22 commits

Author	SHA1	Message	Date
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	2020-08-24 14:44:11 -07:00
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	2020-08-10 11:26:51 -07:00
Mariano Cano	f437b86a7b	Merge branch 'cert-templates' into ssh-cert-templates	2020-08-05 18:43:07 -07:00
Mariano Cano	c8d225a763	Use x509util from go.step.sm/crypto/x509util	2020-08-05 16:02:46 -07:00
Mariano Cano	aa657cdb4b	Use SSHOptions inside provisioner options.	2020-07-30 18:44:52 -07:00
Mariano Cano	8ff8d90f8c	On JWK and X5C validate the key id on the request.	2020-07-30 17:45:03 -07:00
Mariano Cano	8e7bf96769	Fix error prefix.	2020-07-30 17:45:03 -07:00
Mariano Cano	c2dc76550c	Add ssh certificate template to X5C provisioner.	2020-07-30 17:45:03 -07:00
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	2020-07-22 18:24:45 -07:00
Mariano Cano	02c4f9817d	Set full token payload instead of only the known properties.	2020-07-21 14:21:54 -07:00
Mariano Cano	04f5053a7a	Add template support for x5c.	2020-07-21 14:18:06 -07:00
max furman	3636ba3228	wip	2020-06-23 17:13:39 -07:00
max furman	1951669e13	wip	2020-06-23 11:10:45 -07:00
max furman	7d5cf34ce5	Update profileLimitDuration validator ... ... - respect notBefore of the provisioner - modify/fix the reported errors	2020-06-16 12:16:43 -07:00
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	2020-01-28 13:29:40 -08:00
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	2020-01-28 13:29:40 -08:00
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	2020-01-28 13:29:39 -08:00
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	2020-01-28 13:28:16 -08:00
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	2020-01-28 13:28:16 -08:00
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	2020-01-28 13:28:16 -08:00
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	2020-01-28 13:28:16 -08:00
max furman	d368791606	Add x5c provisioner capabilities	2019-10-14 14:51:37 -07:00