12 commits

Author	SHA1	Message	Date
Herman Slatman	9617edf0c2	Improve internationalized domain name handling ... This PR improves internationalized domain name handling according to rules of IDNA and based on the description in RFC 5280, section 7: https://datatracker.ietf.org/doc/html/rfc5280#section-7. Support for internationalized URI(s), so-called IRIs, still needs to be done.	2022-01-27 17:18:33 +01:00
Herman Slatman	512b8d6730	Refactor instantiation of policy engines ... Instead of using the `base` struct, the x509 and SSH policy engines are now added to each provisioner directly.	2022-01-25 16:45:25 +01:00
Herman Slatman	91d51c2b88	Add allow/deny to Nebula provisioner	2022-01-14 13:06:32 +01:00
Mariano Cano	0920224816	Fix error message.	2022-01-07 11:09:32 -08:00
Mariano Cano	449a9fdfd6	Address review comments.	2022-01-06 12:00:58 -08:00
Mariano Cano	b424aa3dc1	Add nebula header and use der version of certificate.	2022-01-06 11:19:46 -08:00
Mariano Cano	f49a4b326f	Add missing comments.	2022-01-05 10:54:09 -08:00
Mariano Cano	6600f1253e	Fix error messages after review.	2022-01-05 10:12:49 -08:00
Mariano Cano	76794ce613	Use default SANs without sans in the token. ... Fix step claim condition in SSH	2022-01-04 12:05:58 -08:00
Mariano Cano	9ec0276887	Update certificate set with new api.	2022-01-03 18:54:01 -08:00
Mariano Cano	cb72796a2d	Fix decoding of certificate.	2021-12-29 16:07:05 -08:00
Mariano Cano	32390a2964	Add initial implementation of a nebula provisioner. ... A nebula provisioner will generate a X509 or SSH certificate with the identities in the nebula certificate embedded in the token. The token is signed with the private key of the nebula certificate.	2021-12-29 14:12:03 -08:00