44 Commits (master)

Author	SHA1	Message	Date
Mariano Cano	725a913f66	Allow custom SCEP key manager ... This commit allows to inject a custom key manger for SCEP.	1 month ago
Mariano Cano	ac773ff44e	Merge branch 'master' into allow_external_x509_ca_service_intf	3 months ago
Panagiotis Siatras	dd1ff9c15b	Implementation of the Prometheus endpoint (#1669) ... Implementation of the http://{metricsAddress}/metrics Prometheus endpoint.	4 months ago
Venky Gopal	fbc1e895c2	Allow x509 Service CA implementation to be injected through ca and authority options	4 months ago
Herman Slatman	c0fbace882	Address review remarks	8 months ago
Herman Slatman	4dc5a688fd	Set SCEP authority options once	8 months ago
Herman Slatman	f1da256ca4	Change SCEP authority initialization	8 months ago
Herman Slatman	c9ee4a9f9d	Disable initialization log output if started with `--quiet`	2 years ago
Andrew Reed	7101fbb0ee	Provisioner webhooks (#1001)	2 years ago
Mariano Cano	0bedd22850	Fix typos in WithX509IntermediateCerts comment	2 years ago
Mariano Cano	0214e015a0	Clarify comments by code review	2 years ago
Mariano Cano	23045e1812	Clarify comments by code review	2 years ago
Mariano Cano	debe565e42	Validate constraints on Sign and Renew/Rekey ... Fixes #1060	2 years ago
Mariano Cano	369b8f81c3	Use go.step.sm/crypto/kms ... Fixes #975	2 years ago
max furman	5443aa073a	gofmt -s	2 years ago
Max	586e4fd3b5	Update authority/options.go ... Co-authored-by: Mariano Cano <mariano@smallstep.com>	2 years ago
max furman	bfb406bf70	Fixes for PR review	2 years ago
max furman	25b8d196d8	Couple changes in response to PR ... - add skipInit option to skip authority initialization - check admin API status when removing provisioners - no need to check admins when not using Admin API	2 years ago
Mariano Cano	955d4cf80d	Add authority.WithX509SignerFunc ... This change adds a new authority option that allows to pass a callback that returns the certificate chain and signer used to sign X.509 certificates. This option will be used by Caddy, they renew the intermediate certificate weekly and there's no other way to replace it without re-creating the embedded CA. Fixes #874	2 years ago
Mariano Cano	79349b4d7c	Add options to use custom renewal methods.	2 years ago
Mariano Cano	300c19f8b9	Add a custom enforcer that can be used to modify a cert.	2 years ago
max furman	4afcdd55ff	Update doc line on WithSSHGetHosts	2 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	6729c79253	Add support for setting individual password for ssh and tls keys ... This change add the following flags: * --ssh-host-password-file * --ssh-user-password-file Fixes #693	3 years ago
Mariano Cano	8fb5340dc9	Use a token at start time to configure linkedca. ... Instead of using `step-ca login` we will use a new token provided as a flag to configure and start linkedca. Certificates will be kept in memory and refreshed automatically.	3 years ago
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
max furman	9bf9bf142d	wip	3 years ago
max furman	7b5d6968a5	first commit	3 years ago
Miclain Keffeler	7545b4a625	leverage intermediate_ca.crt for appending certs.	3 years ago
Mariano Cano	60515d92c5	Remove unnecessary properties.	4 years ago
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	4 years ago
Mariano Cano	824374bde0	Create a method to initialize the authority without a config file. ... When the CA is embedded in a third party product like Caddy, the config needed to use placeholders to be valid. This change adds a new method `NewEmbeddedAuthority` that allows to create an authority with the given options, the minimum options are a root and intermediate certificate, and the intermediate key. Fixes #218	4 years ago
Mariano Cano	c49a9d5e33	Add context parameter to all SSH methods.	4 years ago
Mariano Cano	2d4f369db2	Add options to set root and federated certificates using x509.Certificate	4 years ago
Mariano Cano	9641ab33b8	Use crypto.Signer instead of ssh.Signer in SSH options.	4 years ago
Mariano Cano	e98d7832b9	Add options to read the roots and federated roots from a bundle.	4 years ago
Mariano Cano	c62526b39f	Add wip support for kms.	4 years ago
max furman	1e17ec7d33	Use x5cInsecure token for /ssh/check-host endpoint	4 years ago
max furman	927784237d	Use an actual Hosts type when returning ssh hosts	5 years ago
max furman	35912cc906	change func def for getSSHHosts ... * continue to return all hosts if injection method not specified	5 years ago
max furman	c407a9319b	Add getSSHHosts injection func	5 years ago
max furman	6ca1df5081	Add WithGetIdentityFunc option and attr to authority ... * Add Identity type to provisioner	5 years ago
Mariano Cano	86a0558587	Add support for /ssh/bastion method.	5 years ago
Mariano Cano	43b663e0c3	Move Option type to a new file.	5 years ago