Commit graph

2382 commits

Author SHA1 Message Date
Mariano Cano
ead394fba7 Add strategy to retry the sign operation if the key is not yet ready 2021-10-20 18:09:50 -07:00
Carl Tashian
66a8158f26
Update README.md 2021-10-20 15:53:04 -07:00
max furman
da3c6af10f changelog update 2021-10-20 14:31:33 -07:00
max furman
5c71e8a0ee [action] replace goreleaser complicated build targets with 'targets' 2021-10-20 14:10:40 -07:00
max furman
12b32b0a90 Changelog update for v0.17.5 2021-10-20 13:41:26 -07:00
Carl Tashian
6f16938774
Update README.md
* Add SCEP support
* Fix ACME tutorial URLs
2021-10-19 16:53:41 -07:00
Carl Tashian
655d7f59fd install-step-ra.sh: Properly quote the RA DNS names in ca.json 2021-10-19 16:14:41 -07:00
Carl Tashian
482482e717 install-step-ra.sh: Don't try to create a JWK provisioner, because the web app's OAuth flow doesn't support OOB with STEP_CONSOLE=true. 2021-10-19 15:22:30 -07:00
Mariano Cano
48efd94994
Merge pull request #723 from smallstep/keep-alive
Use Golang's default keepalive.
2021-10-15 14:31:52 -07:00
Mariano Cano
36b622bfc2 Use Golang's default keep-alive.
Since Go 1.13 a net.Listen keep-alive is enabled by default if
the protocol and OS supports it. The new one is 15s to match
the net.Dial default one. Previously http.Server ListenAndServe
and ListenAndServeTLS used to add a wrapper with 3m that we
replicated.

See https://github.com/golang/go/issues/31510
2021-10-15 14:12:43 -07:00
Mariano Cano
59d8d805d5
Merge pull request #722 from smallstep/keyvault-api
Allow to configure azurekms using the URI
2021-10-13 13:09:11 -07:00
Mariano Cano
edd475b81b Allow to configure azurekms using the URI
With an URI, azurekms can be configured with client credentials,
and it can define a default vault and protection level.
2021-10-12 18:24:58 -07:00
Max
710f76cb00
Merge pull request #721 from smallstep/max/simplify-releases
[action] Simplify goreleaser targets
2021-10-12 19:43:06 -04:00
max furman
9f8ffcf196 [action] remove windows_amd64, add freebsd_amd64 2021-10-12 16:40:24 -07:00
Mariano Cano
e3220232a0
Merge pull request #717 from smallstep/keyvault
Azure Key Vault KMS
2021-10-12 15:58:32 -07:00
max furman
02d601861b [action] Simply goreleaser targets 2021-10-12 15:44:04 -07:00
Mariano Cano
44f0d61354 Fix typo. 2021-10-12 15:41:41 -07:00
Mariano Cano
a2b03083c8 Fix gocritic warnings. 2021-10-12 15:28:08 -07:00
Mariano Cano
2aee71b4c0 Fix typo. 2021-10-12 15:18:17 -07:00
Mariano Cano
e15b5faf7d Merge branch 'master' into keyvault 2021-10-12 15:15:35 -07:00
Mariano Cano
5d0bd7d155 Fix grammar in comments. 2021-10-12 15:14:01 -07:00
Mariano Cano
781d5fb6e8 Fix creation of ssh certificates on step ca init. 2021-10-08 14:25:24 -07:00
Max
04fe3126be
Merge pull request #720 from smallstep/max/lint
Introduce gocritic linter and address warnings
2021-10-08 15:55:51 -04:00
max furman
bdc9ffbe90 changelog update 2021-10-08 15:44:04 -04:00
max furman
5fc24c697c Fix a few more linter warnings and remove GOFLAGS from make lint 2021-10-08 15:26:01 -04:00
max furman
933b40a02a Introduce gocritic linter and address warnings 2021-10-08 14:59:57 -04:00
Mariano Cano
ca59ee43c5 Update changelog. 2021-10-07 17:41:33 -07:00
Mariano Cano
f6e69bf826 Fix typo. 2021-10-07 17:37:47 -07:00
Mariano Cano
c638c282d8 Add omitempty to KMS options. 2021-10-07 17:30:28 -07:00
Mariano Cano
ece67fefff Add support for kms in pki package.
Adding support to kms in the pki packages opens the door to use
kms implementations in `step ca init`
2021-10-07 17:28:39 -07:00
Mariano Cano
822a1e3bdb Add variable with the default implementation. 2021-10-07 17:23:56 -07:00
Mariano Cano
d8720c3723 Update linkedca package. 2021-10-07 17:21:40 -07:00
Mariano Cano
2240ebbadc Add NameValidator interface and implement it for azurekms. 2021-10-07 17:19:55 -07:00
Mariano Cano
abdb56065d Allow o specify an hsm using the uri. 2021-10-07 16:18:36 -07:00
Mariano Cano
f1ef3fb351 Add GetBool(s string) bool to URI type. 2021-10-07 15:48:11 -07:00
Mariano Cano
500b540406 Remove unused code. 2021-10-07 15:35:21 -07:00
Mariano Cano
2026787ce4 Add some extra coverage. 2021-10-07 15:01:11 -07:00
Mariano Cano
52a18e0c2d Add key name to CreateCertificateAuthority 2021-10-07 14:19:39 -07:00
Mariano Cano
9cb1f213d8
Merge pull request #719 from smallstep/ui-windows
Initialize windows terminal on all binaries.
2021-10-07 12:48:57 -07:00
Mariano Cano
205148ad1f Fix exit after defer. 2021-10-07 12:43:24 -07:00
Mariano Cano
48549bf317 Initialize windows terminal on all binaries. 2021-10-07 11:09:32 -07:00
Mariano Cano
08c9902f29 Add new alias in the kms package. 2021-10-06 18:42:01 -07:00
Mariano Cano
505b1f3678 Add new test case with a version in the opaque string. 2021-10-06 18:41:31 -07:00
Mariano Cano
d2581489a3 Redefine uris and set proper type.
URIs will now have the form:

  - azurekms:name=my-key;vault=my-vault
  - azurekms:name=my-key;vault=my-vault?version=my-version
2021-10-06 18:39:12 -07:00
Mariano Cano
656099c4f0 Add type for azurekms. 2021-10-06 18:38:32 -07:00
Mariano Cano
56c3559e52 Add some extra coverage. 2021-10-05 20:41:55 -07:00
Mariano Cano
6389100325 Add unit tests for azurekms. 2021-10-05 20:35:52 -07:00
Mariano Cano
97d08a1b61 Fix typos. 2021-10-05 17:11:23 -07:00
Mariano Cano
d02cb1c869 Enable azurekms. 2021-10-05 17:09:40 -07:00
Mariano Cano
392a18465f Add initial implementation of Azure Key Vault KMS.
Fixes #462
2021-10-05 17:06:17 -07:00