mbiryukova/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity
2242 commits 33 branches 197 tags 41 MiB
Commit graph

2242 commits

This branch
This branch
All branches
Author SHA1 Message Date
Raal Goff
8545adea92 change GenerateCertificateRevocationList to return DER, store DER in db instead of PEM, nicer PEM encoding of CRL, add Mock stubs 2021-11-02 13:26:07 +08:00
Raal Goff
56926b9012 initial support for CRL 2021-10-30 15:52:50 +08:00
Mariano Cano
24a6900de2
Merge pull request #613 from gdbelvin/extractable 
Extractable private keys and certs
 2021-10-29 15:44:41 -07:00
Mariano Cano
91fb57e8aa Add entry to changelog. 2021-10-29 15:09:53 -07:00
Mariano Cano
7ec1424cb6 Fix help. 2021-10-29 14:47:57 -07:00
Mariano Cano
8366b7ddf1 Revert "Remove extractable from StoreCertificate." 
This reverts commit 614ee79489.
 2021-10-29 14:45:10 -07:00
Mariano Cano
614ee79489 Remove extractable from StoreCertificate. 2021-10-29 12:02:24 -07:00
Mariano Cano
fa11e82b67 Add tests with extractable property. 2021-10-28 19:45:19 -07:00
Mariano Cano
886b9a1d8d Store the certificate passed. 2021-10-28 18:16:16 -07:00
Mariano Cano
aa80bf9f07 Merge branch 'smallstep_master' into extractable 2021-10-28 18:11:42 -07:00
Mariano Cano
6be383da34 Refactor pkcs#11 extractable certs and keys. 2021-10-28 18:04:11 -07:00
Mariano Cano
d68090ebce
Merge pull request #729 from smallstep/funcmap 
Use the common method for template functions
 2021-10-28 15:34:43 -07:00
Mariano Cano
cb4a2a5f9a Use the same method to return the templating functions. 2021-10-27 16:11:47 -07:00
Mariano Cano
cf4944ea8e
Merge pull request #728 from smallstep/env 
Remove "env" and "expandenv"
 2021-10-27 14:04:49 -07:00
Mariano Cano
9958e0645f Replace promptui with apache-compatible fork. 
Promptui depends on github.com/juju/ansiterm that is licensed under
LGPL. The fork replaces ansiterm.TabWriter with the one in the
standard library.
 2021-10-27 12:38:16 -07:00
Mariano Cano
0f63d43a91 Remove sprig "env" and "expandenv" functions. 2021-10-27 11:51:37 -07:00
Mariano Cano
0927e0d22a Upgrade go.step.sm/crypto dependency 
The new version removes "env" and "expandenv" sprig functions.
 2021-10-27 11:48:29 -07:00
Mariano Cano
b7d4b48316
Merge pull request #724 from smallstep/sign-with-retry 
Azure sign with retry
 2021-10-26 18:01:40 -07:00
Mariano Cano
bef50bd7d9 Fix typo in variable name. 2021-10-26 17:57:59 -07:00
Mariano Cano
ead394fba7 Add strategy to retry the sign operation if the key is not yet ready 2021-10-20 18:09:50 -07:00
Carl Tashian
66a8158f26
Update README.md 2021-10-20 15:53:04 -07:00
max furman
da3c6af10f changelog update 2021-10-20 14:31:33 -07:00
max furman
5c71e8a0ee [action] replace goreleaser complicated build targets with 'targets' 2021-10-20 14:10:40 -07:00
max furman
12b32b0a90 Changelog update for v0.17.5 2021-10-20 13:41:26 -07:00
Carl Tashian
6f16938774
Update README.md 
* Add SCEP support
* Fix ACME tutorial URLs
 2021-10-19 16:53:41 -07:00
Carl Tashian
655d7f59fd install-step-ra.sh: Properly quote the RA DNS names in ca.json 2021-10-19 16:14:41 -07:00
Carl Tashian
482482e717 install-step-ra.sh: Don't try to create a JWK provisioner, because the web app's OAuth flow doesn't support OOB with STEP_CONSOLE=true. 2021-10-19 15:22:30 -07:00
Mariano Cano
48efd94994
Merge pull request #723 from smallstep/keep-alive 
Use Golang's default keepalive.
 2021-10-15 14:31:52 -07:00
Mariano Cano
36b622bfc2 Use Golang's default keep-alive. 
Since Go 1.13 a net.Listen keep-alive is enabled by default if
the protocol and OS supports it. The new one is 15s to match
the net.Dial default one. Previously http.Server ListenAndServe
and ListenAndServeTLS used to add a wrapper with 3m that we
replicated.

See https://github.com/golang/go/issues/31510
 2021-10-15 14:12:43 -07:00
Mariano Cano
59d8d805d5
Merge pull request #722 from smallstep/keyvault-api 
Allow to configure azurekms using the URI
 2021-10-13 13:09:11 -07:00
Mariano Cano
edd475b81b Allow to configure azurekms using the URI 
With an URI, azurekms can be configured with client credentials,
and it can define a default vault and protection level.
 2021-10-12 18:24:58 -07:00
Max
710f76cb00
Merge pull request #721 from smallstep/max/simplify-releases 
[action] Simplify goreleaser targets
 2021-10-12 19:43:06 -04:00
max furman
9f8ffcf196 [action] remove windows_amd64, add freebsd_amd64 2021-10-12 16:40:24 -07:00
Mariano Cano
e3220232a0
Merge pull request #717 from smallstep/keyvault 
Azure Key Vault KMS
 2021-10-12 15:58:32 -07:00
max furman
02d601861b [action] Simply goreleaser targets 2021-10-12 15:44:04 -07:00
Mariano Cano
44f0d61354 Fix typo. 2021-10-12 15:41:41 -07:00
Mariano Cano
a2b03083c8 Fix gocritic warnings. 2021-10-12 15:28:08 -07:00
Mariano Cano
2aee71b4c0 Fix typo. 2021-10-12 15:18:17 -07:00
Mariano Cano
e15b5faf7d Merge branch 'master' into keyvault 2021-10-12 15:15:35 -07:00
Mariano Cano
5d0bd7d155 Fix grammar in comments. 2021-10-12 15:14:01 -07:00
Mariano Cano
781d5fb6e8 Fix creation of ssh certificates on step ca init. 2021-10-08 14:25:24 -07:00
Max
04fe3126be
Merge pull request #720 from smallstep/max/lint 
Introduce gocritic linter and address warnings
 2021-10-08 15:55:51 -04:00
max furman
bdc9ffbe90 changelog update 2021-10-08 15:44:04 -04:00
max furman
5fc24c697c Fix a few more linter warnings and remove GOFLAGS from make lint 2021-10-08 15:26:01 -04:00
max furman
933b40a02a Introduce gocritic linter and address warnings 2021-10-08 14:59:57 -04:00
Mariano Cano
ca59ee43c5 Update changelog. 2021-10-07 17:41:33 -07:00
Mariano Cano
f6e69bf826 Fix typo. 2021-10-07 17:37:47 -07:00
Mariano Cano
c638c282d8 Add omitempty to KMS options. 2021-10-07 17:30:28 -07:00
Mariano Cano
ece67fefff Add support for kms in pki package. 
Adding support to kms in the pki packages opens the door to use
kms implementations in `step ca init`
 2021-10-07 17:28:39 -07:00
Mariano Cano
822a1e3bdb Add variable with the default implementation. 2021-10-07 17:23:56 -07:00