Commit graph

2214 commits

Author SHA1 Message Date
Mariano Cano
ead394fba7 Add strategy to retry the sign operation if the key is not yet ready 2021-10-20 18:09:50 -07:00
Mariano Cano
48efd94994
Merge pull request #723 from smallstep/keep-alive
Use Golang's default keepalive.
2021-10-15 14:31:52 -07:00
Mariano Cano
36b622bfc2 Use Golang's default keep-alive.
Since Go 1.13 a net.Listen keep-alive is enabled by default if
the protocol and OS supports it. The new one is 15s to match
the net.Dial default one. Previously http.Server ListenAndServe
and ListenAndServeTLS used to add a wrapper with 3m that we
replicated.

See https://github.com/golang/go/issues/31510
2021-10-15 14:12:43 -07:00
Mariano Cano
59d8d805d5
Merge pull request #722 from smallstep/keyvault-api
Allow to configure azurekms using the URI
2021-10-13 13:09:11 -07:00
Mariano Cano
edd475b81b Allow to configure azurekms using the URI
With an URI, azurekms can be configured with client credentials,
and it can define a default vault and protection level.
2021-10-12 18:24:58 -07:00
Max
710f76cb00
Merge pull request #721 from smallstep/max/simplify-releases
[action] Simplify goreleaser targets
2021-10-12 19:43:06 -04:00
max furman
9f8ffcf196 [action] remove windows_amd64, add freebsd_amd64 2021-10-12 16:40:24 -07:00
Mariano Cano
e3220232a0
Merge pull request #717 from smallstep/keyvault
Azure Key Vault KMS
2021-10-12 15:58:32 -07:00
max furman
02d601861b [action] Simply goreleaser targets 2021-10-12 15:44:04 -07:00
Mariano Cano
44f0d61354 Fix typo. 2021-10-12 15:41:41 -07:00
Mariano Cano
a2b03083c8 Fix gocritic warnings. 2021-10-12 15:28:08 -07:00
Mariano Cano
2aee71b4c0 Fix typo. 2021-10-12 15:18:17 -07:00
Mariano Cano
e15b5faf7d Merge branch 'master' into keyvault 2021-10-12 15:15:35 -07:00
Mariano Cano
5d0bd7d155 Fix grammar in comments. 2021-10-12 15:14:01 -07:00
Mariano Cano
781d5fb6e8 Fix creation of ssh certificates on step ca init. 2021-10-08 14:25:24 -07:00
Max
04fe3126be
Merge pull request #720 from smallstep/max/lint
Introduce gocritic linter and address warnings
2021-10-08 15:55:51 -04:00
max furman
bdc9ffbe90 changelog update 2021-10-08 15:44:04 -04:00
max furman
5fc24c697c Fix a few more linter warnings and remove GOFLAGS from make lint 2021-10-08 15:26:01 -04:00
max furman
933b40a02a Introduce gocritic linter and address warnings 2021-10-08 14:59:57 -04:00
Mariano Cano
ca59ee43c5 Update changelog. 2021-10-07 17:41:33 -07:00
Mariano Cano
f6e69bf826 Fix typo. 2021-10-07 17:37:47 -07:00
Mariano Cano
c638c282d8 Add omitempty to KMS options. 2021-10-07 17:30:28 -07:00
Mariano Cano
ece67fefff Add support for kms in pki package.
Adding support to kms in the pki packages opens the door to use
kms implementations in `step ca init`
2021-10-07 17:28:39 -07:00
Mariano Cano
822a1e3bdb Add variable with the default implementation. 2021-10-07 17:23:56 -07:00
Mariano Cano
d8720c3723 Update linkedca package. 2021-10-07 17:21:40 -07:00
Mariano Cano
2240ebbadc Add NameValidator interface and implement it for azurekms. 2021-10-07 17:19:55 -07:00
Mariano Cano
abdb56065d Allow o specify an hsm using the uri. 2021-10-07 16:18:36 -07:00
Mariano Cano
f1ef3fb351 Add GetBool(s string) bool to URI type. 2021-10-07 15:48:11 -07:00
Mariano Cano
500b540406 Remove unused code. 2021-10-07 15:35:21 -07:00
Mariano Cano
2026787ce4 Add some extra coverage. 2021-10-07 15:01:11 -07:00
Mariano Cano
52a18e0c2d Add key name to CreateCertificateAuthority 2021-10-07 14:19:39 -07:00
Mariano Cano
9cb1f213d8
Merge pull request #719 from smallstep/ui-windows
Initialize windows terminal on all binaries.
2021-10-07 12:48:57 -07:00
Mariano Cano
205148ad1f Fix exit after defer. 2021-10-07 12:43:24 -07:00
Mariano Cano
48549bf317 Initialize windows terminal on all binaries. 2021-10-07 11:09:32 -07:00
Mariano Cano
08c9902f29 Add new alias in the kms package. 2021-10-06 18:42:01 -07:00
Mariano Cano
505b1f3678 Add new test case with a version in the opaque string. 2021-10-06 18:41:31 -07:00
Mariano Cano
d2581489a3 Redefine uris and set proper type.
URIs will now have the form:

  - azurekms:name=my-key;vault=my-vault
  - azurekms:name=my-key;vault=my-vault?version=my-version
2021-10-06 18:39:12 -07:00
Mariano Cano
656099c4f0 Add type for azurekms. 2021-10-06 18:38:32 -07:00
Mariano Cano
56c3559e52 Add some extra coverage. 2021-10-05 20:41:55 -07:00
Mariano Cano
6389100325 Add unit tests for azurekms. 2021-10-05 20:35:52 -07:00
Mariano Cano
97d08a1b61 Fix typos. 2021-10-05 17:11:23 -07:00
Mariano Cano
d02cb1c869 Enable azurekms. 2021-10-05 17:09:40 -07:00
Mariano Cano
392a18465f Add initial implementation of Azure Key Vault KMS.
Fixes #462
2021-10-05 17:06:17 -07:00
Mariano Cano
896fd5efae
Merge pull request #715 from smallstep/template-vars
Fix ssh template variables when CA is injected using options.
2021-09-29 10:43:20 -07:00
Mariano Cano
9fb6df3abb Fix ssh template variables when CA is injected using options. 2021-09-28 18:50:45 -07:00
max furman
afe1980d13 changelog update for 0.17.4 2021-09-28 16:15:23 -07:00
Mariano Cano
4a899fbafc
Merge pull request #714 from smallstep/host-or-user-only-ssh-ca
SSH host or SSH user only CA
2021-09-28 16:11:23 -07:00
Mariano Cano
42e2635848 Add entry in changelog. 2021-09-28 15:59:48 -07:00
Mariano Cano
aedd7fcc05 Be able to start a SSH host or SSH user only CA
In previous versions if the host or user CA is not configured, the
start of step-ca was crashing. This allows to configure a user or
host only ssh ca.
2021-09-28 15:07:09 -07:00
Max
3f44dae26a
Merge pull request #713 from smallstep/max/release
[action] update release URLs in header
2021-09-27 16:41:29 -07:00