Commit Graph

1485 Commits (b68344ec36a230cd7e1c8f14c5db5dd2f2db5ab0)
 

Author SHA1 Message Date
Mariano Cano 0a59efd853 Use new x509util to generate the CA certificate. 4 years ago
Mariano Cano 4943ae58d8 Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates. 4 years ago
Mariano Cano 77624c6b1c Remove now migrated sshutil. 4 years ago
Mariano Cano e83e47a91e Use sshutil and randutil from go.step.sm/crypto. 4 years ago
max furman e8c5a3b320 Document concurrency limitations in ACME server
- in concurrency / HA section
4 years ago
Mariano Cano ce1eb0a01b Use new x509util for renew/rekey. 4 years ago
Mariano Cano f437b86a7b Merge branch 'cert-templates' into ssh-cert-templates 4 years ago
Mariano Cano c8d225a763 Use x509util from go.step.sm/crypto/x509util 4 years ago
Max 0eab3727bf
Merge pull request #336 from smallstep/max/docker
introduce docker-buildx
4 years ago
max furman 476bca3717 Add make docker-dev building and testing locally. 4 years ago
Mariano Cano 37f84e9bb3 Add delay in test. 4 years ago
Mariano Cano 342cb713ee Add test with custom templates. 4 years ago
Mariano Cano 8d89bbd62f Remove unused code. 4 years ago
Mariano Cano c4bbc81d9f Fix authority tests. 4 years ago
Mariano Cano 413af88aad Fix provisioning tests. 4 years ago
Mariano Cano b66bdfabcd Enforce an OIDC users to send all template variables. 4 years ago
Mariano Cano 9822305bb6 Use only the IID template on IID provisioners.
Use always sshutil.DefaultIIDCertificate and require at least one
principal on IID provisioners.
4 years ago
Max 7b9ddf1d09
Merge pull request #337 from smallstep/max/debName
Convert '-' to '~' in deb package name
4 years ago
max furman 652377dbf6 Convert '-' to '~' in deb package name 4 years ago
max furman 9e9808fe3d introduce docker-buildx 4 years ago
Max e55ad2ad52
Merge pull request #335 from smallstep/max/sshpop
Add SSHPOP default provisioner if SSH enabled during init
4 years ago
max furman 3fb116f1b4 Add SSHPOP default provisioner if SSH enabled during init 4 years ago
Mariano Cano 53eea843bc Fix newExtension comment. 4 years ago
Mariano Cano 7c3c16b7be Fix UnmarshalJSON comment. 4 years ago
Mariano Cano f1773489fc Fix comment. 4 years ago
Mariano Cano aa657cdb4b Use SSHOptions inside provisioner options. 4 years ago
Mariano Cano d82bdc1a00 Fix tests with criticalOptions. 4 years ago
Mariano Cano 02379d494b Add support for extensions and critical options on the identity
function.
4 years ago
Mariano Cano 8ff8d90f8c On JWK and X5C validate the key id on the request. 4 years ago
Mariano Cano 3b19bb9796 Add TemplateData to SSHSignRequest.
Add some omitempty tags.
4 years ago
Mariano Cano a78f7e8913 Add template support on k8ssa provisioner. 4 years ago
Mariano Cano 6c36ceb158 Add initial template support for iid provisisioners. 4 years ago
Mariano Cano 8e7bf96769 Fix error prefix. 4 years ago
Mariano Cano e0dce54338 Add missing argument. 4 years ago
Mariano Cano c1fc45c872 Simplify SSH modifiers with options.
It also changes the behavior of the request options to modify only
the validity of the certificate.
4 years ago
Mariano Cano df1f7e5a2e Use CertificateRequest type as input for ssh NewCertificate.
SSH does not have a real concept of ssh certificate request, but
we are using the type to encapsulate the parameters coming in the
request.
4 years ago
Mariano Cano ad28f0f59a Move variable where it is used. 4 years ago
Mariano Cano 715eb4eacc Add initial support for ssh templates on OIDC. 4 years ago
Mariano Cano c2dc76550c Add ssh certificate template to X5C provisioner. 4 years ago
Mariano Cano 380a0d6daf Add ssh certificate templates to JWK provisioner. 4 years ago
Mariano Cano f75a12e10a Add omitempty tag option. 4 years ago
Mariano Cano d7e590908e Use sshutil for ssh renewing and rekeying. 4 years ago
Mariano Cano b66d123572 Use sshutil for SSH certificate signing. 4 years ago
Mariano Cano 570ede45e7 Do not enforce number of principals or extensions. 4 years ago
Mariano Cano 631f1612a1 Add TemplateData to SignSSHOptions. 4 years ago
Mariano Cano fdd0eb6773 Create method CertTypeFromString(s string). 4 years ago
Mariano Cano c6746425a3 Add methods to initialize ssh templates in provisioners. 4 years ago
Mariano Cano af3eeb870e Add package to generate ssh certificate for templates. 4 years ago
Mariano Cano 3e80f41c19 Change provisioner options to have X509 as a field. 4 years ago
max furman 3f844c5e23 Update the way SubjectKeyId is calculated, and more ...
- swith lint to first in line for `make all`
- update tests to conform with new subjectkeyid
4 years ago