Commit Graph

26 Commits (master)

Author SHA1 Message Date
Herman Slatman 6bc0a86207
Fix CA startup with Vault RA configuration 1 month ago
Mariano Cano 10f6a901ec
Let the CA determine the RA lifetime
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.

This commit also fixes linter warnings.

Related to #1094
2 months ago
Theron 9d7dff6995 Add namespace field to VaultCAS JSON config 12 months ago
max furman 8b256f0351
address linter warning for go 1.19 1 year ago
Mariano Cano afd5d46a90
Use vaultcas ttl as a duration string
According to docs at thttps://developer.hashicorp.com/vault/api-docs/secret/pki#ttl
the ttl can be sent as a time.Duration string.

Fixes #1375
1 year ago
max furman 18a648cffa
Fix linter warning about bad error name 2 years ago
Erik DeLamarter 07984a968f
better error messages
Co-authored-by: Mariano Cano <mariano.cano@gmail.com>
2 years ago
Erik De Lamarter 9ec154aab0
rewrite and improve secret-id config 2 years ago
Erik De Lamarter 6989c7f146
vault auth unit tests 2 years ago
Erik De Lamarter 6c44291d8d
refactor vault auth 2 years ago
Erik De Lamarter dec1067add
vault kubernetes auth 2 years ago
Mariano Cano e29c85bbd4 Use errors and fmt instead of pkg/errors. 2 years ago
Mariano Cano 76c483c36f Add missing comments. 2 years ago
Mariano Cano 48bc20c9f3 Unify json parameters. 2 years ago
Mariano Cano 790a19c6f6
make json names uniform
Co-authored-by: Ahmet Demir <ahmet2mir+github@gmail.com>
2 years ago
Mariano Cano 967d9136ca Cleanup Vault CAS integration 2 years ago
Mariano Cano ae7b41a12c Fix linter errors. 2 years ago
Mariano Cano d424159200 Fix certificate type identification 2 years ago
Mariano Cano b3316c4a56 Refactor json Marshal+Unmarshal in one function. 2 years ago
Ahmet DEMIR a9550a746f
fix: add back commented tests 2 years ago
Ahmet DEMIR ab5197500c
fix: a certificat must excldue the root and you should use verified chained intermediate 2 years ago
Ahmet DEMIR 782ff76963
fix: apply suggestion to use cr only 2 years ago
Ahmet DEMIR b49ac2501b
feat: enhance options and fix revoke plus more tests 2 years ago
Ahmet DEMIR 8ef3abf6d9
fix: minus d on Ed 2 years ago
Ahmet DEMIR d957a57e24
fix: apply mariano suggestions and fixes
* use json.RawMessage to remote mapstructure in options
* use vault secretid structure to support multiple source aka string, file and env
* remove log prefix
* return raw cert on error on newline for cert and csr
* clean sans, commonName in createCertificate (bad copy/paste from StepCAS)
* verify authority fingerprint
* convert serial on revoke to bigint, bytes and vault dashed representation
2 years ago
Ahmet DEMIR 16390694e1
feat(vault): adding hashicorp vault cas 2 years ago