Mariano Cano
|
533ad0ca20
|
Use always go.step.sm/crypto/x509util
|
2020-08-11 17:59:33 -07:00 |
|
Mariano Cano
|
8c2d5425e7
|
Use new x509util on pki package.
|
2020-08-10 19:05:27 -07:00 |
|
Mariano Cano
|
3577d696c7
|
Use new x509util in tls_test.go
|
2020-08-10 18:14:32 -07:00 |
|
Mariano Cano
|
0a59efd853
|
Use new x509util to generate the CA certificate.
|
2020-08-10 16:09:22 -07:00 |
|
Mariano Cano
|
4943ae58d8
|
Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates.
|
2020-08-10 15:29:18 -07:00 |
|
Mariano Cano
|
77624c6b1c
|
Remove now migrated sshutil.
|
2020-08-10 11:29:04 -07:00 |
|
Mariano Cano
|
e83e47a91e
|
Use sshutil and randutil from go.step.sm/crypto.
|
2020-08-10 11:26:51 -07:00 |
|
Mariano Cano
|
ce1eb0a01b
|
Use new x509util for renew/rekey.
|
2020-08-05 19:09:06 -07:00 |
|
Mariano Cano
|
f437b86a7b
|
Merge branch 'cert-templates' into ssh-cert-templates
|
2020-08-05 18:43:07 -07:00 |
|
Mariano Cano
|
c8d225a763
|
Use x509util from go.step.sm/crypto/x509util
|
2020-08-05 16:02:46 -07:00 |
|
Mariano Cano
|
37f84e9bb3
|
Add delay in test.
|
2020-08-03 19:01:15 -07:00 |
|
Mariano Cano
|
342cb713ee
|
Add test with custom templates.
|
2020-08-03 18:51:47 -07:00 |
|
Mariano Cano
|
8d89bbd62f
|
Remove unused code.
|
2020-08-03 18:39:02 -07:00 |
|
Mariano Cano
|
c4bbc81d9f
|
Fix authority tests.
|
2020-08-03 18:36:05 -07:00 |
|
Mariano Cano
|
413af88aad
|
Fix provisioning tests.
|
2020-08-03 18:10:29 -07:00 |
|
Mariano Cano
|
b66bdfabcd
|
Enforce an OIDC users to send all template variables.
|
2020-08-03 15:28:48 -07:00 |
|
Mariano Cano
|
9822305bb6
|
Use only the IID template on IID provisioners.
Use always sshutil.DefaultIIDCertificate and require at least one
principal on IID provisioners.
|
2020-08-03 15:11:42 -07:00 |
|
Mariano Cano
|
53eea843bc
|
Fix newExtension comment.
|
2020-07-31 11:03:47 -07:00 |
|
Mariano Cano
|
7c3c16b7be
|
Fix UnmarshalJSON comment.
|
2020-07-31 11:00:17 -07:00 |
|
Mariano Cano
|
f1773489fc
|
Fix comment.
|
2020-07-31 10:45:59 -07:00 |
|
Mariano Cano
|
aa657cdb4b
|
Use SSHOptions inside provisioner options.
|
2020-07-30 18:44:52 -07:00 |
|
Mariano Cano
|
d82bdc1a00
|
Fix tests with criticalOptions.
|
2020-07-30 18:04:39 -07:00 |
|
Mariano Cano
|
02379d494b
|
Add support for extensions and critical options on the identity
function.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
8ff8d90f8c
|
On JWK and X5C validate the key id on the request.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
3b19bb9796
|
Add TemplateData to SSHSignRequest.
Add some omitempty tags.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
a78f7e8913
|
Add template support on k8ssa provisioner.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
6c36ceb158
|
Add initial template support for iid provisisioners.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
8e7bf96769
|
Fix error prefix.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
e0dce54338
|
Add missing argument.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
c1fc45c872
|
Simplify SSH modifiers with options.
It also changes the behavior of the request options to modify only
the validity of the certificate.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
df1f7e5a2e
|
Use CertificateRequest type as input for ssh NewCertificate.
SSH does not have a real concept of ssh certificate request, but
we are using the type to encapsulate the parameters coming in the
request.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
ad28f0f59a
|
Move variable where it is used.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
715eb4eacc
|
Add initial support for ssh templates on OIDC.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
c2dc76550c
|
Add ssh certificate template to X5C provisioner.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
380a0d6daf
|
Add ssh certificate templates to JWK provisioner.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
f75a12e10a
|
Add omitempty tag option.
|
2020-07-30 17:45:03 -07:00 |
|
Mariano Cano
|
d7e590908e
|
Use sshutil for ssh renewing and rekeying.
|
2020-07-30 17:45:02 -07:00 |
|
Mariano Cano
|
b66d123572
|
Use sshutil for SSH certificate signing.
|
2020-07-30 17:45:02 -07:00 |
|
Mariano Cano
|
570ede45e7
|
Do not enforce number of principals or extensions.
|
2020-07-30 17:45:02 -07:00 |
|
Mariano Cano
|
631f1612a1
|
Add TemplateData to SignSSHOptions.
|
2020-07-30 17:45:02 -07:00 |
|
Mariano Cano
|
fdd0eb6773
|
Create method CertTypeFromString(s string).
|
2020-07-30 17:45:02 -07:00 |
|
Mariano Cano
|
c6746425a3
|
Add methods to initialize ssh templates in provisioners.
|
2020-07-30 17:45:02 -07:00 |
|
Mariano Cano
|
af3eeb870e
|
Add package to generate ssh certificate for templates.
|
2020-07-30 17:45:02 -07:00 |
|
Mariano Cano
|
3e80f41c19
|
Change provisioner options to have X509 as a field.
|
2020-07-30 17:44:22 -07:00 |
|
Mariano Cano
|
a7b65f1e1e
|
Add authority.Sign test with custom templates.
|
2020-07-22 19:18:45 -07:00 |
|
Mariano Cano
|
6c64fb3ed2
|
Rename provisioner options structs:
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
|
2020-07-22 18:24:45 -07:00 |
|
Mariano Cano
|
e0dd1bd132
|
Fix typo and add extra test with all fields.
|
2020-07-22 16:57:38 -07:00 |
|
Mariano Cano
|
e4ca83e8f9
|
Add marshalers and unmarshalers of defined types.
`type A B` does not inherit the methods from B.
|
2020-07-22 15:47:00 -07:00 |
|
Mariano Cano
|
3964125d47
|
Fix unmarshaling of Subject and Issuer.
|
2020-07-22 13:04:05 -07:00 |
|
Mariano Cano
|
978ad7e2b6
|
Fix merged tests.
|
2020-07-21 14:34:55 -07:00 |
|