smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
Mariano Cano	c7f226bcec	Add support for renew when using stepcas It supports renewing X.509 certificates when an RA is configured with stepcas. This will only work when the renewal uses a token, and it won't work with mTLS. The audience cannot be properly verified when an RA is used, to avoid this we will get from the database if an RA was used to issue the initial certificate and we will accept the renew token. Fixes #1021 for stepcas	2 years ago
Raal Goff	d0e81af524	Merge branch 'master' into crl-support	2 years ago
max furman	6af9437875	Rebase over master and a few more linter fixes	2 years ago
max furman	18a648cffa	Fix linter warning about bad error name	2 years ago
max furman	ab0d2503ae	Standardize linting file and fix or ignore lots of linting errors	2 years ago
Raal Goff	60671b07d7	Merge branch 'master' into crl-support # Conflicts: # api/api.go # authority/config/config.go # cas/softcas/softcas.go # db/db.go	2 years ago
Raal Goff	d417ce3232	implement changes from review	2 years ago
Raal Goff	e8fdb703c9	initial support for CRL	2 years ago
Ahmet DEMIR	16390694e1	feat(vault): adding hashicorp vault cas	2 years ago
Mariano Cano	6d644880bd	Allow to kms signers to define the SignatureAlgorithm CloudKMS keys signs data using an specific signature algorithm, in RSA keys, this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate will fail unless the template SignatureCertificate is properly set. On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or RSA-PSS schemes, so right now the way to enforce one or the other is to used templates.	3 years ago
Mariano Cano	ce3e6bfdf6	Fix linting errors.	3 years ago
Mariano Cano	96de4e6ec8	Return a non-implemented error in stepcas.RenewCertificate.	3 years ago
Mariano Cano	a6115e29c2	Add initial implementation of StepCAS. StepCAS allows to configure step-ca as an RA using another step-ca as the main CA.	3 years ago
Mariano Cano	2b4b902975	Add initial support for `step ca init` with cloud cas. Fixes smallstep/cli#363	4 years ago
Mariano Cano	38fa780775	Add interface to get root certificate from CAS. This change makes easier the configuration of cloudCAS as it does not require to configure the root or intermediate certificate in the ca.json. CloudCAS will get the root certificate using the configured certificateAuthority.	4 years ago
Mariano Cano	aad8f9e582	Pass issuer and signer to softCAS options. Remove commented code and initialize CAS properly. Minor fixes in CloudCAS.	4 years ago
Mariano Cano	c8d9cb0a1d	Complete cloudcas using CAS v1beta1.	4 years ago
Mariano Cano	1b1f73dec6	Early attempt to develop a CAS interface.	4 years ago

18 Commits (c7f226bcec732dda892d8755e1078559f7a0a69d)