17 Commits (369b8f81c3828b8decaab5f46790587eb07d4ea0)

Author	SHA1	Message	Date
Mariano Cano	369b8f81c3	Use go.step.sm/crypto/kms ... Fixes #975	2 years ago
Mariano Cano	31af1efa48	Sign certificates with the issuer signature algorithm ... An RSA key can sign another certificates using the RSA PKCS#1 and the RSA-PSS scheme, this change will keep the signature algorithm used in the issuer in the signed certificates instead of using PKCS#1 by default.	2 years ago
Mariano Cano	955d4cf80d	Add authority.WithX509SignerFunc ... This change adds a new authority option that allows to pass a callback that returns the certificate chain and signer used to sign X.509 certificates. This option will be used by Caddy, they renew the intermediate certificate weekly and there's no other way to replace it without re-creating the embedded CA. Fixes #874	2 years ago
Mariano Cano	e15b5faf7d	Merge branch 'master' into keyvault	3 years ago
max furman	933b40a02a	Introduce gocritic linter and address warnings	3 years ago
Mariano Cano	52a18e0c2d	Add key name to CreateCertificateAuthority	3 years ago
Mariano Cano	e4e799ca85	Fix typos in comment.	3 years ago
Mariano Cano	6d644880bd	Allow to kms signers to define the SignatureAlgorithm ... CloudKMS keys signs data using an specific signature algorithm, in RSA keys, this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate will fail unless the template SignatureCertificate is properly set. On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or RSA-PSS schemes, so right now the way to enforce one or the other is to used templates.	3 years ago
Miclain Keffeler	ffbfcfb1f2	format.	3 years ago
Miclain K Keffeler	f3396bf964	Update softcas.go	3 years ago
Miclain Keffeler	7545b4a625	leverage intermediate_ca.crt for appending certs.	3 years ago
Mariano Cano	b2ae112dd2	Add initial tests for CreateCertificateAuthority.	4 years ago
Mariano Cano	2b4b902975	Add initial support for `step ca init` with cloud cas. ... Fixes smallstep/cli#363	4 years ago
Mariano Cano	e146b3fe16	Add Unit tests for softcas.	4 years ago
Mariano Cano	1550a21f68	Fix unit tests.	4 years ago
Mariano Cano	aad8f9e582	Pass issuer and signer to softCAS options. ... Remove commented code and initialize CAS properly. Minor fixes in CloudCAS.	4 years ago
Mariano Cano	1b1f73dec6	Early attempt to develop a CAS interface.	4 years ago