35 commits

Author	SHA1	Message	Date
Ahmet DEMIR	16390694e1	feat(vault): adding hashicorp vault cas	2022-01-14 18:56:17 +01:00
Ahmet DEMIR	26d7b70957	feat(cas): add generic Config parameter to allow more flexible configuration on CAS	2022-01-13 20:31:37 +01:00
Mariano Cano	52a18e0c2d	Add key name to CreateCertificateAuthority	2021-10-07 14:19:39 -07:00
Mariano Cano	6d644880bd	Allow to kms signers to define the SignatureAlgorithm ... CloudKMS keys signs data using an specific signature algorithm, in RSA keys, this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate will fail unless the template SignatureCertificate is properly set. On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or RSA-PSS schemes, so right now the way to enforce one or the other is to used templates.	2021-09-08 17:48:50 -07:00
Mariano Cano	de719eb6f0	Add an option to avoid password prompts on step cas ... When we are using `step ca init` to create a stepcas RA we don't have access to the password for verify the provisioner.	2021-08-04 16:16:35 -07:00
Mariano Cano	35e6cc275a	Fix typos in comments.	2021-06-23 09:35:14 +02:00
Mariano Cano	ac3c754a6d	Use known CA and add tier and gcs bucket options.	2021-06-08 17:43:52 -07:00
Mariano Cano	529eb4bae9	Rename CAPool to CaPool.	2021-06-07 19:20:23 -07:00
Mariano Cano	072bd0dcf4	Add support for Google CAS v1	2021-06-03 19:31:19 -07:00
Herman Slatman	c5e4ea08b3	Merge branch 'master' into hs/scep	2021-03-26 15:22:41 +01:00
Mariano Cano	d9f93ccfde	Fix typo.	2021-03-24 12:06:29 -07:00
Mariano Cano	edc7c4d90e	Add support for password encrypted files	2021-03-23 17:54:42 -07:00
Mariano Cano	ce3e6bfdf6	Fix linting errors.	2021-03-22 13:45:20 -07:00
Mariano Cano	96de4e6ec8	Return a non-implemented error in stepcas.RenewCertificate.	2021-03-22 12:56:12 -07:00
Herman Slatman	583d60dc0d	Address (most) PR comments	2021-03-21 16:42:41 +01:00
Mariano Cano	bcf70206ac	Add support for revocation using an extra provisioner in the RA.	2021-03-17 19:47:36 -07:00
Mariano Cano	a6115e29c2	Add initial implementation of StepCAS. ... StepCAS allows to configure step-ca as an RA using another step-ca as the main CA.	2021-03-17 19:33:35 -07:00
Herman Slatman	e1cab4966f	Improve initialization of SCEP authority	2021-03-12 15:49:39 +01:00
Herman Slatman	7ad90d10b3	Refactor initialization of SCEP authority	2021-02-26 00:32:21 +01:00
Miclain K Keffeler	7a1eb43bb1	Update options.go	2020-12-28 17:12:37 -06:00
Miclain Keffeler	7545b4a625	leverage intermediate_ca.crt for appending certs.	2020-12-23 22:41:10 -06:00
Mariano Cano	a97fab4119	Fix mispell.	2020-11-03 12:48:48 -08:00
Mariano Cano	4f9200cc47	Add missing docs.	2020-11-03 12:45:31 -08:00
Mariano Cano	2b4b902975	Add initial support for step ca init with cloud cas. ... Fixes smallstep/cli#363	2020-11-03 12:44:28 -08:00
Mariano Cano	9f21813dd6	Rename option.	2020-10-19 18:44:27 -07:00
Mariano Cano	8381e9bd17	Fix typos.	2020-10-05 17:20:22 -07:00
Mariano Cano	38fa780775	Add interface to get root certificate from CAS. ... This change makes easier the configuration of cloudCAS as it does not require to configure the root or intermediate certificate in the ca.json. CloudCAS will get the root certificate using the configured certificateAuthority.	2020-09-21 15:27:20 -07:00
Mariano Cano	fa099f2ae2	Change method name.	2020-09-21 15:11:25 -07:00
Mariano Cano	91aa1e87f1	Do not use go 1.15 methods.	2020-09-16 13:51:49 -07:00
Mariano Cano	8957e5e5a2	Add missing tests	2020-09-16 12:34:42 -07:00
Mariano Cano	01e6495f43	Add most of cloudcas unit tests and minor fixes.	2020-09-14 19:13:40 -07:00
Mariano Cano	8eff4e77a8	Comment request structs.	2020-09-14 19:12:49 -07:00
Mariano Cano	aad8f9e582	Pass issuer and signer to softCAS options. ... Remove commented code and initialize CAS properly. Minor fixes in CloudCAS.	2020-09-10 19:09:46 -07:00
Mariano Cano	c8d9cb0a1d	Complete cloudcas using CAS v1beta1.	2020-09-10 16:19:18 -07:00
Mariano Cano	1b1f73dec6	Early attempt to develop a CAS interface.	2020-09-08 19:26:32 -07:00