Commit Graph

32 Commits (9fdef647099dd91b53683bff49e205f16f743a57)

Author SHA1 Message Date
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
Mariano Cano d79b4e709e Create a hash of a token if a token id is empty. 4 years ago
Mariano Cano ba918100d0 Use go.step.sm/crypto/jose
Replace use of github.com/smallstep/cli/crypto with the new package
go.step.sm/crypto/jose.
4 years ago
Mariano Cano d30a95236d Use always go.step.sm/crypto 4 years ago
Mariano Cano e83e47a91e Use sshutil and randutil from go.step.sm/crypto. 4 years ago
Mariano Cano c4bbc81d9f Fix authority tests. 4 years ago
Mariano Cano 6c64fb3ed2 Rename provisioner options structs:
* provisioner.ProvisionerOptions => provisioner.Options
* provisioner.Options => provisioner.SignOptions
* provisioner.SSHOptions => provisioner.SingSSHOptions
4 years ago
Mariano Cano d64cb99a22 Fix authority package tests. 4 years ago
max furman 71d87b4e61 wip 4 years ago
max furman 1cb8bb3ae1 Simplify statuscoder error generators. 4 years ago
max furman dccbdf3a90 Introduce generalized statusCoder errors and loads of ssh unit tests.
* StatusCoder api errors that have friendly user messages.
* Unit tests for SSH sign/renew/rekey/revoke across all provisioners.
4 years ago
Mariano Cano f26103d150 Make test compilable. 4 years ago
Mariano Cano a6edcd0a3d Make test to compile, they still fail. 4 years ago
Mariano Cano 10e7b81b9f Merge branch 'master' into ssh-ca 5 years ago
max furman 2b41faa9cf Enforce >= 2048 bit rsa keys at the provisioner layer
* Fixes #94
* In the future this should be configurable by provisioner
5 years ago
max furman 635c59ed24 Accept emails SANs 5 years ago
Mariano Cano e1cd5ee8c3 Add context to the Authorize method.
Fix tests.
5 years ago
max furman 81db527f12 NoopDB -> SimpleDB 5 years ago
max furman b73fe8c157 Add used OTT to DB during authToken step 5 years ago
max furman ab4d569f36 Add /revoke API with interface db backend 5 years ago
Mariano Cano 1f5ff5c899 Fix sign and renew tests. 5 years ago
Mariano Cano b77621675c Fix and simplify authorize tests. 5 years ago
Mariano Cano ef4d809ee6 Move matchesAudience and stripPort tests to provisioner package. 5 years ago
Mariano Cano af9688c419 Fix some testing errors. 5 years ago
Mariano Cano 54d86ca1c1 testing work in progress. 5 years ago
Mariano Cano 7e95fc0e45 Strip ports on audience check.
Services might have proxies behind them so we cannot rely on them.
Fixes #17
6 years ago
max furman 0d9dd2d14b provisioner issuer -> name 6 years ago
Mariano Cano d574545d94 Format code with `gofmt -s` 6 years ago
max furman ca6087145f fix unit test 6 years ago
max furman 283dc42904 add unit tests for MatchOne (token audience) and Authority.New 6 years ago
max furman ee7db4006a change sign + authorize authority api | add provisioners
* authorize returns []interface{}
 - operators in this list can conform to any interface the user decides
 - our implementation has a combination of certificate claim validators
 and certificate template modifiers.
* provisioners can set and enforce tls cert options
6 years ago
max furman c284a2c0ab first commit 6 years ago