Commit graph

793 commits

Author SHA1 Message Date
Mariano Cano
e60beeb7fc Make cloudkms more robust.
* Automatically create key rings if needed.
* User CryptoKeyVersions if needed.
* Add support to close the client.
* Add new pareters to CreateKey responses to make things easier.
2020-01-14 18:43:39 -08:00
Mariano Cano
3f8de17a40 Cleanup types and add initial support for the options required for PKCS11. 2020-01-14 18:42:14 -08:00
Mariano Cano
9641ab33b8 Use crypto.Signer instead of ssh.Signer in SSH options. 2020-01-14 18:38:29 -08:00
Mariano Cano
e98d7832b9 Add options to read the roots and federated roots from a bundle. 2020-01-10 18:33:48 -08:00
Mariano Cano
44eccc6bd8 Merge branch 'ssh' into kms 2020-01-10 17:49:52 -08:00
Mariano Cano
3ce267cdd6 Upgrade smallste/cli 2020-01-10 17:21:47 -08:00
Mariano Cano
ab1807d6a0 Use release v1.19.1 of golangci-lint
See https://github.com/golangci/golangci-lint/issues/885
2020-01-10 17:19:56 -08:00
Mariano Cano
3cbf30b555 Upgrade golangci-lint to v1.22.2 2020-01-10 11:19:28 -08:00
Mariano Cano
085ae82163 Remove the use of custom x509 package.
Upgrade cli dependency.
2020-01-10 10:58:49 -08:00
Mariano Cano
995375013d Update dependencies for kms support. 2020-01-09 18:43:35 -08:00
Mariano Cano
c62526b39f Add wip support for kms. 2020-01-09 18:42:26 -08:00
Mariano Cano
d13754166a Add support for cloudkms and softkms. 2020-01-09 18:41:13 -08:00
Mariano Cano
8a10c5032f
Merge pull request #150 from smallstep/backdate
Add backdate support to the x509 and SSH certificates.
2020-01-08 12:52:31 -08:00
Mariano Cano
77af30bfa3 Remove debug statement. 2020-01-08 11:46:33 -08:00
Mariano Cano
f46dc03111 Add tests of profileLimitDuration with backdate. 2020-01-06 14:34:59 -08:00
Mariano Cano
165a91858e Add tests for backdate and sshDefaultDuration 2020-01-06 14:21:13 -08:00
Mariano Cano
7e33aeb8d3 Add unit test for profileDefaultDuration. 2020-01-06 12:19:00 -08:00
Mariano Cano
f06db4099e Add backdate support on ssh rekey. 2020-01-03 18:30:17 -08:00
Mariano Cano
935d0d4542 Add support for backdate to SSH certificates. 2020-01-03 18:22:52 -08:00
Mariano Cano
64e0a2ca6f Disable backdata on ca tests. 2020-01-03 18:16:45 -08:00
Mariano Cano
76c14560b0 Use errs package for HTTP errors. 2020-01-03 17:41:16 -08:00
Mariano Cano
50717b3ffa Update assert package. 2020-01-03 13:27:45 -08:00
Mariano Cano
e67ccd9e3d Add fault tolerance against clock skew accross system on TLS certificates. 2020-01-02 17:48:28 -08:00
Mariano Cano
1fa35491ea Update cli dependency. 2019-12-18 14:44:59 -08:00
Mariano Cano
eeabf5ba4c Fix tests. 2019-12-18 14:44:08 -08:00
Mariano Cano
a6deea7d8d Renew identity certificate in /ssh/rekey and /ssh/renew 2019-12-18 14:43:38 -08:00
Mariano Cano
0b5d37b284 Add method to just write the identity certificate. 2019-12-18 14:39:01 -08:00
Mariano Cano
839fe6b952 Add method to renew the identity. 2019-12-18 12:46:46 -08:00
max furman
aa58940582 Should be returning nil from applyIdentity if cert expired. 2019-12-17 15:53:37 -08:00
max furman
6200aeaad0 cli dep update 2019-12-17 14:39:08 -08:00
Max
bd6eca6342
Merge pull request #145 from smallstep/err 2019-12-17 14:33:48 -08:00
max furman
e5a8629a21 updating dependencies 2019-12-17 14:31:22 -08:00
max furman
cb78a087d5 Update cli dep 2019-12-17 14:30:18 -08:00
max furman
f9ef5070f9 Move api errors to their own package and modify the typedef 2019-12-17 14:26:02 -08:00
Mariano Cano
6d6f496331 Allow no provisioners. 2019-12-16 11:22:24 -08:00
Mariano Cano
ba11f6acb7 Update dependencies. 2019-12-13 13:59:11 -08:00
Mariano Cano
d210082113 Use new version of nosql. 2019-12-13 13:56:56 -08:00
Mariano Cano
7ecb831e07 Add wrappers to identity methods in the ca package. 2019-12-12 13:16:17 -08:00
Mariano Cano
3f71b8debd Add mTLS test for identity client. 2019-12-12 12:48:34 -08:00
Mariano Cano
3717c7a8d3 Improve identity tests. 2019-12-12 12:23:53 -08:00
Mariano Cano
0d9a9e083e Add identity client and move identity to a new package. 2019-12-11 20:23:44 -08:00
Mariano Cano
89b216c21e Fix test. 2019-12-11 18:24:32 -08:00
Mariano Cano
96b6989658 Addapt test to api change. 2019-12-11 18:21:20 -08:00
Mariano Cano
bde29b1bbd Addapt tests to the api change. 2019-12-11 18:18:13 -08:00
Mariano Cano
28b08ef46b Fail silently if the identity fails. 2019-12-11 16:27:37 -08:00
Mariano Cano
401fc20e96 Re-enable profiler. 2019-12-11 16:27:37 -08:00
max furman
623be4ef09 update cli dep 2019-12-11 14:56:50 -08:00
Max
1f42637ba1
Merge pull request #143 from smallstep/expired-cert
Expired cert
2019-12-11 14:55:21 -08:00
max furman
1e17ec7d33 Use x5cInsecure token for /ssh/check-host endpoint 2019-12-11 14:54:29 -08:00
Mariano Cano
7fe1eb8686 Add GetTransport to client. 2019-12-10 16:34:24 -08:00