ago
Mariano Cano 2cb6bd880b Make audiences compatible with the old version. 5 years ago
Mariano Cano efc2180c4a Complete AuthDB interface. 5 years ago
Mariano Cano a4fd76f1a8 Make provisioner tests compile, they are still failing. 5 years ago
Mariano Cano 0c3b9ebf45 Fix indentation. 5 years ago
Mariano Cano 69a7058ff0 Remove global check for number of k8sSA provisioners.
This was causing a bug in the reload of the ca.
5 years ago
max furman e679deddd7 sshpop token should not allow renew/rekey of user ssh certs 5 years ago
max furman 946094d2b7 Add multiuse capability to k8ssa provisioners 5 years ago
max furman a9ea292bd4 sshpop provisioner + ssh renew | revoke | rekey first pass 5 years ago
max furman b5f15531d8 sshpop first pass 5 years ago
max furman 64b69374fa Add SSH getHosts api 5 years ago
Mariano Cano cf2b9301c0 Change default user duration to 16h. 5 years ago
Mariano Cano e5da24f269 Fix list of user ssh public keys. 5 years ago
Mariano Cano 91ccc3802c Fix lint error. 5 years ago
Mariano Cano c2e20c7877 Add tests for ssh authority methods. 5 years ago