Commit Graph

  • c387b21808 Introduce generalized statusCoder errors and loads of ssh unit tests. max furman 2019-12-20 13:30:05 -08:00
  • fa8116497c Make Signer public and add contructor NewCloudKMS. Mariano Cano 2020-01-21 19:09:21 -08:00
  • 5d5ee68d88 Make GCP client public to facilitate extensibility. Mariano Cano 2020-01-21 12:50:21 -08:00
  • dff498f17f Add tests for cloudkms. Mariano Cano 2020-01-15 19:32:26 -08:00
  • 264179cda3 Add tests for kms and kms/apiv1 packages. Mariano Cano 2020-01-15 17:56:50 -08:00
  • c250c6ad91 Add unit tests for softkms. Mariano Cano 2020-01-15 17:30:17 -08:00
  • a773977a81 Fix interface change. Mariano Cano 2020-01-15 17:29:34 -08:00
  • 927a3b3a86 Return crypto.PublicKey on kms.GetPublicKey. Mariano Cano 2020-01-15 17:27:21 -08:00
  • ec2046bba8 Add grpc dependency. Mariano Cano 2020-01-14 18:51:05 -08:00
  • 9021951f1a Fix types. Mariano Cano 2020-01-14 18:47:05 -08:00
  • a9c2db8f98 Add close method and fix types in softkms. Mariano Cano 2020-01-14 18:46:18 -08:00
  • a3128a26bb Add Close method to the key manager interface. Mariano Cano 2020-01-14 18:46:01 -08:00
  • e60beeb7fc Make cloudkms more robust. Mariano Cano 2020-01-14 18:43:39 -08:00
  • 3f8de17a40 Cleanup types and add initial support for the options required for PKCS11. Mariano Cano 2020-01-14 18:42:14 -08:00
  • 9641ab33b8 Use crypto.Signer instead of ssh.Signer in SSH options. Mariano Cano 2020-01-14 18:38:29 -08:00
  • e98d7832b9 Add options to read the roots and federated roots from a bundle. Mariano Cano 2020-01-10 18:33:48 -08:00
  • 44eccc6bd8 Merge branch 'ssh' into kms Mariano Cano 2020-01-10 17:49:52 -08:00
  • 3ce267cdd6 Upgrade smallste/cli Mariano Cano 2020-01-10 17:21:47 -08:00
  • ab1807d6a0 Use release v1.19.1 of golangci-lint Mariano Cano 2020-01-10 17:19:56 -08:00
  • 3cbf30b555 Upgrade golangci-lint to v1.22.2 Mariano Cano 2020-01-10 11:19:28 -08:00
  • 085ae82163 Remove the use of custom x509 package. Mariano Cano 2020-01-10 10:58:49 -08:00
  • 995375013d Update dependencies for kms support. Mariano Cano 2020-01-09 18:43:35 -08:00
  • c62526b39f Add wip support for kms. Mariano Cano 2020-01-09 18:42:26 -08:00
  • d13754166a Add support for cloudkms and softkms. Mariano Cano 2020-01-09 18:41:13 -08:00
  • 8a10c5032f Merge pull request #150 from smallstep/backdate Mariano Cano 2020-01-08 12:52:31 -08:00
  • 77af30bfa3 Remove debug statement. Mariano Cano 2020-01-08 11:46:33 -08:00
  • f46dc03111 Add tests of profileLimitDuration with backdate. Mariano Cano 2020-01-06 14:34:59 -08:00
  • 165a91858e Add tests for backdate and sshDefaultDuration Mariano Cano 2020-01-06 14:21:13 -08:00
  • 7e33aeb8d3 Add unit test for profileDefaultDuration. Mariano Cano 2020-01-06 12:19:00 -08:00
  • f06db4099e Add backdate support on ssh rekey. Mariano Cano 2020-01-03 18:30:17 -08:00
  • 935d0d4542 Add support for backdate to SSH certificates. Mariano Cano 2020-01-03 18:22:02 -08:00
  • 64e0a2ca6f Disable backdata on ca tests. Mariano Cano 2020-01-03 18:16:45 -08:00
  • 76c14560b0 Use errs package for HTTP errors. Mariano Cano 2020-01-03 17:41:16 -08:00
  • 50717b3ffa Update assert package. Mariano Cano 2020-01-03 13:27:45 -08:00
  • e67ccd9e3d Add fault tolerance against clock skew accross system on TLS certificates. Mariano Cano 2020-01-02 17:48:28 -08:00
  • 967e86a48b Simplify trimming *. prefix of domain in acme dns validation. max furman 2019-12-20 13:32:44 -08:00
  • 37d33968f1 Merge pull request #146 from anxolerd/normalize-wildcard Max 2019-12-20 13:29:24 -08:00
  • ec8ff0bced Add testcase which ensures we pass correct domain to lookupTxt Oleksandr Kovalchuk 2019-12-20 22:54:41 +02:00
  • 46832bb9b3 Remove superflurous Printf statement Oleksandr Kovalchuk 2019-12-20 22:22:12 +02:00
  • a995cca418 Perform domain normalization for wildcard domains Oleksandr Kovalchuk 2019-12-20 19:17:53 +02:00
  • 1fa35491ea Update cli dependency. Mariano Cano 2019-12-18 14:44:59 -08:00
  • eeabf5ba4c Fix tests. Mariano Cano 2019-12-18 14:44:08 -08:00
  • a6deea7d8d Renew identity certificate in /ssh/rekey and /ssh/renew Mariano Cano 2019-12-18 14:43:38 -08:00
  • 0b5d37b284 Add method to just write the identity certificate. Mariano Cano 2019-12-18 14:39:01 -08:00
  • 839fe6b952 Add method to renew the identity. Mariano Cano 2019-12-18 12:46:46 -08:00
  • aa58940582 Should be returning nil from applyIdentity if cert expired. max furman 2019-12-17 15:53:37 -08:00
  • 6200aeaad0 cli dep update max furman 2019-12-17 14:39:08 -08:00
  • bd6eca6342 Merge pull request #145 from smallstep/err Max 2019-12-17 14:33:48 -08:00
  • e5a8629a21 updating dependencies max furman 2019-12-17 14:31:22 -08:00
  • cb78a087d5 Update cli dep max furman 2019-12-17 14:30:18 -08:00
  • f9ef5070f9 Move api errors to their own package and modify the typedef max furman 2019-12-15 23:54:25 -08:00
  • 6d6f496331 Allow no provisioners. Mariano Cano 2019-12-16 11:22:24 -08:00
  • ba11f6acb7 Update dependencies. Mariano Cano 2019-12-13 13:59:11 -08:00
  • d210082113 Use new version of nosql. Mariano Cano 2019-12-13 13:56:56 -08:00
  • 7ecb831e07 Add wrappers to identity methods in the ca package. Mariano Cano 2019-12-12 13:16:17 -08:00
  • 3f71b8debd Add mTLS test for identity client. Mariano Cano 2019-12-12 12:48:34 -08:00
  • 3717c7a8d3 Improve identity tests. Mariano Cano 2019-12-12 12:23:53 -08:00
  • 0d9a9e083e Add identity client and move identity to a new package. Mariano Cano 2019-12-11 20:23:44 -08:00
  • 89b216c21e Fix test. Mariano Cano 2019-12-11 18:24:32 -08:00
  • 96b6989658 Addapt test to api change. Mariano Cano 2019-12-11 18:21:20 -08:00
  • bde29b1bbd Addapt tests to the api change. Mariano Cano 2019-12-11 18:18:13 -08:00
  • 28b08ef46b Fail silently if the identity fails. Mariano Cano 2019-12-11 16:26:53 -08:00
  • 401fc20e96 Re-enable profiler. Mariano Cano 2019-12-11 16:26:38 -08:00
  • 623be4ef09 update cli dep max furman 2019-12-11 14:56:50 -08:00
  • 1f42637ba1 Merge pull request #143 from smallstep/expired-cert Max 2019-12-11 14:55:21 -08:00
  • 1e17ec7d33 Use x5cInsecure token for /ssh/check-host endpoint max furman 2019-12-09 23:14:56 -08:00
  • 7fe1eb8686 Add GetTransport to client. Mariano Cano 2019-12-10 16:34:24 -08:00
  • e841a86b48 Make sure to define the KeyID from the token if available. Mariano Cano 2019-12-10 16:34:01 -08:00
  • 014d2c7ccd Go mod tidy. Mariano Cano 2019-12-10 13:41:06 -08:00
  • 40ec0b435a Add method to create an ssh token. Mariano Cano 2019-12-10 13:40:14 -08:00
  • 8eeb82d0ce Store renew certificate in the database. Mariano Cano 2019-12-10 13:10:45 -08:00
  • 50152391a3 Add leeway in identity not before. Mariano Cano 2019-12-09 16:54:48 -08:00
  • 2676d525c4 redundant variable type def max furman 2019-12-09 12:54:32 -08:00
  • 83129fd59f Add quotes in configuration paths. Mariano Cano 2019-12-04 12:04:46 -08:00
  • 55237d635c Fix authority calling wrong revoke method max furman 2019-12-02 19:11:27 -05:00
  • b25cbbe6ca Create a custom client that sends a custom User-Agent. Mariano Cano 2019-11-27 17:30:06 -08:00
  • 15a222d354 Add missing unit tests for ssh. Mariano Cano 2019-11-27 14:48:34 -08:00
  • a049e1f7e7 Check at the cert type instead of at the body. Mariano Cano 2019-11-27 14:48:14 -08:00
  • c5e34f777c Replace /ssh/get-hosts to /ssh/hosts Mariano Cano 2019-11-27 14:27:23 -08:00
  • 967d113726 Add error marshaling tests. Mariano Cano 2019-11-27 12:25:40 -08:00
  • 1a94c0df94 Use default duration for host certificates identity files. Mariano Cano 2019-11-26 19:09:01 -08:00
  • f99d1007bc Update cli dependency. Mariano Cano 2019-11-26 18:53:16 -08:00
  • b97aeedb78 Fix tests. Mariano Cano 2019-11-26 18:48:28 -08:00
  • 92d1db1616 Make test compilable. Mariano Cano 2019-11-26 18:47:34 -08:00
  • b29dd3ad0c Update templates. Mariano Cano 2019-11-26 18:47:10 -08:00
  • 5d35586402 Update template tests. Mariano Cano 2019-11-26 18:44:43 -08:00
  • 0528971693 Fix api tests. Mariano Cano 2019-11-26 18:15:34 -08:00
  • bf3b557bad Make identity duration the same as the SSH cert. Mariano Cano 2019-11-26 17:45:32 -08:00
  • 02dd66e2a9 extraneous new line max furman 2019-11-26 11:55:18 -05:00
  • e88034bea4 Update templates. Mariano Cano 2019-11-25 19:59:53 -08:00
  • 864dd3cf1f Fix extra write header. Mariano Cano 2019-11-21 19:06:19 -08:00
  • 87ce2c9b4b Add Identity helpers. Mariano Cano 2019-11-20 19:11:54 -08:00
  • c2a3bcfab5 resolving merge max furman 2019-11-20 17:26:04 -08:00
  • 927784237d Use an actual Hosts type when returning ssh hosts max furman 2019-11-20 17:23:51 -08:00
  • 012f64cdad Add version support to the ca.Client. Mariano Cano 2019-11-20 17:15:48 -08:00
  • 7a06a60f88 Add missing version.go file. Mariano Cano 2019-11-20 17:02:06 -08:00
  • 2f18a26d4f Add version endpoint. Mariano Cano 2019-11-20 17:01:31 -08:00
  • 80ee3645c4 Fix directory permissions. Mariano Cano 2019-11-20 16:03:31 -08:00
  • 35912cc906 change func def for getSSHHosts max furman 2019-11-20 12:59:48 -08:00
  • 3fda081e42 Add identity certificate in ssh response. Mariano Cano 2019-11-20 11:51:25 -08:00