Commit graph

1212 commits

Author SHA1 Message Date
Mariano Cano
3ba1fbd881 Use local SplitSANs. 2020-07-21 14:18:04 -07:00
Mariano Cano
6eba0e0e0e Simplify default template. 2020-07-21 14:18:04 -07:00
Mariano Cano
abc0a63e32 Add wrapper around x509.CreateCertificate.
This wrapper generates some data if needed and cleans key usages
in templates.
2020-07-21 14:18:04 -07:00
Mariano Cano
3766702de9 Remove empty file. 2020-07-21 14:18:04 -07:00
Mariano Cano
208c351a39 Add sample leaf template. 2020-07-21 14:18:04 -07:00
Mariano Cano
70c0af8200 Use different options to load a template from a string or file. 2020-07-21 14:18:04 -07:00
Mariano Cano
738304bc6f Add support for SubjectalternativeName type.
Move code around and some fixes.
2020-07-21 14:18:04 -07:00
Mariano Cano
2556b57906 Add types for certificate flexibility.
This is a first implementation, not the final one.
2020-07-21 14:18:04 -07:00
Carl Tashian
c1e6c0285a
Merge pull request #325 from smallstep/readme-updates
README updates, round 2
2020-07-20 18:56:37 -05:00
Carl Tashian
912e298043 Whitelist -> Allowlist per https://tools.ietf.org/id/draft-knodel-terminology-01.html 2020-07-20 15:42:47 -07:00
Carl Tashian
ed89367fca Round 2 of README updates 2020-07-20 14:10:36 -07:00
Mariano Cano
51b9867c51
Merge pull request #318 from nop33/getting-started-docs-fixes
Getting Started docs fixes
2020-07-15 13:02:47 -07:00
Ilias Trichopoulos
7d5552f53e Fix service logs path 2020-07-14 08:48:43 +02:00
Ilias Trichopoulos
6d8b4a1b9a Fix service name 2020-07-14 08:48:18 +02:00
Ilias Trichopoulos
730639d2a3 Fix service user name
In `ExecStart` the user used us `smallstep` so the same user should be defined in `useradd`.
2020-07-14 08:48:18 +02:00
Carl Tashian
8875097931
Merge pull request #310 from smallstep/fix-docker-build
Fix Docker example build on Linux
2020-07-13 12:23:03 -05:00
Carl Tashian
15bbd1cf20 Remove libpcsclite-dev requirement 2020-07-13 09:29:35 -07:00
Carl Tashian
d0b9538bc5 WIP readme changes 2020-07-13 09:28:46 -07:00
Carl Tashian
8b0da33e27
Merge pull request #313 from smallstep/readme-update
First stab at a README update 😱
2020-07-13 09:45:21 -05:00
Max
fa8a808fc8
Merge pull request #314 from smallstep/max/rekey
A few last fixes and tests added for rekey/renew ...
2020-07-09 12:19:01 -07:00
max furman
fd05f3249b A few last fixes and tests added for rekey/renew ...
- remove all `renewOrRekey`
- explicitly test difference between renew and rekey (diff pub keys)
- add back tests for renew
2020-07-09 12:11:40 -07:00
Max
ea9bc493b8
Merge pull request #307 from dharanikumar-s/master
Add support for rekeying Fixes #292
2020-07-09 11:39:00 -07:00
Carl Tashian
4150ded4c1 First stab at a README update 😱 2020-07-08 18:42:43 -07:00
max furman
b5699892ad Add github response to frequenty asked questions doc
- security risks of exposing the OAuth Client Secret in the output of
  `step ca provisioner list`
2020-07-08 15:18:30 -07:00
dharanikumar-s
57fb0c80cf Removed calculating SubjectKeyIdentifier on Rekey 2020-07-08 12:52:53 +05:30
dharanikumar-s
dfda497929 Renamed RenewOrRekey to Rekey 2020-07-08 11:47:59 +05:30
Carl Tashian
4bde83a262 Fixes #295 2020-07-07 13:09:15 -07:00
dharanikumar-s
fe73154a20 Corrected misspelling 2020-07-05 22:50:02 +05:30
dharanikumar-s
a3b5211e0f gofmted the code 2020-07-05 22:40:36 +05:30
dharanikumar-s
0c21f0ae9e Added error check after GenerateDefaultKeyPair 2020-07-05 22:38:45 +05:30
dharanikumar-s
2479371c06 Added error check while marshalling public key 2020-07-05 22:37:29 +05:30
dharanikumar-s
b368a53149 Modified TestAuthority_Renew to TestAuthority_RenewOrRekey 2020-07-05 22:17:57 +05:30
dharanikumar-s
c8c3581e2f SubjectKeyIdentifier extention is calculated from public key passed to this function instead of copying from old certificate 2020-07-05 22:15:01 +05:30
dharanikumar-s
954fda657b Added renewOrRekey to mockAuthority. Added Test_caHandler_Rekey 2020-07-05 22:05:00 +05:30
dharanikumar-s
01a6469d25 Moved peer certificate check to the first line 2020-07-03 16:00:22 +05:30
dharanikumar-s
8f504483ce Added RenewOrRekey function based on @maraino suggestion. RenewOrReky is called from Renew. 2020-07-03 15:58:15 +05:30
Mariano Cano
6736ddee69 Use smallstep/cli v0.14.6 2020-07-02 13:55:00 -07:00
dharanikumar-s
3813f57b1a Add support for rekeying Fixes #292 2020-07-01 19:10:13 +05:30
max furman
e1fdd9300c go mod tidy 2020-06-30 18:01:31 -07:00
max furman
f5da56e19f Bump version of cli to v0.14.5. 2020-06-30 16:25:58 -07:00
Mariano Cano
900651503e
Merge pull request #305 from mkontani/fix/provisioner-type
docs: fix provisioner type
2020-06-29 12:43:02 -07:00
mkontani
feadaa6c56
docs: fix provisioner type
Signed-off-by: mkontani <itoama@live.jp>
2020-06-30 04:32:42 +09:00
max furman
84d9bf86f5 Add forceCN option in ACME provisioner doc 2020-06-26 10:42:13 -07:00
max furman
5752408618 Document the ACME, SSHPOP, X5C, and K8sSA provisioners.
- Fixes #266, #293, #294
2020-06-25 17:29:25 -07:00
max furman
b200e84967 Pull most recent cli and go mod tidy 2020-06-25 15:36:35 -07:00
Max
debce1cec2
Merge pull request #299 from smallstep/max/refactor
Refactor
2020-06-25 15:32:04 -07:00
max furman
accf1be7e9 wip 2020-06-25 14:02:24 -07:00
max furman
7a7825cfcb wip 2020-06-25 14:00:25 -07:00
max furman
71d87b4e61 wip 2020-06-24 23:25:15 -07:00
max furman
c7a6385913 Add authz capabilities table to provisioners doc 2020-06-24 14:13:03 -07:00