certificates

Author	SHA1	Message	Date
Mariano Cano	e6fed5e0aa	Minor fixes and comments.	2020-07-21 14:18:05 -07:00
Mariano Cano	ca2fb42d68	Move options to the provisioner.	2020-07-21 14:18:05 -07:00
Mariano Cano	9f3acc254b	Set the token payload in the JWK provisioner.	2020-07-21 14:18:04 -07:00
Mariano Cano	ef0ed0ff95	Integrate simple templates in the JWK provisioner.	2020-07-21 14:18:04 -07:00
max furman	71d87b4e61	wip	2020-06-24 23:25:15 -07:00
max furman	3636ba3228	wip	2020-06-23 17:13:39 -07:00
max furman	1951669e13	wip	2020-06-23 11:10:45 -07:00
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	2020-01-28 13:29:40 -08:00
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	2020-01-28 13:29:40 -08:00
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	2020-01-28 13:29:39 -08:00
Mariano Cano	08eac1b00d	Make sure to define the KeyID from the token if available.	2020-01-28 13:29:39 -08:00
max furman	9caadbb341	Fix authority calling wrong revoke method	2020-01-28 13:29:39 -08:00
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	2020-01-28 13:28:16 -08:00
Mariano Cano	a86dc78b5d	Add missing comment.	2020-01-28 13:28:16 -08:00
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	2020-01-28 13:28:16 -08:00
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	2020-01-28 13:28:16 -08:00
max furman	29853ae016	sshpop provisioner + ssh renew \| revoke \| rekey first pass	2020-01-28 13:28:16 -08:00
max furman	d368791606	Add x5c provisioner capabilities	2019-10-14 14:51:37 -07:00
Mariano Cano	396b4222aa	Implement validator for ssh keys. Fixes #100	2019-09-10 17:04:13 -07:00
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	2019-09-05 23:06:01 +02:00
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer * Fixes #94 * In the future this should be configurable by provisioner	2019-08-27 14:44:59 -07:00
max furman	635c59ed24	Accept emails SANs	2019-08-23 15:59:30 -07:00
Mariano Cano	57a529cc1a	Allow to enable the SSH CA per provisioner	2019-08-05 11:40:27 -07:00
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	2019-07-31 17:03:33 -07:00
Mariano Cano	53f62f871c	Set not extensions to host certificates.	2019-07-29 16:36:46 -07:00
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. Update the interface for all the provisioners.	2019-07-29 15:54:07 -07:00
Mariano Cano	1c8f610ca9	Add initial implementation of an SSH CA using the JWK provisioner. Fixes smallstep/ca-component#187	2019-07-23 18:46:43 -07:00
Mariano Cano	f794dbeb93	Add support for GCP identity tokens.	2019-04-17 17:28:21 -07:00
max furman	ab4d569f36	Add /revoke API with interface db backend	2019-04-10 13:50:35 -07:00
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	2019-03-19 15:10:52 -07:00
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	2019-03-13 15:33:52 -07:00
Mariano Cano	23e6de57a2	Address comments in code review.	2019-03-13 11:26:18 -07:00
Mariano Cano	dce3100cfb	Add missing time in validation.	2019-03-11 11:12:47 -07:00
Mariano Cano	67c79fd014	Add tests for default provisioner.	2019-03-08 17:24:58 -08:00
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	2019-03-07 15:14:18 -08:00
Mariano Cano	d92a7f2948	Rename provisioner to jwk.	2019-03-06 18:36:35 -08:00
Mariano Cano	a1782733fe	Rename files.	2019-03-06 18:33:40 -08:00

37 commits