Mariano Cano
|
bfe1f4952d
|
Rename interface to CertificateEnforcer and add tests.
|
2020-03-31 11:41:36 -07:00 |
|
Mariano Cano
|
64f26c0f40
|
Enforce a duration for identity certificates.
|
2020-03-30 17:33:04 -07:00 |
|
Mariano Cano
|
fa416336a8
|
Add context to tests.
|
2020-03-10 19:17:32 -07:00 |
|
Mariano Cano
|
c49a9d5e33
|
Add context parameter to all SSH methods.
|
2020-03-10 19:01:45 -07:00 |
|
Mariano Cano
|
f868e07a76
|
Allow to use custom principals on cloud provisioners.
Fixes #203
|
2020-03-05 14:33:42 -08:00 |
|
Mariano Cano
|
59fc8cdd2d
|
Fix typo in comments.
|
2020-02-27 10:48:16 -08:00 |
|
Mariano Cano
|
5c8c741fab
|
Fix linting issues.
|
2020-02-14 11:46:31 -08:00 |
|
Mariano Cano
|
05cc1437b7
|
Remove unnecessary parse of certificate.
|
2020-02-13 17:48:43 -08:00 |
|
Mariano Cano
|
2d4f369db2
|
Add options to set root and federated certificates using x509.Certificate
|
2020-02-12 15:36:24 -08:00 |
|
Mariano Cano
|
43bd8113aa
|
Remove unnecessary comments.
|
2020-02-11 14:46:18 -08:00 |
|
Mariano Cano
|
4eaeede77d
|
Fix unit tests.
|
2020-02-11 14:05:37 -08:00 |
|
Mariano Cano
|
21bd339b86
|
Merge branch 'master' into kms
|
2020-02-11 13:20:35 -08:00 |
|
Mariano Cano
|
7846696fbb
|
Fix return sign options on ssh sign.
|
2020-01-29 11:58:47 -08:00 |
|
max furman
|
d482ae2fb5
|
Remove test that is no longer implemented by the method.
|
2020-01-28 13:29:40 -08:00 |
|
max furman
|
397a181d10
|
Add backdate validation to sshCertValidityValidator.
|
2020-01-28 13:29:40 -08:00 |
|
max furman
|
df60fe3f0d
|
Remove all references to old apiError.
|
2020-01-28 13:29:40 -08:00 |
|
max furman
|
1cb8bb3ae1
|
Simplify statuscoder error generators.
|
2020-01-28 13:29:40 -08:00 |
|
max furman
|
dccbdf3a90
|
Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
|
2020-01-28 13:29:40 -08:00 |
|
Mariano Cano
|
895d3054a3
|
Remove the use of custom x509 package.
Upgrade cli dependency.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
144acb9ee3
|
Remove debug statement.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
06411d1715
|
Add tests of profileLimitDuration with backdate.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
8297e5c717
|
Add tests for backdate and sshDefaultDuration
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
93b65bee7c
|
Add unit test for profileDefaultDuration.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
74b5d7f984
|
Add backdate support on ssh rekey.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
84ff172093
|
Add support for backdate to SSH certificates.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
5565d61bf3
|
Add fault tolerance against clock skew accross system on TLS certificates.
|
2020-01-28 13:29:39 -08:00 |
|
max furman
|
b9f6aacb0f
|
Move api errors to their own package and modify the typedef
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
f033422ffa
|
Allow no provisioners.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
f4615d6258
|
Addapt test to api change.
|
2020-01-28 13:29:39 -08:00 |
|
max furman
|
3ac388612a
|
Use x5cInsecure token for /ssh/check-host endpoint
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
08eac1b00d
|
Make sure to define the KeyID from the token if available.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
de3ba58455
|
Store renew certificate in the database.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
caa2b8dbb7
|
Add leeway in identity not before.
|
2020-01-28 13:29:39 -08:00 |
|
max furman
|
9caadbb341
|
Fix authority calling wrong revoke method
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
f26103d150
|
Make test compilable.
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
557a45abfa
|
Update template tests.
|
2020-01-28 13:29:39 -08:00 |
|
max furman
|
656f35e522
|
Use an actual Hosts type when returning ssh hosts
|
2020-01-28 13:29:39 -08:00 |
|
Mariano Cano
|
03bb26fb91
|
Add missing version.go file.
|
2020-01-28 13:28:17 -08:00 |
|
Mariano Cano
|
c60641701b
|
Add version endpoint.
|
2020-01-28 13:28:16 -08:00 |
|
max furman
|
f92bb06b6c
|
change func def for getSSHHosts
* continue to return all hosts if injection method not specified
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
11c8639782
|
Add identity certificate in ssh response.
|
2020-01-28 13:28:16 -08:00 |
|
max furman
|
d940ab7c20
|
Add getSSHHosts injection func
|
2020-01-28 13:28:16 -08:00 |
|
max furman
|
414a94b210
|
Instrument getIdentity func for OIDC ssh provisioner
|
2020-01-28 13:28:16 -08:00 |
|
max furman
|
3d970b45c8
|
remove printfs
|
2020-01-28 13:28:16 -08:00 |
|
max furman
|
f74cd04a6a
|
Add WithGetIdentityFunc option and attr to authority
* Add Identity type to provisioner
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
8bf3bf701e
|
Add support for /ssh/bastion method.
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
a6edcd0a3d
|
Make test to compile, they still fail.
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
000885dea7
|
Move Option type to a new file.
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
a86dc78b5d
|
Add missing comment.
|
2020-01-28 13:28:16 -08:00 |
|
Mariano Cano
|
7db7b1ee4c
|
Fix some provisioner tests
|
2020-01-28 13:28:16 -08:00 |
|