smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	4 years ago
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	4 years ago
max furman	29853ae016	sshpop provisioner + ssh renew \| revoke \| rekey first pass	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
Mariano Cano	6c4abfabbb	Make /.well-known/openid-configuration optional	5 years ago
Mariano Cano	3527ee6940	Add support for listenAddress parameter if OIDC provisioners. Fixes smallstep/cli#150	5 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. Fixes #100	5 years ago
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	5 years ago
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer * Fixes #94 * In the future this should be configurable by provisioner	5 years ago
Mariano Cano	57a529cc1a	Allow to enable the SSH CA per provisioner	5 years ago
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	5 years ago
Mariano Cano	41b97372e6	Rename function to SanitizeSSHUserPrincipal	5 years ago
Mariano Cano	53f62f871c	Set not extensions to host certificates.	5 years ago
Mariano Cano	48c98dea2a	Make SanitizeSSHPrincipal a public function.	5 years ago
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. Update the interface for all the provisioners.	5 years ago
Matteo Saloni	1919cfdff3	Add option for checking group membership declared in JWT token	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	5 years ago
Mariano Cano	5d5f03f963	Set omitempty to admins and domains.	5 years ago
Mariano Cano	60880d1f0a	Add domains and check emails properly.	5 years ago
Mariano Cano	5edbce017f	Set docs for client secret as mandatory, but it can be blank.	5 years ago
Mariano Cano	2c0c0112c6	Add an optional client secret field.	5 years ago
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	5 years ago
Mariano Cano	4ceb88fbae	Add tests for OIDC and complete some JWK tests.	5 years ago
Mariano Cano	dce3100cfb	Add missing time in validation.	5 years ago
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	5 years ago
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	5 years ago
Mariano Cano	6d395f3818	Add missing validy validator to oidc.	5 years ago
Mariano Cano	0dee841a4f	Complete first version of provisioner implementations.	5 years ago
Mariano Cano	a2a45f635b	Add initial implementation of an OIDC provisioner.	5 years ago

32 Commits (dccbdf3a9071c1291cd7e9fa53943c43c03b5182)