Commit Graph

33 Commits (fc452e560cb4cf94b740426b69034ccf85a65d46)

Author SHA1 Message Date
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano bc61b23d91 Add deprecation notices to step-x-init binaries
Fixes #1044
2 years ago
Mariano Cano 23b8f45b37 Address gosec warnings
Most if not all false positives
2 years ago
Mariano Cano 369b8f81c3 Use go.step.sm/crypto/kms
Fixes #975
2 years ago
Gary Belvin fed09047f9 pinfile 2 years ago
Herman Slatman af17b6a6f3
Make copyright year dynamic 2 years ago
Mariano Cano febb619882 Add some extra validation and print certificate objects
This commit also changes the following flags for consistency:
  - --crt-cert to --crt-cert-obj
  - --crt-key to --crt-key-obj
3 years ago
Gary Belvin bbb327c8c5 Make a csr if there's not a root 3 years ago
Gary Belvin 29f5a35965 simplify flags 3 years ago
Mariano Cano 8366b7ddf1 Revert "Remove extractable from StoreCertificate."
This reverts commit 614ee79489.
3 years ago
Mariano Cano 614ee79489 Remove extractable from StoreCertificate. 3 years ago
Mariano Cano aa80bf9f07 Merge branch 'smallstep_master' into extractable 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano 205148ad1f Fix exit after defer. 3 years ago
Mariano Cano 48549bf317 Initialize windows terminal on all binaries. 3 years ago
Gary Belvin 22b471acf9 Extractable certs 3 years ago
Gary Belvin be89459524 Set key export bit 3 years ago
Mariano Cano a0633a6efb
Merge pull request #612 from gdbelvin/kmspin
Allow reading pin from kms string
3 years ago
Gary Belvin 1fb4406801 minimize diff 3 years ago
Gary Belvin c6bb7aa199 Add back UI check, but don't read file 3 years ago
Gary Belvin a63a1d6482 Don't double read from u.Pin() 3 years ago
Gary Belvin 063a09a521 Allow reading pin from kms string 3 years ago
Mariano Cano 595f12505c
Merge branch 'master' into name 3 years ago
Gary Belvin c264e8f580 Configurable pkcs11-init output paths 3 years ago
Gary Belvin 623e387fb0 Allow configuration of PKCS11 subject name 3 years ago
Gary Belvin 341966c30f Check pin flag 3 years ago
Gary Belvin 1ac838628a Add flag for setting the pin 3 years ago
Mariano Cano e446e22520 Remove extra default. 3 years ago
Mariano Cano 3648c3fab6 Fix error message when --kms is not passed. 3 years ago
Mariano Cano 1d2146166b Close key manager. 3 years ago
Mariano Cano 7f9d7eadc9 Attempt to delete key and certificate with the same name.
Nitrokey will override the label of the key with the certificate one.
If they are stored with the same id.
3 years ago
Mariano Cano 162c535705 Add option to not store certificates in the pkcs11 module. 3 years ago
Mariano Cano 8dca652bc7 Add support for PKCS #11 KMS.
The implementation works with YubiHSM2. Unit tests are still pending.

Fixes #301
3 years ago