493 Commits (ce1eb0a01b68420351dc0d6d53d00ec23ffc6c3d)

Author	SHA1	Message	Date
Mariano Cano	ce1eb0a01b	Use new x509util for renew/rekey.	4 years ago
Mariano Cano	f437b86a7b	Merge branch 'cert-templates' into ssh-cert-templates	4 years ago
Mariano Cano	c8d225a763	Use x509util from go.step.sm/crypto/x509util	4 years ago
Mariano Cano	37f84e9bb3	Add delay in test.	4 years ago
Mariano Cano	342cb713ee	Add test with custom templates.	4 years ago
Mariano Cano	8d89bbd62f	Remove unused code.	4 years ago
Mariano Cano	c4bbc81d9f	Fix authority tests.	4 years ago
Mariano Cano	413af88aad	Fix provisioning tests.	4 years ago
Mariano Cano	b66bdfabcd	Enforce an OIDC users to send all template variables.	4 years ago
Mariano Cano	9822305bb6	Use only the IID template on IID provisioners. ... Use always sshutil.DefaultIIDCertificate and require at least one principal on IID provisioners.	4 years ago
Mariano Cano	aa657cdb4b	Use SSHOptions inside provisioner options.	4 years ago
Mariano Cano	02379d494b	Add support for extensions and critical options on the identity ... function.	4 years ago
Mariano Cano	8ff8d90f8c	On JWK and X5C validate the key id on the request.	4 years ago
Mariano Cano	a78f7e8913	Add template support on k8ssa provisioner.	4 years ago
Mariano Cano	6c36ceb158	Add initial template support for iid provisisioners.	4 years ago
Mariano Cano	8e7bf96769	Fix error prefix.	4 years ago
Mariano Cano	e0dce54338	Add missing argument.	4 years ago
Mariano Cano	c1fc45c872	Simplify SSH modifiers with options. ... It also changes the behavior of the request options to modify only the validity of the certificate.	4 years ago
Mariano Cano	ad28f0f59a	Move variable where it is used.	4 years ago
Mariano Cano	715eb4eacc	Add initial support for ssh templates on OIDC.	4 years ago
Mariano Cano	c2dc76550c	Add ssh certificate template to X5C provisioner.	4 years ago
Mariano Cano	380a0d6daf	Add ssh certificate templates to JWK provisioner.	4 years ago
Mariano Cano	f75a12e10a	Add omitempty tag option.	4 years ago
Mariano Cano	d7e590908e	Use sshutil for ssh renewing and rekeying.	4 years ago
Mariano Cano	b66d123572	Use sshutil for SSH certificate signing.	4 years ago
Mariano Cano	570ede45e7	Do not enforce number of principals or extensions.	4 years ago
Mariano Cano	631f1612a1	Add TemplateData to SignSSHOptions.	4 years ago
Mariano Cano	c6746425a3	Add methods to initialize ssh templates in provisioners.	4 years ago
Mariano Cano	3e80f41c19	Change provisioner options to have X509 as a field.	4 years ago
Mariano Cano	a7b65f1e1e	Add authority.Sign test with custom templates.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	978ad7e2b6	Fix merged tests.	4 years ago
Mariano Cano	5ac3f8a160	Add provisioner options tests.	4 years ago
Mariano Cano	02c4f9817d	Set full token payload instead of only the known properties.	4 years ago
Mariano Cano	0c8376a7f6	Fix existing unit tests.	4 years ago
Mariano Cano	d64cb99a22	Fix authority package tests.	4 years ago
Mariano Cano	ccc705cdcd	Use alias x509legacy to cli x509util in tls.go.	4 years ago
Mariano Cano	8f0dd811af	Allow to send errors from template to cli.	4 years ago
Mariano Cano	a7fe0104c4	Remove ACME restrictions and add proper template support.	4 years ago
Mariano Cano	cf2989a848	Add token and subject to K8sSA provisioner to be used in custom ... templates.	4 years ago
Mariano Cano	71be83b25e	Add iss#sub uri in OIDC certificates. ... Admin will use the CR template if none is provided.	4 years ago
Mariano Cano	c58117b30d	Allow to use base64 when defining a template in the ca.json.	4 years ago
Mariano Cano	b2ca3176f5	Prepend insecure to user and CR variables names.	4 years ago
Mariano Cano	b11486f41f	Fix option method for template variable.	4 years ago
Mariano Cano	04f5053a7a	Add template support for x5c.	4 years ago
Mariano Cano	eb8886d828	Add CR subject as iid default subject. ... Add a minimal subject with just a common name to iid provisioners in case we want to use it.	4 years ago
Mariano Cano	e60ea419cc	Add template support for gcp provisioner.	4 years ago
Mariano Cano	32646c49bf	Add templates support to Azure provisioner.	4 years ago
Mariano Cano	a44f0ca866	Add token payload.	4 years ago
Mariano Cano	00fd41a3d0	Add template support to K8sSA provisioners.	4 years ago