Commit Graph

894 Commits

Author SHA1 Message Date
Scott Miller
86ba0dbdeb Use go-secure-stdlib's RSA key generator backed by a DRBG (#29020)
* Use DRBG based RSA key generation everywhere

* switch to the conditional generator

* Use DRBG based RSA key generation everywhere

* switch to the conditional generator

* Add an ENV var to disable the DRBG in a pinch

* update go.mod

* Use DRBG based RSA key generation everywhere

* switch to the conditional generator

* Add an ENV var to disable the DRBG in a pinch

* Use DRBG based RSA key generation everywhere

* update go.mod

* fix import

* Remove rsa2 alias, remove test code

* move cryptoutil/rsa.go to sdk

* move imports too

* remove makefile change

* rsa2->rsa

* more rsa2->rsa, remove test code

* fix some overzelous search/replace

* Update to a real tag

* changelog

* copyright

* work around copyright check

* work around copyright check pt2

* bunch of dupe imports

* missing import

* wrong license

* fix go.mod conflict

* missed a spot

* dupe import
2024-12-05 15:39:16 -06:00
Victor Rodriguez
48cec9729d Enforce PKI issuer constraints. (#29045)
Add environment variable VAULT_DISABLE_PKI_CONSTRAINTS_VERIFICATION.

Setting VAULT_DISABLE_PKI_CONSTRAINTS_VERIFICATION=true will disable the cert
issuance/signing verification.
2024-11-27 18:34:26 +01:00
Victor Rodriguez
b2886d2a99 Revert "Perform validation when issuing or signing certificates. (#28921)" (#29041)
This reverts commit 31fc51c68f.
2024-11-27 16:22:20 +00:00
Victor Rodriguez
31fc51c68f Perform validation when issuing or signing certificates. (#28921)
Add environment variable VAULT_DISABLE_ISSUING_VERIFICATION.

Setting VAULT_DISABLE_ISSUING_VERIFICATION=true will disable the cert
issuance/signing verification.
2024-11-27 13:23:07 +00:00
kpcraig
71c2121317 Okta Dep Update (#28121)
Update okta to use v5 sdk instead of v2
---------

Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
2024-11-26 15:33:45 -05:00
Rachel Culpepper
a0ceaf6772 Add ml-dsa key type and stubs (#28961)
* add ml-dsa key type and stubs

* add in sdk changes

* ent breakout

* fix private key func and run go mod tidy

* change function name

* tidy go.mod

---------

Co-authored-by: Scott G. Miller <smiller@hashicorp.com>
2024-11-20 15:57:00 -06:00
Josh Black
2269cc3f7c remove hashicorp-forge/bbolt and replace with official beta release (#28916)
* remove hashicorp-forge/bbolt and replace with official beta release

* get rid of redundant method

* go mod tidy

* make proto
2024-11-18 11:18:50 -08:00
Steven Clark
c3d5c1b3ec Update to Go 1.23.3 (#28920)
* Update to Go 1.23.3

 - Update to latest major version of Go 1.23.3 from 1.22.8.
 - Update github.com/sasha-s/go-deadlock to address deadlock timer
   issue we were seeing.
 - Fix one of our tests to only reset the member variable we change
   instead of the entire Opts parameter to avoid a data race during
   testing.

* Add workaround for MSSQL TLS certificate container issue
2024-11-15 13:32:09 -05:00
hc-github-team-secure-vault-core
9cb10e41da Update vault-plugin-auth-azure to v0.19.2 (#28848)
* Update vault-plugin-auth-azure to v0.19.2

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-11-06 17:19:28 -05:00
vinay-gopalan
4688583754 upgrade GCP Auth to v0.19.1 (#28782) 2024-10-25 20:18:38 +00:00
vinay-gopalan
c62d24dfc7 upgrade GCP Secrets to v0.20.1 (#28781) 2024-10-25 20:12:29 +00:00
hc-github-team-secure-vault-core
a384eac192 Update vault-plugin-secrets-openldap to v0.14.3 (#28780)
* Update vault-plugin-secrets-openldap to v0.14.3

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-10-25 19:54:45 +00:00
Theron Voran
8f1850baa3 sdk: updating to docker v27.2.1 (#28456)
Also update to vault-testing-stepwise v0.3.2
2024-10-17 14:14:35 -07:00
Violet Hynes
33248ce9a1 VAULT-31789 Update proxy-proto version to 0.8.0 (#28729) 2024-10-17 15:46:20 -04:00
hc-github-team-secure-vault-core
6caff7a02e Update vault-plugin-auth-azure to v0.19.1 (#28712)
* Update vault-plugin-auth-azure to v0.19.1

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-10-15 16:30:54 +00:00
hc-github-team-secure-vault-core
0a13127dbe Update vault-plugin-secrets-openldap to v0.14.2 (#28704)
* Update vault-plugin-secrets-openldap to v0.14.2

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-10-14 16:50:28 -05:00
hc-github-team-secure-vault-core
fd96ac79b9 Update vault-plugin-secrets-azure to v0.20.1 (#28699)
* Update vault-plugin-secrets-azure to v0.20.1

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-10-14 16:31:09 +00:00
hc-github-team-secure-vault-core
2e6ba29f5b Update vault-plugin-secrets-openldap to v0.14.1 (#28479)
* Update vault-plugin-secrets-openldap to v0.14.1

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-23 20:43:27 +00:00
Violet Hynes
fdc871370d Update Okta SDK to latest minor version (#28407) 2024-09-17 16:12:23 -04:00
hc-github-team-secure-vault-core
7a5d99d316 Update vault-plugin-database-redis to v0.4.0 (#28404)
* Update vault-plugin-database-redis to v0.4.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-16 17:41:35 +00:00
hc-github-team-secure-vault-core
2b4e99fa75 Update vault-plugin-auth-kubernetes to v0.20.0 (#28289)
* Update vault-plugin-auth-kubernetes to v0.20.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 20:19:28 +00:00
hc-github-team-secure-vault-core
28d69301ca Update vault-plugin-secrets-gcpkms to v0.19.0 (#28360)
* Update vault-plugin-secrets-gcpkms to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 12:52:22 -07:00
Hamza Shili
9b99ac166b Update vault-plugin-auth-gcp to v0.19.0 (#28366)
* Update vault-plugin-auth-gcp to v0.19.0

* Add changelog
2024-09-11 19:09:50 +00:00
hc-github-team-secure-vault-core
2b8d079754 Update vault-plugin-secrets-ad to v0.19.0 (#28361)
---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 14:11:26 -04:00
hc-github-team-secure-vault-core
2e4c6ed1ee Update vault-plugin-secrets-mongodbatlas to v0.13.0 (#28348)
* Update vault-plugin-secrets-mongodbatlas to v0.13.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 12:36:37 -05:00
hc-github-team-secure-vault-core
ef43f03f4d Update vault-plugin-auth-jwt to v0.22.0 (#28349)
* Update vault-plugin-auth-jwt to v0.22.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-11 00:07:53 -05:00
Victor Rodriguez
28ca1ef7e1 Update API to v0.15.0 and SKD to v0.14.0. (#28340) 2024-09-10 18:50:48 +00:00
hc-github-team-secure-vault-core
45acb819e4 Update vault-plugin-secrets-kv to v0.20.0 (#28334)
* Update vault-plugin-secrets-kv to v0.20.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-10 09:32:28 -07:00
hc-github-team-secure-vault-core
149c78f705 Update vault-plugin-database-couchbase to v0.12.0 (#28327)
* Update vault-plugin-database-couchbase to v0.12.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-09 19:56:01 +00:00
hc-github-team-secure-vault-core
899c18be81 Update vault-plugin-secrets-openldap to v0.14.0 (#28325)
* Update vault-plugin-secrets-openldap to v0.14.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-09 12:17:28 -07:00
hc-github-team-secure-vault-core
d61510329e Update vault-plugin-secrets-gcp to v0.20.0 (#28324)
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-09 17:47:55 +00:00
hc-github-team-secure-vault-core
da4152eee9 Update vault-plugin-secrets-terraform to v0.10.0 (#28312)
* Update vault-plugin-secrets-terraform to v0.10.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-06 11:27:58 -07:00
hc-github-team-secure-vault-core
a3b354a180 Update vault-plugin-auth-oci to v0.17.0 (#28307)
* Update vault-plugin-auth-oci to v0.17.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-06 15:08:54 +00:00
hc-github-team-secure-vault-core
cbf08fdc15 Update vault-plugin-secrets-gcpkms to v0.18.0 (#28300)
* Update vault-plugin-secrets-gcpkms to v0.18.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-05 12:48:29 -07:00
Scott Miller
cbec86fba5 Update dependencies used by the crypto team (#28298) 2024-09-05 13:56:07 -05:00
hc-github-team-secure-vault-core
9c5d3ffc85 Update vault-plugin-auth-azure to v0.19.0 (#28294)
* Update vault-plugin-auth-azure to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-05 09:54:12 -07:00
hc-github-team-secure-vault-core
65bc18b2e9 Update vault-plugin-database-redis-elasticache to v0.5.0 (#28293)
* Update vault-plugin-database-redis-elasticache to v0.5.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-05 09:30:32 -07:00
Theron Voran
ffb88e93ce sdk: update to docker v26.1.5 (#28269)
Updates to plugincontainer@v0.4.0 in sdk/, and
vault-testing-stepwise@v0.3.1 in root, which updates vault/sdk and
vault itself to docker v26.1.5.
2024-09-05 15:51:25 +00:00
hc-github-team-secure-vault-core
b9c66c0809 Update vault-plugin-secrets-kubernetes to v0.9.0 (#28287)
* Update vault-plugin-secrets-kubernetes to v0.9.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-05 10:08:28 -04:00
hc-github-team-secure-vault-core
f6701b3672 Update vault-plugin-database-elasticsearch to v0.16.0 (#28277)
* Update vault-plugin-database-elasticsearch to v0.16.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-04 14:45:16 -07:00
hc-github-team-secure-vault-core
690520ad1b Update vault-plugin-database-snowflake to v0.12.0 (#28275)
* Update vault-plugin-database-snowflake to v0.12.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 19:40:48 +00:00
hc-github-team-secure-vault-core
68238ad424 Update vault-plugin-secrets-alicloud to v0.18.0 (#28271)
* Update vault-plugin-secrets-alicloud to v0.18.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 14:13:33 -05:00
hc-github-team-secure-vault-core
3ecc513d34 Update vault-plugin-database-mongodbatlas to v0.13.0 (#28268)
* Update vault-plugin-database-mongodbatlas to v0.13.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Milena Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
2024-09-04 09:55:05 -07:00
hc-github-team-secure-vault-core
61463f591e Update vault-plugin-secrets-azure to v0.20.0 (#28267)
* Update vault-plugin-secrets-azure to v0.20.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 09:31:47 -07:00
hc-github-team-secure-vault-core
42164dfc51 Update vault-plugin-auth-cf to v0.19.0 (#28266)
* Update vault-plugin-auth-cf to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 16:28:16 +00:00
hc-github-team-secure-vault-core
07dfe7716a Update vault-plugin-auth-kerberos to v0.13.0 (#28264)
* Update vault-plugin-auth-kerberos to v0.13.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-04 15:18:20 +00:00
hc-github-team-secure-vault-core
6bda443807 Update vault-plugin-auth-alicloud to v0.19.0 (#28263)
* Update vault-plugin-auth-alicloud to v0.19.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
2024-09-03 20:49:44 +00:00
Paul Banks
e962605055 Bump raft to 1.7.1 to include pre-vote fixes (#28218) 2024-08-29 14:20:51 +00:00
kpcraig
dc81de7ec8 Easy go-jose updates (the codeless[ish] ones) (#28140) 2024-08-21 14:25:07 -04:00
Max Levine
68e1617895 Bump vault-gcp-secrets-plugin (#28089)
Co-authored-by: divyaac <divya.chandrasekaran@hashicorp.com>
2024-08-19 15:17:00 -07:00