Commit Graph

24 Commits (c0525381eba085124a382851ee23d07f8b80d243)

Author SHA1 Message Date
Mariano Cano 300c19f8b9 Add a custom enforcer that can be used to modify a cert. 2 years ago
max furman 4afcdd55ff Update doc line on WithSSHGetHosts 2 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano 6729c79253 Add support for setting individual password for ssh and tls keys
This change add the following flags:
 * --ssh-host-password-file
 * --ssh-user-password-file

Fixes #693
3 years ago
Mariano Cano 8fb5340dc9 Use a token at start time to configure linkedca.
Instead of using `step-ca login` we will use a new token provided
as a flag to configure and start linkedca. Certificates will be kept
in memory and refreshed automatically.
3 years ago
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
max furman 9bf9bf142d wip 3 years ago
max furman 7b5d6968a5 first commit 3 years ago
Miclain Keffeler 7545b4a625 leverage intermediate_ca.crt for appending certs. 4 years ago
Mariano Cano 60515d92c5 Remove unnecessary properties. 4 years ago
Mariano Cano e83e47a91e Use sshutil and randutil from go.step.sm/crypto. 4 years ago
Mariano Cano 824374bde0 Create a method to initialize the authority without a config file.
When the CA is embedded in a third party product like Caddy, the
config needed to use placeholders to be valid. This change adds
a new method `NewEmbeddedAuthority` that allows to create an
authority with the given options, the minimum options are a root
and intermediate certificate, and the intermediate key.

Fixes #218
4 years ago
Mariano Cano c49a9d5e33 Add context parameter to all SSH methods. 4 years ago
Mariano Cano 2d4f369db2 Add options to set root and federated certificates using x509.Certificate 4 years ago
Mariano Cano 9641ab33b8 Use crypto.Signer instead of ssh.Signer in SSH options. 4 years ago
Mariano Cano e98d7832b9 Add options to read the roots and federated roots from a bundle. 5 years ago
Mariano Cano c62526b39f Add wip support for kms. 5 years ago
max furman 1e17ec7d33 Use x5cInsecure token for /ssh/check-host endpoint 5 years ago
max furman 927784237d Use an actual Hosts type when returning ssh hosts 5 years ago
max furman 35912cc906 change func def for getSSHHosts
* continue to return all hosts if injection method not specified
5 years ago
max furman c407a9319b Add getSSHHosts injection func 5 years ago
max furman 6ca1df5081 Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
5 years ago
Mariano Cano 86a0558587 Add support for /ssh/bastion method. 5 years ago
Mariano Cano 43b663e0c3 Move Option type to a new file. 5 years ago