mbiryukova/certificates

Author	SHA1	Message	Date
Mariano Cano	935d0d4542	Add support for backdate to SSH certificates.	2020-01-03 18:22:52 -08:00
Mariano Cano	e841a86b48	Make sure to define the KeyID from the token if available.	2019-12-10 16:34:01 -08:00
max furman	55237d635c	Fix authority calling wrong revoke method	2019-12-03 12:39:57 -05:00
max furman	8b2105a8f9	Instrument getIdentity func for OIDC ssh provisioner	2019-11-19 13:32:58 -08:00
Mariano Cano	be93c9e1f4	Add missing comment.	2019-11-14 15:27:12 -08:00
Mariano Cano	fcccb06696	Fix some provisioner tests	2019-11-14 15:26:37 -08:00
max furman	946094d2b7	Add multiuse capability to k8ssa provisioners	2019-11-06 15:54:04 -08:00
max furman	a9ea292bd4	sshpop provisioner + ssh renew \| revoke \| rekey first pass	2019-11-05 16:41:42 -08:00
max furman	d368791606	Add x5c provisioner capabilities	2019-10-14 14:51:37 -07:00
Mariano Cano	396b4222aa	Implement validator for ssh keys. Fixes #100	2019-09-10 17:04:13 -07:00
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	2019-09-05 23:06:01 +02:00
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer * Fixes #94 * In the future this should be configurable by provisioner	2019-08-27 14:44:59 -07:00
max furman	635c59ed24	Accept emails SANs	2019-08-23 15:59:30 -07:00
Mariano Cano	57a529cc1a	Allow to enable the SSH CA per provisioner	2019-08-05 11:40:27 -07:00
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	2019-07-31 17:03:33 -07:00
Mariano Cano	53f62f871c	Set not extensions to host certificates.	2019-07-29 16:36:46 -07:00
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. Update the interface for all the provisioners.	2019-07-29 15:54:07 -07:00
Mariano Cano	1c8f610ca9	Add initial implementation of an SSH CA using the JWK provisioner. Fixes smallstep/ca-component#187	2019-07-23 18:46:43 -07:00
Mariano Cano	f794dbeb93	Add support for GCP identity tokens.	2019-04-17 17:28:21 -07:00
max furman	ab4d569f36	Add /revoke API with interface db backend	2019-04-10 13:50:35 -07:00
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	2019-03-19 15:10:52 -07:00
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	2019-03-13 15:33:52 -07:00
Mariano Cano	23e6de57a2	Address comments in code review.	2019-03-13 11:26:18 -07:00
Mariano Cano	dce3100cfb	Add missing time in validation.	2019-03-11 11:12:47 -07:00
Mariano Cano	67c79fd014	Add tests for default provisioner.	2019-03-08 17:24:58 -08:00
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	2019-03-07 15:14:18 -08:00
Mariano Cano	d92a7f2948	Rename provisioner to jwk.	2019-03-06 18:36:35 -08:00
Mariano Cano	a1782733fe	Rename files.	2019-03-06 18:33:40 -08:00

28 commits