58 Commits (f2dd5c48cc2a90fe955dff0c99c8ee864922bd6b)

Author	SHA1	Message	Date
Mariano Cano	bd8dd9da41	Do not read issuer and signer twice.	4 years ago
Mariano Cano	aad8f9e582	Pass issuer and signer to softCAS options. ... Remove commented code and initialize CAS properly. Minor fixes in CloudCAS.	4 years ago
Mariano Cano	1b1f73dec6	Early attempt to develop a CAS interface.	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	4 years ago
Mariano Cano	fcfc4e9b2b	Fix ssh federated template variables.	4 years ago
Mariano Cano	e3ae751b57	Use templates from authority instead of config.	4 years ago
Mariano Cano	6c844a0618	Load default templates if no templates are configured.	4 years ago
Mariano Cano	c02fe77998	Close the key manager before shutting down.	4 years ago
Mariano Cano	4e544344f9	Initialize the required config fields on embedded authorities. ... This change is to make easier the use of embedded authorities. It can be difficult for third parties to know what fields are required. The new init methods will define the minimum usable configuration.	4 years ago
Mariano Cano	b5eab009b2	Rename method to NewEmbedded	4 years ago
Mariano Cano	824374bde0	Create a method to initialize the authority without a config file. ... When the CA is embedded in a third party product like Caddy, the config needed to use placeholders to be valid. This change adds a new method `NewEmbeddedAuthority` that allows to create an authority with the given options, the minimum options are a root and intermediate certificate, and the intermediate key. Fixes #218	4 years ago
Mariano Cano	c49a9d5e33	Add context parameter to all SSH methods.	4 years ago
Mariano Cano	5c8c741fab	Fix linting issues.	4 years ago
Mariano Cano	9021951f1a	Fix types.	4 years ago
Mariano Cano	e98d7832b9	Add options to read the roots and federated roots from a bundle.	4 years ago
Mariano Cano	c62526b39f	Add wip support for kms.	4 years ago
max furman	1e17ec7d33	Use x5cInsecure token for /ssh/check-host endpoint	5 years ago
max furman	c2a3bcfab5	resolving merge	5 years ago
max furman	927784237d	Use an actual Hosts type when returning ssh hosts	5 years ago
Mariano Cano	2f18a26d4f	Add version endpoint.	5 years ago
max furman	35912cc906	change func def for getSSHHosts ... * continue to return all hosts if injection method not specified	5 years ago
max furman	c407a9319b	Add getSSHHosts injection func	5 years ago
max furman	8b2105a8f9	Instrument getIdentity func for OIDC ssh provisioner	5 years ago
max furman	6ca1df5081	Add WithGetIdentityFunc option and attr to authority ... * Add Identity type to provisioner	5 years ago
Mariano Cano	86a0558587	Add support for /ssh/bastion method.	5 years ago
Mariano Cano	43b663e0c3	Move Option type to a new file.	5 years ago
max furman	a9ea292bd4	sshpop provisioner + ssh renew | revoke | rekey first pass	5 years ago
Mariano Cano	e5da24f269	Fix list of user ssh public keys.	5 years ago
Mariano Cano	91ccc3802c	Fix lint error.	5 years ago
Mariano Cano	38d735be6e	Add support for federated keys.	5 years ago
Mariano Cano	e84489775b	Add support for multiple ssh roots. ... Fixes #125	5 years ago
Mariano Cano	caa2174efc	Add support for user data in templates.	5 years ago
Mariano Cano	7b8bb6deb4	Add initial support for ssh config. ... Related to smallstep/cli#170	5 years ago
Mariano Cano	dc6ffb7670	Add initial implementation of ssh config.	5 years ago
max furman	fe7973c060	wip	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago
Mariano Cano	004ea12212	Allow to use custom SSH user/host key files.	5 years ago
Mariano Cano	1c8f610ca9	Add initial implementation of an SSH CA using the JWK provisioner. ... Fixes smallstep/ca-component#187	5 years ago
Mariano Cano	dbd3131068	Fix comments.	5 years ago
Mariano Cano	fb6a1afd89	Fix typo.	5 years ago
Mariano Cano	3a1a4c5ea9	Do not allow reload with database configuration changes. ... Fixes #smallstep/ca-component#170	5 years ago
max furman	81db527f12	NoopDB -> SimpleDB	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	2fb77b8a4d	Truncate to seconds the startTime to simplify tests.	5 years ago
Mariano Cano	2d00cd0933	Validate audiences in the default provisioner.	5 years ago
Mariano Cano	c776ca3bd6	Use provisioner.Collection to store and request the provisioners.	5 years ago
Mariano Cano	98cc243a37	Add support for multiple roots.	6 years ago
Mariano Cano	722bcb7e7a	Add initial support for federated root certificates.	6 years ago
Mariano Cano	7e95fc0e45	Strip ports on audience check. ... Services might have proxies behind them so we cannot rely on them. Fixes #17	6 years ago