Mariano Cano
f919535475
Add an extra way to distinguish Azure and Azure OIDC tokens.
...
We used to distinguish these tokens using the azp claim, but this
claim does not appear on new azure oidc tokens, at least on some
configurations.
This change will try to load by audience (client id) if the token
contains an email, required for OIDC.
2021-08-30 16:37:29 -07:00
Mariano Cano
097a918da7
Fix tests when we create re-use a token with a new authority.
2021-08-30 16:36:18 -07:00
Max
08115f584c
Merge pull request #687 from smallstep/max/golangci-bump
...
Bump golangci-lint to latest
2021-08-30 13:00:34 -07:00
max furman
6ec8a1f114
Bump golangci-lint to latest
2021-08-30 12:57:39 -07:00
Mariano Cano
9e7a3cd897
Update go.step.sm/crypto
2021-08-26 18:12:37 -07:00
Mariano Cano
af41ef1ab8
Merge pull request #683 from smallstep/imds-versions
...
Initialize required IMDSVersions for GetIdentityToken
2021-08-26 18:10:41 -07:00
Mariano Cano
470b546d59
Merge pull request #557 from joejulian/http01-isv
...
use InsecureSkipVerify for validation
2021-08-26 18:06:57 -07:00
Mariano Cano
40e77f6e9a
Initialize required variables on GetIdentityToken
...
Fixes smallstep/cli#465
2021-08-26 17:56:40 -07:00
Mariano Cano
352acf8faa
Upgrade golang.org/x/crypto
2021-08-26 11:29:13 -07:00
Mariano Cano
8acce7b092
Merge pull request #682 from smallstep/helm-ssh
...
Fix ssh in helm chart values
2021-08-26 11:22:49 -07:00
Mariano Cano
8cb62b6d67
Fix ssh in helm chart values.
2021-08-26 10:20:16 -07:00
Mariano Cano
c43d0362a4
Merge pull request #680 from smallstep/identity-cert-lifetime
...
Identity certificate lifetime
2021-08-25 17:58:32 -07:00
Mariano Cano
833d28cb6a
Clone the certificate in case we need to look at it later.
2021-08-25 16:15:12 -07:00
Mariano Cano
9e57e4db2c
Merge pull request #633 from smallstep/linkedca
...
Linkedca
2021-08-25 16:06:57 -07:00
Mariano Cano
2c5080aae0
go mod tidy
2021-08-25 15:57:47 -07:00
Mariano Cano
42fde8ba28
Merge branch 'master' into linkedca
2021-08-25 15:56:50 -07:00
max furman
2317bf183b
Nosql and badger bump
2021-08-25 10:32:12 -07:00
max furman
cc9bc9c84b
Bump Badger
2021-08-25 10:24:18 -07:00
Alan Christopher Thomas
21b2057ecd
Add Certificate Manager notice for the pragmatic folks
2021-08-25 09:54:22 -07:00
Mariano Cano
516b74f43a
Add comment about unused code.
2021-08-23 15:33:16 -07:00
Mariano Cano
ff25f4974f
Fix comment.
2021-08-23 15:29:18 -07:00
Mariano Cano
3d141896e2
Remove extra space.
2021-08-23 15:26:32 -07:00
Mariano Cano
e12f6fcc84
Complete phrase in step-ca export help.
2021-08-23 15:24:13 -07:00
Mariano Cano
61b8bfda1a
Fix comment typos.
2021-08-23 15:18:54 -07:00
Mariano Cano
568fce201a
Enforce identity cert to match ssh cert on renewals.
2021-08-23 15:15:36 -07:00
max furman
a3028bbc0e
Add test for updateAddOrderIDs
2021-08-18 23:44:57 -07:00
Mariano Cano
31d3bf1cfc
Update discord link
2021-08-18 18:50:31 -07:00
Carl Tashian
050b233d43
Merge branch 'docker-init'
2021-08-18 13:43:19 -07:00
Carl Tashian
f738cb43c3
Make the default provisioner name optional; change DNS names variable name
2021-08-18 13:37:58 -07:00
Carl Tashian
7f2516f33d
Merge pull request #678 from smallstep/docker-init
...
New Dockerfile with entrypoint script for easy CA init
2021-08-18 12:54:00 -07:00
Carl Tashian
4e8e4c638e
Add newline to password file for readabiliy
2021-08-18 12:50:14 -07:00
max furman
f53f78974e
Badger bump to fix issue with caddy build
2021-08-18 11:38:31 -07:00
Carl Tashian
bc63829111
Auto-generate password by default
2021-08-18 11:11:05 -07:00
Carl Tashian
7ab26c8303
Auto-generate password by default
2021-08-18 11:09:26 -07:00
Mariano Cano
33b6d4c3c8
Merge pull request #677 from smallstep/go1.17
...
Go 1.17 compatibility
2021-08-18 09:54:36 -07:00
Carl Tashian
b88b2f9808
Just adding a comment to the step-ra install script
2021-08-18 08:46:37 -07:00
Carl Tashian
8d52379771
New Dockerfile with entrypoint script for easy CA init
2021-08-17 17:17:28 -07:00
Mariano Cano
dc5205cc72
Extract the tls error code and fail accordingly.
2021-08-17 17:06:25 -07:00
Mariano Cano
ae58a0ee4e
Make tests compatible with Go 1.17.
...
With Go 1.17 tls.Dial will fail if the client and server configured
protocols do not overlap. See https://golang.org/doc/go1.17#ALPN
2021-08-17 16:31:53 -07:00
Mariano Cano
abd78e2d2a
Make kms uri compatible with Go 1.17.
...
Go 1.17 introduces a change in the net/url package disallowing the
use of semicolon (;) in URL queries. We used url.ParseQuery to
decode the opaque string that is semicolon separated. This change
replaces the semicolon with ampersands before decoding it.
2021-08-17 13:25:55 -07:00
Mariano Cano
a864f0134d
Fix key version when SHA512WithRSA is used.
...
There was a typo creating RSA keys with SHA256 digests instead of
SHA512
2021-08-16 14:47:38 -07:00
Mariano Cano
b1f59586ab
Update message to align with UI.
2021-08-13 11:59:12 -07:00
Mariano Cano
e3ef4a7da9
Update test with default tls options.
2021-08-11 15:42:22 -07:00
Mariano Cano
da2802504b
Use Default min version if not specified.
2021-08-11 15:33:45 -07:00
Mariano Cano
456ffd8806
Use linkedca v0.5.0
2021-08-11 15:33:34 -07:00
Mariano Cano
6a7ea71f19
Merge pull request #672 from smallstep/azure-tofu
...
Allow the reuse of azure tokens if DisableTrustOnFirstUse is true
2021-08-11 15:03:47 -07:00
Mariano Cano
d4ae267add
Fix ErrAllowTokenReuse comment.
2021-08-11 14:59:26 -07:00
Mariano Cano
9e5762fe06
Allow the reuse of azure token if DisableTrustOnFirstUse is true
...
Azure caches tokens for 24h and we cannot issue a new certificate
for the same instance in that period of time.
The meaning of this parameter is to allow the signing of multiple
certificate in one instance. This is possible in GCP, because we
get a new token, and is possible in AWS because we can generate
a new one. On Azure there was no other way to do it unless you
wait for 24h.
Fixes #656
2021-08-11 11:50:54 -07:00
Mariano Cano
66f6c73655
Update badger driver to use v2 by default.
2021-08-11 11:19:29 -07:00
Mariano Cano
492ff4b632
Ask for the first provisioner password if none is provided.
2021-08-10 17:30:33 -07:00
