max furman
3415a1fef8
move SplitSANs to cli
2019-02-05 19:32:01 -08:00
Mariano Cano
975cb75fbd
Fix typo.
2019-02-05 17:33:16 -08:00
Mariano Cano
3c06d6f9bc
Fix comment.
2019-02-05 17:30:10 -08:00
Mariano Cano
e330ac547c
Fix comment.
2019-02-05 17:29:28 -08:00
Mariano Cano
cd934bbede
Remove println
2019-02-05 17:27:10 -08:00
max furman
6937bfea7b
claims.SANS -> claims.SANs
2019-02-04 20:22:02 -08:00
max furman
93f39c64a0
backwards compat only when SANS empty
2019-02-04 20:02:56 -08:00
Mariano Cano
4c9dccd3f6
Allow multiple certificates in the root pem.
2019-02-04 10:29:52 -08:00
max furman
ab78534b08
add test for SAN backwards compatibility with CLI
...
* new provisioner tokens always contain the crt.Subject.CommonName
in the SANS attribute of the token claims. added tests that verifies
backwards compatibility still works in cases where the token does not
contain the subject as a SAN claim.
2019-02-01 12:24:21 -06:00
max furman
fe8c8614b2
SANS backwards compat when token missing sujbect SAN
2019-02-01 12:18:10 -06:00
max furman
e6e8443f3c
allow multiple identical SANs in cert
2019-01-31 11:20:21 -06:00
max furman
f0683c2e0a
Enable signing certificates with custom SANs
...
* validate against SANs in token. must be 1:1 equivalent.
2019-01-30 18:21:03 -06:00
Sebastian Tiedtke
55155d1207
Change readme formatting
2019-01-28 17:36:32 -06:00
Sebastian Tiedtke
754670ad12
Add basic federation example ( #26 )
...
Add basic federation example
2019-01-28 17:31:06 -06:00
Mariano Cano
025e36bf10
Merge pull request #28 from pallas/fix-overflow
...
authority/provisioners: fix overflow on 32-bit systems
2019-01-28 08:32:35 -08:00
Derrick Lyndon Pallas
7a5c4a1112
authority/provisioners: fix overflow on 32-bit systems
...
In Go, len returns signed ints, not unsigned ints; consequently, this code
comparison overflows on 32-bit systems, like ARM.
2019-01-28 00:54:15 +00:00
Mike Malone
e70a5dae7d
updated README.md
2019-01-25 21:31:03 -08:00
Mike Malone
32c7be6f9d
fixed mtls handshake diagram
2019-01-25 21:04:57 -08:00
Mike Malone
1f68bfe7ad
mtls handshake diagram
2019-01-25 20:58:06 -08:00
Mike Malone
f58000c28f
hello-mtls examples
2019-01-24 17:22:36 -08:00
Mike Malone
8e1505d03f
new diagrams
2019-01-23 20:43:19 -08:00
Mike Malone
0fabc06fbb
new demo gif
2019-01-23 18:33:56 -08:00
Mariano Cano
d394dd233a
Initiate default RootCAs/ClientCAs when no options are passed.
2019-01-23 14:33:16 -08:00
Mike Malone
2c2f390e66
logo
2019-01-23 11:32:14 -08:00
Mariano Cano
25eba1a96c
WIP on the safely rotate of root and federated certificates.
...
Fixes #23
2019-01-22 19:54:12 -08:00
Mike Malone
0bab651a52
architecture diagram rev'd
2019-01-22 16:08:57 -08:00
Mike Malone
c8ebacb8b7
architecture diagram
2019-01-22 15:59:41 -08:00
Max
88a3c4cf83
Merge pull request #25 from smallstep/Duration
...
make Duration wrapper publicly accessible
2019-01-20 21:40:45 -08:00
max furman
2c72ada610
remove dead code
2019-01-20 21:37:12 -08:00
max furman
6dc89f46d8
make Duration public
2019-01-20 21:33:14 -08:00
Michael Malone
45fb8de26f
Link to the right blog post in README.md
2019-01-18 23:45:43 -08:00
Mike Malone
1fe5612027
README updates
2019-01-18 19:28:20 -08:00
Mike Malone
2c91f1d2fc
fixed autocert-init command
2019-01-18 17:55:03 -08:00
Mike Malone
d61c2ac3dd
autocert-init for setup
2019-01-18 17:53:44 -08:00
max furman
0615f7eb11
don't wrap time.Duration
2019-01-18 12:08:18 -08:00
max furman
4b742042ee
make Duration wrapper publicly accessible
2019-01-18 10:39:12 -08:00
Mike Malone
72e2388bcc
readme cleanup
2019-01-17 16:48:09 -08:00
Mike Malone
98767422b1
added example to beginning of readme
2019-01-17 16:27:25 -08:00
Mike Malone
a9f7510640
readme cleanup
2019-01-17 16:20:56 -08:00
Mike Malone
042e36da65
autocert
2019-01-17 16:07:27 -08:00
Mariano Cano
bacbf85aa3
Add new bootstrap method that creates a listener.
2019-01-17 14:48:33 -08:00
Mariano Cano
984bf8d38c
Add missing file.
2019-01-16 19:06:21 -08:00
Mariano Cano
1cc5e94666
Add simple test for federation.
2019-01-16 19:03:41 -08:00
max furman
8402b06119
bump step-cli container version in step-ca Dockerfile
2019-01-16 16:40:13 -08:00
max furman
7b9b091b18
don't need to update the brew formula for certificates updates
...
* brew uses a tarball built by cli releases (not certificates)
2019-01-15 12:12:28 -08:00
Mariano Cano
d0e0217955
Merge pull request #22 from smallstep/mariano/multiroot
...
Multiple roots and federation
2019-01-14 18:15:33 -08:00
Mariano Cano
e8ac3f4888
Add comment to differentiate GetRootCertificates and GetRoots.
2019-01-14 18:11:55 -08:00
Mariano Cano
6e620073f5
Rename method Empties to HasEmpties
2019-01-14 18:11:55 -08:00
max furman
cfbb2a6f41
method documentation grammar fix
2019-01-14 17:55:01 -08:00
Mariano Cano
dbd1bf11f1
Rename variable.
2019-01-14 17:35:38 -08:00