alexvanin/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity
1743 commits 34 branches 199 tags 41 MiB
Commit graph

1743 commits

This branch
This branch
All branches
Author SHA1 Message Date
Mariano Cano
1ddddb6bc7 Permit linting and testing without CGO support. 
Use CGO for testing and building in travis.
Fixes #471
 2021-02-12 13:18:30 -08:00
Mariano Cano
ddd6bc16d7
Merge pull request #457 from smallstep/pkcs11 
Add support for PKCS #11 KMS.
 2021-02-12 12:33:54 -08:00
Mariano Cano
e446e22520 Remove extra default. 2021-02-11 19:25:16 -08:00
Mariano Cano
3648c3fab6 Fix error message when --kms is not passed. 2021-02-11 19:24:09 -08:00
Mariano Cano
d03c088ab7 Add test cases for uris with only the schema. 2021-02-11 19:14:35 -08:00
Mariano Cano
f6cbd9dc88 Fix typos. 2021-02-11 19:14:15 -08:00
Mariano Cano
b487edbd13 Clarify comment. 2021-02-11 17:38:14 -08:00
Mariano Cano
ebaeae9008 Avoid closing pkcs#11 context twice. 2021-02-08 19:16:57 -08:00
Mariano Cano
f289d1ee1f Update to crypto11 v1.2.4 
This version now includes my changes to delete a certificate.
 2021-02-08 12:01:21 -08:00
Carl Tashian
c1a2697806
Merge pull request #458 from smallstep/systemd 
Add systemd files
 2021-02-08 10:41:15 -08:00
Mariano Cano
f425a81d36 Enforce the use of id and label when generating objects. 2021-02-04 12:53:08 -08:00
Mariano Cano
dd6a43ad13 Add fake implementation of pkcs11 key manager without cgo. 
This allows other binaries to import pkcs11 directly even if they
are compiled without cgo.
 2021-02-04 12:32:30 -08:00
Mariano Cano
4fbf7569fa Merge branch 'master' into pkcs11 2021-02-01 18:13:16 -08:00
Mariano Cano
1d47a7284d Upgrade nosql with a version of badger compatible with 32bits 2021-02-01 18:09:28 -08:00
Mariano Cano
fbd2208044 Close key manager for safe reloads when a cgo module is used. 2021-02-01 17:14:44 -08:00
Mariano Cano
97c8cd10cd Test with CGO enabled 2021-02-01 17:04:07 -08:00
Mariano Cano
1d2146166b Close key manager. 2021-02-01 15:28:09 -08:00
Mariano Cano
3fdab93ab8 Add missing file. 2021-02-01 15:27:53 -08:00
Mariano Cano
a8260a3289 Add missing test. 2021-02-01 14:25:49 -08:00
Mariano Cano
41eff69fb3 Fix linting errors. 2021-02-01 14:22:53 -08:00
Mariano Cano
128d07f148 Use new GetEncoded method. 2021-02-01 14:17:39 -08:00
Mariano Cano
b28db61d5d Add missing close causing panic with softhsm2. 2021-02-01 14:16:55 -08:00
Mariano Cano
a74fc7a0b2 Remove unnecessary methods and add missing tests. 2021-02-01 14:16:08 -08:00
Carl Tashian
aaabdca61a Typofix 2021-02-01 13:47:55 -08:00
Carl Tashian
52a0edd29d Add readme 2021-02-01 13:11:14 -08:00
Carl Tashian
05daf22a1e Add SystemCallArchitectures=native 2021-02-01 13:07:52 -08:00
Carl Tashian
73fc350b84 Add note about PKCS#11 2021-02-01 11:56:24 -08:00
Mariano Cano
51ac28656e Fix protection level for host keys in cloudkms script. 
Fixes #460
 2021-01-29 16:11:25 -08:00
Mariano Cano
7f9d7eadc9 Attempt to delete key and certificate with the same name. 
Nitrokey will override the label of the key with the certificate one.
If they are stored with the same id.
 2021-01-29 13:31:07 -08:00
Mariano Cano
162c535705 Add option to not store certificates in the pkcs11 module. 2021-01-28 20:13:28 -08:00
Mariano Cano
50e9018a44 Fix missing return. 2021-01-28 19:53:25 -08:00
Mariano Cano
84a3c8c984 Rename nitrokey initialization to opensc. 2021-01-28 19:51:17 -08:00
Mariano Cano
b7afc92758 Complete tests. 2021-01-28 19:48:08 -08:00
Mariano Cano
3a479cb0e8 Add support for nitrokey. 2021-01-28 19:47:44 -08:00
Mariano Cano
e78d45a060 Add benchmarks for signing operations. 2021-01-28 19:46:48 -08:00
Mariano Cano
673675fa89 Convert pkcs11 tests to use tags. 2021-01-28 14:43:22 -08:00
Mariano Cano
6c113542c8 Fix ecdsa signature verification test. 2021-01-28 11:38:21 -08:00
Carl Tashian
9fd0964e1c Add SystemCallFilter=@system-service 2021-01-28 09:45:20 -08:00
Carl Tashian
2af73881d7 Add ProtectHome=true 2021-01-28 07:48:21 -08:00
Mariano Cano
35bf9b787e Implement ecdsa.VerifyASN1 to be compatible with go < 1.15 2021-01-27 20:35:42 -08:00
Mariano Cano
d9da150a5f Fix test. 2021-01-27 20:23:45 -08:00
Mariano Cano
294f84b8d4 Add initial set of unit tests for pkcs11 kms. 2021-01-27 20:17:14 -08:00
Carl Tashian
82f82d438c Add systemd files 2021-01-27 17:29:29 -08:00
Mariano Cano
6c0cf99b24 Upgrade nosql with a 32-bit version of badger. 2021-01-27 11:02:56 -08:00
Mariano Cano
a6c784d5dd Add missing pkcs11 package. 2021-01-26 20:15:57 -08:00
Mariano Cano
8dca652bc7 Add support for PKCS #11 KMS. 
The implementation works with YubiHSM2. Unit tests are still pending.

Fixes #301
 2021-01-26 20:03:53 -08:00
Mariano Cano
c61222de1d Upgrade nosql version. 
nosql has newer version of badgers v1 and v2.
 2021-01-21 18:03:55 -08:00
Max
fc93d60c5d
Merge pull request #453 from smallstep/max/csr-san-empty 
Allow empty SAN in CSR for validation ...
 2021-01-14 19:30:11 -06:00
max furman
16665c97f0 Allow empty SAN in CSR for validation ... 
- The default template will always use the SANs from the token.
- If there are any SANs they must be validated against the token.
 2021-01-14 15:26:46 -06:00
Mariano Cano
00c6f08612
Merge pull request #440 from mkkeffeler/smallstep-by-provisioner-appendedcert 
Begins to fix issue 87
 2020-12-28 17:49:00 -08:00