Commit Graph

91 Commits

Author SHA1 Message Date
Vishal Nayak
0b2477d7cb Merge pull request #998 from chrishoffman/mssql
Sql Server (mssql) secret backend
2016-03-10 22:30:24 -05:00
Chris Hoffman
1d7fe31eac Adding verify_connection to config, docs updates, misc cleanup 2016-03-09 23:08:05 -05:00
Jeff Mitchell
2a698c7786 Merge pull request #1168 from hashicorp/revoke-force
Add forced revocation.
2016-03-09 16:59:52 -05:00
Jeff Mitchell
b2a89bf47c Add website docs 2016-03-09 12:49:12 -05:00
vishalnayak
16c4b52df3 Added docs for /sys/capabilities-accessor 2016-03-09 09:48:32 -05:00
vishalnayak
b5ca8ba5bc Documentation for capabilities and capabilities-self APIs 2016-03-07 06:13:56 -05:00
Jeff Mitchell
6b0c692385 Provide 'sys/step-down' and 'vault step-down'
This endpoint causes the node it's hit to step down from active duty.
It's a noop if the node isn't active or not running in HA mode. The node
will wait one second before attempting to reacquire the lock, to give
other nodes a chance to grab it.

Fixes #1093
2016-02-26 19:43:55 -05:00
captainill
c624c1c9e7 website: announcement banner for vault enterprise 2016-02-24 10:59:31 -08:00
Jeff Mitchell
5288057bb9 Update upgrade website section with information about the 0.5.1 PKI changes 2016-02-19 14:42:59 -05:00
Jeff Mitchell
3b9a30ab65 Add an install/upgrade section. Add general and 0.5 upgrade procedures. 2016-02-01 20:17:06 -05:00
Seth Vargo
a45ac74607 Add structured data 2016-01-24 13:37:20 -05:00
Jeff Mitchell
eaba2b9df3 Add C# library and do some reorg on the library page 2016-01-22 10:03:02 -05:00
Jeff Mitchell
e9538f1441 RootGeneration->GenerateRoot 2016-01-19 18:28:10 -05:00
Jeff Mitchell
4cc7694a3a Add the ability to generate root tokens via unseal keys. 2016-01-19 18:28:10 -05:00
captainill
99d70e995a capitol C in by hashicorp lockup 2015-12-19 21:21:18 -08:00
Jeff Mitchell
49d525ebf3 Reintroduce the ability to look up obfuscated values in the audit log
with a new endpoint '/sys/audit-hash', which returns the given input
string hashed with the given audit backend's hash function and salt
(currently, always HMAC-SHA256 and a backend-specific salt).

In the process of adding the HTTP handler, this also removes the custom
HTTP handlers for the other audit endpoints, which were simply
forwarding to the logical system backend. This means that the various
audit functions will now redirect correctly from a standby to master.
(Tests all pass.)

Fixes #784
2015-11-18 20:26:03 -05:00
captainill
2ac79f6632 sidebar 2015-11-09 21:08:05 -08:00
captainill
54a3c743d0 redesign header bulk 2015-11-09 20:58:06 -08:00
Jeff Mitchell
846c1975cc Remove revoke-self from sys API documentation as it's in the token-store instead 2015-10-21 10:46:41 -04:00
Sam Handler
8c23fd4ef9 use github_url to generate edit_this_page link 2015-10-07 17:39:08 -04:00
Sam Handler
493bf787a9 Add 'edit this page' link to footer 2015-09-24 14:10:32 -07:00
Jeff Mitchell
6c21b3b693 Remove JWT for the 0.3 release; it needs a lot of rework. 2015-09-24 16:23:44 -04:00
Jeff Mitchell
816214c4c9 Add revoke-self to docs 2015-09-24 12:05:00 -04:00
Dominic Luechinger
886c67892d Fixes docs for new JWT secret backend 2015-09-24 16:47:17 +02:00
Jeff Mitchell
c80fdb4bdc Add documentation for cubbyhole 2015-09-15 13:50:37 -04:00
Jeff Mitchell
12521eb87f Merge pull request #508 from mfischer-zd/webdoc_environment
docs: Document environment variables
2015-09-09 11:29:10 -04:00
Michael S. Fischer
eb494455ed docs: Document environment variables 2015-09-08 11:59:58 -07:00
vishalnayak
18db544d26 Vault SSH: Website doc v1. Removed path_echo 2015-08-12 09:25:28 -07:00
Armon Dadgar
b2d37df7f4 Merge pull request #464 from bgirardeau/master
Add Multi-factor authentication with Duo
2015-07-30 17:51:31 -07:00
Kevin Fishner
51c87c2345 update analytics 2015-07-28 16:05:27 -07:00
Bradley Girardeau
cf4fa83598 mfa: cleanup website documentation 2015-07-28 12:25:01 -07:00
Daniel Somerfield
180787cb63 Finished draft of api tutorial and worked it into the flow. 2015-07-19 12:29:06 -07:00
Daniel Somerfield
4039a7593b Added start of page in intro that explains / demos the REST apis 2015-07-15 06:28:04 -07:00
Armon Dadgar
e6cf9dcb63 website: help command is now path-help 2015-07-13 20:03:29 +10:00
Jeff Mitchell
1faaf20b92 A Cassandra secrets backend.
Supports creation and deletion of users in Cassandra using flexible CQL queries.

TLS, including client authentication, is supported.

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-30 09:04:01 -04:00
Jeff Mitchell
530b67bbb9 Initial PKI backend implementation.
Complete:
* Up-to-date API documents
* Backend configuration (root certificate and private key)
* Highly granular role configuration
* Certificate generation
* CN checking against role
* IP and DNS subject alternative names
* Server, client, and code signing usage types
* Later certificate (but not private key) retrieval
* CRL creation and update
* CRL/CA bare endpoints (for cert extensions)
* Revocation (both Vault-native and by serial number)
* CRL force-rotation endpoint

Missing:
* OCSP support (can't implement without changes in Vault)
* Unit tests

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Armon Dadgar
c94a0562c3 website: document key rotation internals 2015-05-29 15:34:29 -07:00
Armon Dadgar
200b30d28d website: document new system APIs 2015-05-29 15:05:05 -07:00
Ian Unruh
75eed4e4bd Add libraries section to HTTP docs 2015-05-22 14:32:14 -07:00
Armon Dadgar
712db294ff website: Adding LDAP docs 2015-05-11 10:43:03 -07:00
Armon Dadgar
c5955d7b40 website: adding keywhiz comparison. Fixes #79. 2015-05-02 15:05:23 -07:00
Armon Dadgar
f886a499d6 website: Adding KMS comparison. Fixes #56. 2015-05-02 14:27:35 -07:00
Mitchell Hashimoto
899eb248fc website: add build from source link to downloads 2015-04-28 09:56:35 -07:00
Mitchell Hashimoto
1fae5dddc3 website: add security disclosure page 2015-04-28 09:09:58 -07:00
Mitchell Hashimoto
ed47dd7b4a website: update google analytics 2015-04-27 17:11:58 -07:00
Armon Dadgar
91730ae8af website: Adding the syslog audit backend 2015-04-27 15:56:41 -07:00
Armon Dadgar
a1f294235f website: documenting token API 2015-04-25 20:21:59 -07:00
Armon Dadgar
3167d64aa0 website: make side bar match between inner pages 2015-04-25 19:09:08 -07:00
Armon Dadgar
cc69073b37 website: adding mysql docs skeleton 2015-04-25 12:10:53 -07:00
Armon Dadgar
cd65bbabb0 website: document cert backend 2015-04-24 10:52:25 -07:00