Commit Graph

251 Commits (c23eb88a4f4121945cf774cf43aefad13e56af9a)
 

Author SHA1 Message Date
Mariano Cano 74114a6234 Add hello-mTLS for nginx 5 years ago
Mariano Cano 758d829355 Fix tests. 5 years ago
max furman 47228cd9a0 dep ensure to update cli 5 years ago
max furman f6bfb71602 cli dep sans -> master 5 years ago
Max 91f183a62a
Merge pull request #29 from smallstep/sans
Add SANs support
5 years ago
max furman 3415a1fef8 move SplitSANs to cli 5 years ago
Mariano Cano 975cb75fbd Fix typo. 5 years ago
Mariano Cano 3c06d6f9bc Fix comment. 5 years ago
Mariano Cano e330ac547c Fix comment. 5 years ago
Mariano Cano cd934bbede Remove println 5 years ago
max furman 6937bfea7b claims.SANS -> claims.SANs 5 years ago
max furman 93f39c64a0 backwards compat only when SANS empty 5 years ago
Mariano Cano 4c9dccd3f6 Allow multiple certificates in the root pem. 5 years ago
max furman ab78534b08 add test for SAN backwards compatibility with CLI
* new provisioner tokens always contain the crt.Subject.CommonName
in the SANS attribute of the token claims. added tests that verifies
backwards compatibility still works in cases where the token does not
contain the subject as a SAN claim.
5 years ago
max furman fe8c8614b2 SANS backwards compat when token missing sujbect SAN 5 years ago
max furman e6e8443f3c allow multiple identical SANs in cert 5 years ago
max furman f0683c2e0a Enable signing certificates with custom SANs
* validate against SANs in token. must be 1:1 equivalent.
5 years ago
Sebastian Tiedtke 55155d1207 Change readme formatting 5 years ago
Sebastian Tiedtke 754670ad12
Add basic federation example (#26)
Add basic federation example
5 years ago
Mariano Cano 025e36bf10
Merge pull request #28 from pallas/fix-overflow
authority/provisioners: fix overflow on 32-bit systems
5 years ago
Derrick Lyndon Pallas 7a5c4a1112 authority/provisioners: fix overflow on 32-bit systems
In Go, len returns signed ints, not unsigned ints; consequently, this code
comparison overflows on 32-bit systems, like ARM.
5 years ago
Mike Malone e70a5dae7d updated README.md 5 years ago
Mike Malone 32c7be6f9d fixed mtls handshake diagram 5 years ago
Mike Malone 1f68bfe7ad mtls handshake diagram 5 years ago
Mike Malone f58000c28f hello-mtls examples 5 years ago
Mike Malone 8e1505d03f new diagrams 5 years ago
Mike Malone 0fabc06fbb new demo gif 5 years ago
Mariano Cano d394dd233a Initiate default RootCAs/ClientCAs when no options are passed. 5 years ago
Mike Malone 2c2f390e66 logo 5 years ago
Mariano Cano 25eba1a96c WIP on the safely rotate of root and federated certificates.
Fixes #23
5 years ago
Mike Malone 0bab651a52 architecture diagram rev'd 5 years ago
Mike Malone c8ebacb8b7 architecture diagram 5 years ago
Max 88a3c4cf83
Merge pull request #25 from smallstep/Duration
make Duration wrapper publicly accessible
5 years ago
max furman 2c72ada610 remove dead code 5 years ago
max furman 6dc89f46d8 make Duration public 5 years ago
Michael Malone 45fb8de26f
Link to the right blog post in README.md 5 years ago
Mike Malone 1fe5612027 README updates 5 years ago
Mike Malone 2c91f1d2fc fixed autocert-init command 5 years ago
Mike Malone d61c2ac3dd autocert-init for setup 5 years ago
max furman 0615f7eb11 don't wrap time.Duration 5 years ago
max furman 4b742042ee make Duration wrapper publicly accessible 5 years ago
Mike Malone 72e2388bcc readme cleanup 5 years ago
Mike Malone 98767422b1 added example to beginning of readme 5 years ago
Mike Malone a9f7510640 readme cleanup 5 years ago
Mike Malone 042e36da65 autocert 5 years ago
Mariano Cano bacbf85aa3 Add new bootstrap method that creates a listener. 5 years ago
Mariano Cano 984bf8d38c Add missing file. 5 years ago
Mariano Cano 1cc5e94666 Add simple test for federation. 5 years ago
max furman 8402b06119 bump step-cli container version in step-ca Dockerfile 5 years ago
max furman 7b9b091b18 don't need to update the brew formula for certificates updates
* brew uses a tarball built by cli releases (not certificates)
5 years ago