Commit graph

1211 commits

Author SHA1 Message Date
Mariano Cano
4e9bff0986 Add support for OIDC multitoken tenants for azure. 2020-04-24 14:36:32 -07:00
Mariano Cano
c7907a4626
Merge pull request #233 from smallstep/oidc-add-user-cert
Add support for user provisioner certificates on OIDC provisioners.
2020-04-24 10:54:25 -07:00
Mariano Cano
8bc3b05232 Add new extra test case. 2020-04-24 10:27:44 -07:00
Mariano Cano
b0ff731d18 Add support for user provisioner certificates on OIDC provisioners.
OIDC provisioners create an SSH certificate with two principals. This
was avoiding the creationg of user provisioner certificates for those
provisioners.

Fixes smallstep/cli#268
2020-04-23 19:42:55 -07:00
Max
59a57d487b
Merge pull request #232 from wishdev/fingerprint
Add root fingerprint to pki if certificate given
2020-04-23 14:49:06 -07:00
John W Higgins
d1f78cf6d2 Add root fingerprint to pki if certificate given
If a root certificate is provided to init an authority the fingerprint
is not currently stored in the default.json file. This patch simply
stores the fingerprint of the supplied certificate.
2020-04-23 13:47:41 -07:00
Max
00998d053d
Merge pull request #231 from smallstep/badgerV1+V2
Simultaneous support for Badger V1+V2 and ...
2020-04-21 10:16:22 -07:00
max furman
95b931bb52 Increase linter timeout limit ...
* Breaking in Travis
2020-04-21 10:10:33 -07:00
max furman
1a34e64c65 Try old method of installing golang linter ...
* Method from docs is broken in travis.
2020-04-21 09:59:54 -07:00
max furman
a179a72342 Update installer location of golangci-lint. 2020-04-21 09:39:48 -07:00
max furman
3c0970c28a Bump golangci-lint to v1.24.0 2020-04-21 09:35:57 -07:00
max furman
3be95a82d0 Update version of nosql. 2020-04-21 09:27:42 -07:00
Mariano Cano
7861069018 Fix command in distribution.md. 2020-04-20 17:42:29 -07:00
max furman
d51f254ee4 ValueLogLoadingMode -> FileLoading Mode badger 2020-04-20 16:09:07 -07:00
Mariano Cano
2993ccf16d
Merge pull request #230 from smallstep/empty-common-names
Remove the requirement for CSR to have a common name
2020-04-20 15:53:14 -07:00
Mariano Cano
a2dfa6faa8 Fix unit tests. 2020-04-20 12:29:23 -07:00
max furman
0573c00bd3 Simultaneous support for Badger V1+V2 and ...
* valueLogLoadingMode config for low RAM badger environments
2020-04-20 11:46:47 -07:00
Mariano Cano
13507efb35 Remove the requirement for CSR to have a common name.
Fixes #226
2020-04-20 10:43:33 -07:00
Mariano Cano
bcc5a91d17
Merge pull request #227 from smallstep/disable-forward-agent
Do not enable by default ForwardAgent
2020-04-15 17:27:18 -07:00
Mariano Cano
02ed784a9b Do not enable by default ForwardAgent. 2020-04-15 11:17:24 -07:00
max furman
348cf9b4e6 Small helm-chart distribuion update 2020-04-10 09:24:17 -07:00
max furman
fc50523779 go mod tidy 2020-04-09 20:57:04 -07:00
max furman
9679299a89 Fix version and travis_tag vars in build pipeline 2020-04-09 20:46:01 -07:00
max furman
4b8e2f5948 Tag v0.14.2 2020-04-09 18:14:24 -07:00
max furman
e03ce33cd9 go mod tidy and verify 2020-04-09 11:21:03 -07:00
max furman
17097eb9f0 Bump cli to v0.14.1 to break dependency cycle. 2020-04-09 11:04:28 -07:00
max furman
344e7b99fb bump cli dependency 2020-04-09 09:34:20 -07:00
max furman
aecddecf22 Simplify make bundling and generate ARM tarballs. 2020-04-08 14:20:58 -07:00
David Cowden
eb42ea90db ssh/api: Use host tags instead of groups
Tags are more flexible and what we use in the managed offering.
2020-04-03 12:11:19 -07:00
Mariano Cano
1d9edcd48f
Merge pull request #220 from smallstep/identity-cert-duration
Enforce a duration for identity certificates
2020-03-31 13:02:23 -07:00
Mariano Cano
bfe1f4952d Rename interface to CertificateEnforcer and add tests. 2020-03-31 11:41:36 -07:00
Mariano Cano
64f26c0f40 Enforce a duration for identity certificates. 2020-03-30 17:33:04 -07:00
Mariano Cano
041aeb7a90 Add simple rule to run step certificates. 2020-03-25 13:11:03 -07:00
Mariano Cano
83993d31d4
Merge pull request #214 from smallstep/build-with-go.1.13
Use go 1.13 to build certificates
2020-03-24 16:32:32 -07:00
Mariano Cano
1d7ab9145a Avoid lint error. 2020-03-24 14:33:01 -07:00
Mariano Cano
0b62ce9d0e Use go 1.13 to build certificates. 2020-03-24 14:23:02 -07:00
Mariano Cano
3480ed44c7 Upgrade github.com/x/crypto to fix a vulnerability in ssh.
* CVE-2020-9283
2020-03-24 14:17:44 -07:00
max furman
495e60a44b Extraneous fmt.Sprintf 2020-03-23 12:15:46 -07:00
max furman
0d9cd24d78 Slightly decrease version of golanci-lint to match brew. 2020-03-23 12:13:16 -07:00
max furman
fd80da6a8d Bump version of golangci-lint in make bootstrap. 2020-03-23 12:02:43 -07:00
Mariano Cano
ee1c8dd0cd
Merge pull request #207 from smallstep/add-context
Add context to ssh methods
2020-03-11 09:34:52 -07:00
Mariano Cano
fa416336a8 Add context to tests. 2020-03-10 19:17:32 -07:00
Mariano Cano
c49a9d5e33 Add context parameter to all SSH methods. 2020-03-10 19:01:45 -07:00
Carl Tashian
164e4ef2d0 Add Build From Source instructions 2020-03-09 13:24:02 -07:00
Mariano Cano
818c38188f
Merge pull request #204 from smallstep/ssh-cloud-identities
Allow custom principals on cloud identity provisioners
2020-03-05 19:16:34 -08:00
Mariano Cano
349bca06bb Fix line error due to deprecated DialTLS. 2020-03-05 15:11:03 -08:00
Mariano Cano
f868e07a76 Allow to use custom principals on cloud provisioners.
Fixes #203
2020-03-05 14:33:42 -08:00
Mariano Cano
f37554fddb Use go 1.14 2020-03-05 14:33:33 -08:00
Mariano Cano
f5d2f92099 Load identity certificate from disk in each connection. 2020-03-04 15:02:17 -08:00
Carl Tashian
a26d489abd
Merge pull request #199 from smallstep/faq-update
Update FAQ: "I already have PKI"
2020-03-02 09:46:10 -08:00