Mariano Cano
|
ab1cca03d7
|
Use new provisioners in authorize methods.
|
2019-03-06 15:04:28 -08:00 |
|
Mariano Cano
|
54ed49f072
|
Rename package.
|
2019-03-06 15:01:51 -08:00 |
|
Mariano Cano
|
c776ca3bd6
|
Use provisioner.Collection to store and request the provisioners.
|
2019-03-06 15:00:23 -08:00 |
|
Mariano Cano
|
34833d4fd5
|
Add validators from the authority package.
|
2019-03-06 14:58:46 -08:00 |
|
Mariano Cano
|
0dee841a4f
|
Complete first version of provisioner implementations.
|
2019-03-06 14:54:56 -08:00 |
|
Mariano Cano
|
7eb6eb1d3e
|
Complete provisioner.Claims with methods from authority.
|
2019-03-06 14:51:12 -08:00 |
|
Mariano Cano
|
fb77397fc7
|
Add new options to locate or list provisioners.
|
2019-03-06 14:50:13 -08:00 |
|
Mariano Cano
|
34ff388828
|
Use new types in config.
|
2019-03-06 14:49:25 -08:00 |
|
Mariano Cano
|
62dab7b6b8
|
Rename interface method.
|
2019-03-05 14:52:26 -08:00 |
|
Mariano Cano
|
5a8f78d9d0
|
Add support to collection to load the encrypted keys.
|
2019-03-05 14:45:57 -08:00 |
|
Mariano Cano
|
dd0376657c
|
Move collection to a new file.
|
2019-03-05 14:28:32 -08:00 |
|
Mariano Cano
|
4b2b6ffe32
|
Create the provisioner type used to englobe all different provisioners.
|
2019-03-05 12:42:49 -08:00 |
|
Mariano Cano
|
bed3132028
|
Move provisioner to authority/provisioner package.
|
2019-03-04 18:19:14 -08:00 |
|
Mariano Cano
|
fc0b2ca5a6
|
Revert "Move provisioners to authority/provisioner package."
This reverts commit f88d622a67.
|
2019-03-04 18:17:35 -08:00 |
|
Mariano Cano
|
f88d622a67
|
Move provisioners to authority/provisioner package.
|
2019-03-04 18:10:19 -08:00 |
|
Mariano Cano
|
a2a45f635b
|
Add initial implementation of an OIDC provisioner.
|
2019-03-04 17:58:20 -08:00 |
|
max furman
|
229e5908b7
|
Added test for different authority key id after renew
Also ran dep ensure.
|
2019-02-14 19:17:42 -08:00 |
|
Mariano Cano
|
d78febec7a
|
Fix extensions copy on renew
Fixes #36
|
2019-02-14 16:44:36 -08:00 |
|
max furman
|
7e43402575
|
bug fix: don't add common name to CSR validation claims in Sign
* added unit test for this case
|
2019-02-06 16:26:25 -08:00 |
|
max furman
|
3415a1fef8
|
move SplitSANs to cli
|
2019-02-05 19:32:01 -08:00 |
|
max furman
|
6937bfea7b
|
claims.SANS -> claims.SANs
|
2019-02-04 20:22:02 -08:00 |
|
max furman
|
93f39c64a0
|
backwards compat only when SANS empty
|
2019-02-04 20:02:56 -08:00 |
|
max furman
|
fe8c8614b2
|
SANS backwards compat when token missing sujbect SAN
|
2019-02-01 12:18:10 -06:00 |
|
max furman
|
e6e8443f3c
|
allow multiple identical SANs in cert
|
2019-01-31 11:20:21 -06:00 |
|
max furman
|
f0683c2e0a
|
Enable signing certificates with custom SANs
* validate against SANs in token. must be 1:1 equivalent.
|
2019-01-30 18:21:03 -06:00 |
|
Derrick Lyndon Pallas
|
7a5c4a1112
|
authority/provisioners: fix overflow on 32-bit systems
In Go, len returns signed ints, not unsigned ints; consequently, this code
comparison overflows on 32-bit systems, like ARM.
|
2019-01-28 00:54:15 +00:00 |
|
max furman
|
2c72ada610
|
remove dead code
|
2019-01-20 21:37:12 -08:00 |
|
max furman
|
6dc89f46d8
|
make Duration public
|
2019-01-20 21:33:14 -08:00 |
|
max furman
|
0615f7eb11
|
don't wrap time.Duration
|
2019-01-18 12:08:18 -08:00 |
|
max furman
|
4b742042ee
|
make Duration wrapper publicly accessible
|
2019-01-18 10:39:12 -08:00 |
|
Mariano Cano
|
e8ac3f4888
|
Add comment to differentiate GetRootCertificates and GetRoots.
|
2019-01-14 18:11:55 -08:00 |
|
Mariano Cano
|
6e620073f5
|
Rename method Empties to HasEmpties
|
2019-01-14 18:11:55 -08:00 |
|
max furman
|
cfbb2a6f41
|
method documentation grammar fix
|
2019-01-14 17:55:01 -08:00 |
|
Mariano Cano
|
518b597535
|
Remove mTLS client requirement in /roots and /federation
|
2019-01-11 19:08:08 -08:00 |
|
Mariano Cano
|
1763ede99d
|
Add tests for new methods.
|
2019-01-10 13:19:51 -08:00 |
|
Mariano Cano
|
d296cf95a9
|
Add mTLS request to get all the root CAs, not the federated ones.
|
2019-01-07 17:48:56 -08:00 |
|
Mariano Cano
|
98cc243a37
|
Add support for multiple roots.
|
2019-01-07 15:30:28 -08:00 |
|
Mariano Cano
|
722bcb7e7a
|
Add initial support for federated root certificates.
|
2019-01-04 17:51:32 -08:00 |
|
Mariano Cano
|
7e95fc0e45
|
Strip ports on audience check.
Services might have proxies behind them so we cannot rely on them.
Fixes #17
|
2018-12-21 15:27:22 -08:00 |
|
Mariano Cano
|
9b87e08faf
|
Do not require the port in the audience check.
Fixes #17
|
2018-12-21 14:04:22 -08:00 |
|
Mariano Cano
|
7da1d1adc2
|
Fix typo.
|
2018-11-01 15:51:20 -07:00 |
|
Mariano Cano
|
d6cad2a7f3
|
Add provisioner option to disable renewal.
Fixes smallstep/ca-component#108
|
2018-11-01 15:43:24 -07:00 |
|
max furman
|
c74fcd57a7
|
ca-component -> certificates
* fix redundant error check
* add README
|
2018-10-31 21:36:01 -07:00 |
|
Mariano Cano
|
428661f472
|
Use name instead of issuer in error message.
|
2018-10-30 15:25:52 -07:00 |
|
max furman
|
0d9dd2d14b
|
provisioner issuer -> name
|
2018-10-29 18:00:30 -07:00 |
|
Mariano Cano
|
ea0307239a
|
Fix dead code and add missing error check.
|
2018-10-26 15:05:37 -07:00 |
|
Mariano Cano
|
d574545d94
|
Format code with gofmt -s
|
2018-10-26 15:01:02 -07:00 |
|
max furman
|
7fa06643b2
|
change step provisioner OID and ASN1 representation
|
2018-10-26 14:24:16 -07:00 |
|
max furman
|
b457b15292
|
fix: omit empty claims in AuthConfig
|
2018-10-26 10:51:40 -07:00 |
|
max furman
|
ca6087145f
|
fix unit test
|
2018-10-25 23:55:31 -07:00 |
|