Commit Graph

102 Commits (master)

Author SHA1 Message Date
Joe Doss 14c9de2570
Enable tpmkms. 1 month ago
Max 116ff8ed65
bump go.mod to go1.20 and associated linter fixes (#1518) 8 months ago
Mariano Cano 40a2f53589
Remove automatic initialization of the STEPPATH
This commit upgrades cli-utils and crypto packages that remove the
automatic initialization of the STEPPATH.
9 months ago
max furman 7c1c32d86b
Fix linting errors 1 year ago
Mariano Cano da95c44943
Fix lint issue with Go 1.20 1 year ago
Mariano Cano 39f46d31b9
Remove deprecated binaries
This commit removes the following deprecated binaries:

 - step-awskms-init
 - step-cloudkms-init
 - step-pkcs11-init
 - step-yubikey-init

From now on step and step-kms-plugin should be used to initialize the
PKI in AWS KMS, GCP KMS, PKCS#11 modules or YubiKeys.

A future commit will add step-kms-plugin to the docker images of
step-ca.

Fixes #1046
1 year ago
Mariano Cano 1f4443d858
Support to ask for key password after crypto change
A change in crypto will remove the dependency of the ui package
used for prompting passwords.
2 years ago
max furman ffff9af323
linting and fixing review feedback 2 years ago
max furman 1e0ea6f958
more linting fixes 2 years ago
max furman ab0d2503ae
Standardize linting file and fix or ignore lots of linting errors 2 years ago
Mariano Cano bc61b23d91 Add deprecation notices to step-x-init binaries
Fixes #1044
2 years ago
Mariano Cano 23b8f45b37 Address gosec warnings
Most if not all false positives
2 years ago
Mariano Cano 369b8f81c3 Use go.step.sm/crypto/kms
Fixes #975
2 years ago
Gary Belvin fed09047f9 pinfile 2 years ago
Mariano Cano 37b521ec6c
Merge branch 'master' into feat/vault 2 years ago
Panagiotis Siatras 6d4d4560df
add --context flag to step-ca command (#851)
* added the --context flag

* apply the context and allow for different ca.json

* amended usage for consistency

* added an extra example

* added an extra example

* reordered and reworded examples
2 years ago
Mariano Cano c0525381eb Merge branch 'master' into feat/vault 2 years ago
Herman Slatman af17b6a6f3
Make copyright year dynamic 2 years ago
Ahmet DEMIR 16390694e1
feat(vault): adding hashicorp vault cas 2 years ago
Mariano Cano 91878051c1
Merge pull request #741 from gdbelvin/ssh
Support CSR Requests from PKCS11
2 years ago
Mariano Cano febb619882 Add some extra validation and print certificate objects
This commit also changes the following flags for consistency:
  - --crt-cert to --crt-cert-obj
  - --crt-key to --crt-key-obj
2 years ago
max furman 10db335f13 mv pkg config -> step 2 years ago
Gary Belvin bbb327c8c5 Make a csr if there's not a root 2 years ago
Gary Belvin 29f5a35965 simplify flags 2 years ago
Mariano Cano 8366b7ddf1 Revert "Remove extractable from StoreCertificate."
This reverts commit 614ee79489.
3 years ago
Mariano Cano 614ee79489 Remove extractable from StoreCertificate. 3 years ago
Mariano Cano aa80bf9f07 Merge branch 'smallstep_master' into extractable 3 years ago
Mariano Cano e15b5faf7d Merge branch 'master' into keyvault 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano 205148ad1f Fix exit after defer. 3 years ago
Mariano Cano 48549bf317 Initialize windows terminal on all binaries. 3 years ago
Mariano Cano d02cb1c869 Enable azurekms. 3 years ago
Mariano Cano cfe08ad6fe Add flags to usage. 3 years ago
Gary Belvin 22b471acf9 Extractable certs 3 years ago
Gary Belvin be89459524 Set key export bit 3 years ago
Mariano Cano a0633a6efb
Merge pull request #612 from gdbelvin/kmspin
Allow reading pin from kms string
3 years ago
Gary Belvin 1fb4406801 minimize diff 3 years ago
Gary Belvin c6bb7aa199 Add back UI check, but don't read file 3 years ago
Gary Belvin a63a1d6482 Don't double read from u.Pin() 3 years ago
Gary Belvin 063a09a521 Allow reading pin from kms string 3 years ago
Mariano Cano 595f12505c
Merge branch 'master' into name 3 years ago
Gary Belvin c264e8f580 Configurable pkcs11-init output paths 3 years ago
Gary Belvin 623e387fb0 Allow configuration of PKCS11 subject name 3 years ago
Mariano Cano e727532963 Fix wrong format of the first flag on `step-ca --help` 3 years ago
Mariano Cano bdeb0ccd7c Add support for the flag --issuer-password-file
The new flag allows to pass a file with the password used to decrypt
the key used in RA mode.
3 years ago
Mariano Cano 71f59de396
Merge pull request #510 from smallstep/ra-mode
StepCAS.
3 years ago
Gary Belvin 341966c30f Check pin flag 3 years ago
Gary Belvin 1ac838628a Add flag for setting the pin 3 years ago
Mariano Cano a6115e29c2 Add initial implementation of StepCAS.
StepCAS allows to configure step-ca as an RA using another step-ca
as the main CA.
3 years ago
Mariano Cano e446e22520 Remove extra default. 3 years ago