mbiryukova/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity
442 commits 33 branches 197 tags 41 MiB
Commit graph

442 commits

This branch
This branch
All branches
Author SHA1 Message Date
Mariano Cano
cd934bbede Remove println 2019-02-05 17:27:10 -08:00
max furman
6937bfea7b claims.SANS -> claims.SANs 2019-02-04 20:22:02 -08:00
max furman
93f39c64a0 backwards compat only when SANS empty 2019-02-04 20:02:56 -08:00
Mariano Cano
4c9dccd3f6 Allow multiple certificates in the root pem. 2019-02-04 10:29:52 -08:00
max furman
ab78534b08 add test for SAN backwards compatibility with CLI 
* new provisioner tokens always contain the crt.Subject.CommonName
in the SANS attribute of the token claims. added tests that verifies
backwards compatibility still works in cases where the token does not
contain the subject as a SAN claim.
 2019-02-01 12:24:21 -06:00
max furman
fe8c8614b2 SANS backwards compat when token missing sujbect SAN 2019-02-01 12:18:10 -06:00
max furman
e6e8443f3c allow multiple identical SANs in cert 2019-01-31 11:20:21 -06:00
max furman
f0683c2e0a Enable signing certificates with custom SANs 
* validate against SANs in token. must be 1:1 equivalent.
 2019-01-30 18:21:03 -06:00
Sebastian Tiedtke
55155d1207 Change readme formatting 2019-01-28 17:36:32 -06:00
Sebastian Tiedtke
754670ad12
Add basic federation example (#26) 
Add basic federation example
 2019-01-28 17:31:06 -06:00
Mariano Cano
025e36bf10
Merge pull request #28 from pallas/fix-overflow 
authority/provisioners: fix overflow on 32-bit systems
 2019-01-28 08:32:35 -08:00
Derrick Lyndon Pallas
7a5c4a1112 authority/provisioners: fix overflow on 32-bit systems 
In Go, len returns signed ints, not unsigned ints; consequently, this code
comparison overflows on 32-bit systems, like ARM.
 2019-01-28 00:54:15 +00:00
Mike Malone
e70a5dae7d updated README.md 2019-01-25 21:31:03 -08:00
Mike Malone
32c7be6f9d fixed mtls handshake diagram 2019-01-25 21:04:57 -08:00
Mike Malone
1f68bfe7ad mtls handshake diagram 2019-01-25 20:58:06 -08:00
Mike Malone
f58000c28f hello-mtls examples 2019-01-24 17:22:36 -08:00
Mike Malone
8e1505d03f new diagrams 2019-01-23 20:43:19 -08:00
Mike Malone
0fabc06fbb new demo gif 2019-01-23 18:33:56 -08:00
Mariano Cano
d394dd233a Initiate default RootCAs/ClientCAs when no options are passed. 2019-01-23 14:33:16 -08:00
Mike Malone
2c2f390e66 logo 2019-01-23 11:32:14 -08:00
Mariano Cano
25eba1a96c WIP on the safely rotate of root and federated certificates. 
Fixes #23
 2019-01-22 19:54:12 -08:00
Mike Malone
0bab651a52 architecture diagram rev'd 2019-01-22 16:08:57 -08:00
Mike Malone
c8ebacb8b7 architecture diagram 2019-01-22 15:59:41 -08:00
Max
88a3c4cf83
Merge pull request #25 from smallstep/Duration 
make Duration wrapper publicly accessible
 2019-01-20 21:40:45 -08:00
max furman
2c72ada610 remove dead code 2019-01-20 21:37:12 -08:00
max furman
6dc89f46d8 make Duration public 2019-01-20 21:33:14 -08:00
Michael Malone
45fb8de26f
Link to the right blog post in README.md 2019-01-18 23:45:43 -08:00
Mike Malone
1fe5612027 README updates 2019-01-18 19:28:20 -08:00
Mike Malone
2c91f1d2fc fixed autocert-init command 2019-01-18 17:55:03 -08:00
Mike Malone
d61c2ac3dd autocert-init for setup 2019-01-18 17:53:44 -08:00
max furman
0615f7eb11 don't wrap time.Duration 2019-01-18 12:08:18 -08:00
max furman
4b742042ee make Duration wrapper publicly accessible 2019-01-18 10:39:12 -08:00
Mike Malone
72e2388bcc readme cleanup 2019-01-17 16:48:09 -08:00
Mike Malone
98767422b1 added example to beginning of readme 2019-01-17 16:27:25 -08:00
Mike Malone
a9f7510640 readme cleanup 2019-01-17 16:20:56 -08:00
Mike Malone
042e36da65 autocert 2019-01-17 16:07:27 -08:00
Mariano Cano
bacbf85aa3 Add new bootstrap method that creates a listener. 2019-01-17 14:48:33 -08:00
Mariano Cano
984bf8d38c Add missing file. 2019-01-16 19:06:21 -08:00
Mariano Cano
1cc5e94666 Add simple test for federation. 2019-01-16 19:03:41 -08:00
max furman
8402b06119 bump step-cli container version in step-ca Dockerfile 2019-01-16 16:40:13 -08:00
max furman
7b9b091b18 don't need to update the brew formula for certificates updates 
* brew uses a tarball built by cli releases (not certificates)
 2019-01-15 12:12:28 -08:00
Mariano Cano
d0e0217955
Merge pull request #22 from smallstep/mariano/multiroot 
Multiple roots and federation
 2019-01-14 18:15:33 -08:00
Mariano Cano
e8ac3f4888 Add comment to differentiate GetRootCertificates and GetRoots. 2019-01-14 18:11:55 -08:00
Mariano Cano
6e620073f5 Rename method Empties to HasEmpties 2019-01-14 18:11:55 -08:00
max furman
cfbb2a6f41 method documentation grammar fix 2019-01-14 17:55:01 -08:00
Mariano Cano
dbd1bf11f1 Rename variable. 2019-01-14 17:35:38 -08:00
Sebastian Tiedtke
70f0a0e182 It's 2019 2019-01-14 15:12:07 -08:00
Mariano Cano
8252608ca2 Fix mock 2019-01-14 14:33:00 -08:00
Mariano Cano
7dc61bf233 Remove deprecated code 2019-01-11 19:13:06 -08:00
Mariano Cano
518b597535 Remove mTLS client requirement in /roots and /federation 2019-01-11 19:08:08 -08:00