58 Commits (master)

Author	SHA1	Message	Date
max furman	99ce13a4ea	Fix linter warnings	1 week ago
max furman	8b256f0351	address linter warning for go 1.19	1 year ago
Mariano Cano	ac35f3489c	Remove unused certificate validators and modifiers ... With the introduction of certificate templates some certificate validators and modifiers are not used anymore. This commit deletes the ones that are not used.	1 year ago
Herman Slatman	6e1f8dd7ab	Refactor policy engines into container	2 years ago
Herman Slatman	571b21abbc	Fix (most) PR comments	2 years ago
Herman Slatman	7c541888ad	Refactor configuration of allow/deny on authority level	2 years ago
Herman Slatman	88c7b63c9d	Split SSH user and cert policy configuration and execution	2 years ago
Herman Slatman	512b8d6730	Refactor instantiation of policy engines ... Instead of using the `base` struct, the x509 and SSH policy engines are now added to each provisioner directly.	2 years ago
Herman Slatman	066bf32086	Fix part of PR comments	2 years ago
Herman Slatman	1e808b61e5	Merge logic for X509 and SSH policy	2 years ago
Herman Slatman	9539729bd9	Add initial implementation of x509 and SSH allow/deny policy engine	2 years ago
Mariano Cano	e0fee84694	Add comment about public key validator.	3 years ago
Mariano Cano	c3f98fd04d	Change some bad requests to forbidded. ... Change in the sign options bad requests to forbidded if is the provisioner the one adding a restriction, e.g. list of dns names, validity, ...	3 years ago
Mariano Cano	a33709ce8d	Fix sign ssh options tests.	3 years ago
Mariano Cano	1da7ea6646	Return always http errors in sign ssh options.	3 years ago
Mariano Cano	b6ebd118fc	Update temporal solution for sending message to users	3 years ago
Mariano Cano	668d3ea6c7	Modify errs.Wrap() with bad request to send messages to users.	3 years ago
Mariano Cano	1aadd63cef	Use always badRequest on duration errors.	3 years ago
Mariano Cano	41fec1577d	Report duration errors directly to the cli.	3 years ago
Mariano Cano	141c519171	Simplify check of principals in a case insensitive way ... Fixes #679	3 years ago
Fearghal O Floinn	7a94b0c157	Converts group and subgroup to lowercase for comparison. ... Fixes #679	3 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	8d89bbd62f	Remove unused code.	4 years ago
Mariano Cano	c4bbc81d9f	Fix authority tests.	4 years ago
Mariano Cano	413af88aad	Fix provisioning tests.	4 years ago
Mariano Cano	9822305bb6	Use only the IID template on IID provisioners. ... Use always sshutil.DefaultIIDCertificate and require at least one principal on IID provisioners.	4 years ago
Mariano Cano	a78f7e8913	Add template support on k8ssa provisioner.	4 years ago
Mariano Cano	e0dce54338	Add missing argument.	4 years ago
Mariano Cano	c1fc45c872	Simplify SSH modifiers with options. ... It also changes the behavior of the request options to modify only the validity of the certificate.	4 years ago
Mariano Cano	570ede45e7	Do not enforce number of principals or extensions.	4 years ago
Mariano Cano	631f1612a1	Add TemplateData to SignSSHOptions.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
max furman	397a181d10	Add backdate validation to sshCertValidityValidator.	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	144acb9ee3	Remove debug statement.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	4 years ago
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	4 years ago
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
Mariano Cano	d59a5b222f	Truncate to seconds to avoid rounding up times. ... It can cause that certs are not valid yet, if they are used right away.	5 years ago
Mariano Cano	adc1d54b0d	Define valid after as 1m before now. ... It avoids errors with immediate use of cert.	5 years ago
max furman	e3826dd1c3	Add ACME CA capabilities	5 years ago
max furman	d204469280	Add a few more validity checks to default ssh cert validator	5 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. ... Fixes #100	5 years ago
max furman	61d52a8510	Small fixes associated with PR review ... * additions and grammar edits to documentation * clarification of error msgs	5 years ago
Mariano Cano	34e1e3380a	Fix lint errors.	5 years ago
Mariano Cano	e71072d389	Add experimental support for provisioning users.	5 years ago
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	5 years ago