alexvanin/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity
3383 commits 34 branches 199 tags 41 MiB
Commit graph

36 commits

Author SHA1 Message Date
Mariano Cano
39f46d31b9
Remove deprecated binaries 
This commit removes the following deprecated binaries:

 - step-awskms-init
 - step-cloudkms-init
 - step-pkcs11-init
 - step-yubikey-init

From now on step and step-kms-plugin should be used to initialize the
PKI in AWS KMS, GCP KMS, PKCS#11 modules or YubiKeys.

A future commit will add step-kms-plugin to the docker images of
step-ca.

Fixes #1046
 2023-01-23 16:30:55 -08:00
Carl Tashian
2ab9483952
Only pass --admin-subject if --remote-management is true; fix overall boolean handling 2023-01-11 11:19:39 -08:00
Carl Tashian
dc8b196823
Print admin username and pw after init 2023-01-10 09:57:47 -08:00
Carl Tashian
328276eaeb
Shred provisioner password 2023-01-09 18:01:14 -08:00
Carl Tashian
ad5cbd9a0e
Print and delete provisioner password on setup 2023-01-09 17:59:33 -08:00
Carl Tashian
a017238874
No need for PROVISIONER_PWDPATH 2023-01-09 17:23:47 -08:00
Carl Tashian
313bf2354b
Check for existance of pwdpath before copying 2023-01-09 17:08:24 -08:00
Carl Tashian
640bd0b7c7
Tabs to spaces 2023-01-09 16:51:36 -08:00
Carl Tashian
c836c7ab40
Backward compatibility 2023-01-09 16:48:31 -08:00
Carl Tashian
8242895909
Update hsm dockerfile as well 2023-01-09 16:39:34 -08:00
Carl Tashian
844cfd3bad
Generate and use independent provisioner and private key passwords 2023-01-09 16:36:00 -08:00
Herman Slatman
4e3a6e67f1
Add env vars for enabling Remote Management and ACME provisioner. 
A `step-ca` instance created in a container can now be initialized
with Remote Management by setting `DOCKER_STEPCA_INIT_REMOTE_MANAGEMENT`.
An ACME provisioner with default settings can be created at initialization
by setting `DOCKER_STEPCA_INIT_ACME`.
 2022-12-07 22:00:39 -07:00
Mariano Cano
18555a3cb2
Split build and download in Dockerfiles 
On systems with low resources the command `go mod download` can fail.
This causes long builds of the docker images. This change adds a new
layer in the docker build splitting the build and download in two
steps.

Fixes #1114
 2022-10-19 17:57:50 -07:00
Jakob Schlyter
c1425422dd include support for GCP and AWS KMS by default 2022-04-25 14:25:31 +02:00
Jakob Schlyter
df8eca2c19 space 2022-04-25 14:14:23 +02:00
Jakob Schlyter
66ba6048a4 start pcscd if installed 2022-04-24 11:08:51 +02:00
Jakob Schlyter
6ee48ca631 add pcsc-lite 2022-04-24 10:59:26 +02:00
Jakob Schlyter
221ced5c51 add Dockerfile for building with HSM support 2022-04-23 10:49:33 +02:00
Carl Tashian
f738cb43c3 Make the default provisioner name optional; change DNS names variable name 2021-08-18 13:37:58 -07:00
Carl Tashian
4e8e4c638e Add newline to password file for readabiliy 2021-08-18 12:50:14 -07:00
Carl Tashian
bc63829111 Auto-generate password by default 2021-08-18 11:11:05 -07:00
Carl Tashian
7ab26c8303 Auto-generate password by default 2021-08-18 11:09:26 -07:00
Carl Tashian
8d52379771 New Dockerfile with entrypoint script for easy CA init 2021-08-17 17:17:28 -07:00
Carl Tashian
3b31c6d2f5 Change HEALTHCHECK to use step ca health. Change shell CMD exec to skip redundant /bin/sh -c 2020-09-08 09:44:35 -07:00
Carl Tashian
6ffc438ed1 Update Dockerfile.step-ca to match best practices 
- See https://docs.docker.com/develop/develop-images/dockerfile_best-practices/
- Added a .dockerignore file to reduce the build context size
- Added a HEALTHCHECK (curl the CA)
 2020-09-02 11:41:47 -07:00
Carl Tashian
9815a38a2c Fixes #344; also gets docker buildx working on both darwin & linux 2020-08-12 19:50:47 -07:00
Moritz Marquardt
da18defd94 Let step-ca bind to ports < 1024 2020-02-06 12:35:40 +00:00
max furman
2871d0b68b bump Docker to latest tag 2019-05-08 12:26:21 -07:00
Mariano Cano
c099795122 Revert use latest version as it does not yet exists. 2019-03-28 11:28:39 -07:00
Mariano Cano
ce54927dab Use latest tag. 2019-03-27 12:02:27 -07:00
Mariano Cano
f1dacc6b57 Remove deprecated script. 2019-03-27 11:04:51 -07:00
Mariano Cano
b5d67ab129 Remove exposed port, it depends on the configuration. 2019-03-27 11:02:33 -07:00
Mariano Cano
1579a87cc6 Remove unnecessary file. 2019-03-27 10:49:46 -07:00
Mariano Cano
2f661c0941 Update docker images and add docs on how to run step-ca on docker. 
Fixes #48
 2019-03-26 19:00:13 -07:00
max furman
8402b06119 bump step-cli container version in step-ca Dockerfile 2019-01-16 16:40:13 -08:00
max furman
f7154a9ba3 add Makefile build and deploy docker image for step-ca 2018-11-18 15:35:47 -08:00