49 Commits (9fdef647099dd91b53683bff49e205f16f743a57)

Author	SHA1	Message	Date
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
max furman	638766c615	wip	3 years ago
max furman	5d09d04d14	wip	3 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
Mariano Cano	e83e47a91e	Use sshutil and randutil from go.step.sm/crypto.	4 years ago
Mariano Cano	f437b86a7b	Merge branch 'cert-templates' into ssh-cert-templates	4 years ago
Mariano Cano	c8d225a763	Use x509util from go.step.sm/crypto/x509util	4 years ago
Mariano Cano	aa657cdb4b	Use SSHOptions inside provisioner options.	4 years ago
Mariano Cano	8ff8d90f8c	On JWK and X5C validate the key id on the request.	4 years ago
Mariano Cano	380a0d6daf	Add ssh certificate templates to JWK provisioner.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	02c4f9817d	Set full token payload instead of only the known properties.	4 years ago
Mariano Cano	e6fed5e0aa	Minor fixes and comments.	4 years ago
Mariano Cano	ca2fb42d68	Move options to the provisioner.	4 years ago
Mariano Cano	9f3acc254b	Set the token payload in the JWK provisioner.	4 years ago
Mariano Cano	ef0ed0ff95	Integrate simple templates in the JWK provisioner.	4 years ago
max furman	71d87b4e61	wip	4 years ago
max furman	3636ba3228	wip	4 years ago
max furman	1951669e13	wip	4 years ago
max furman	1cb8bb3ae1	Simplify statuscoder error generators.	4 years ago
max furman	dccbdf3a90	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	84ff172093	Add support for backdate to SSH certificates.	4 years ago
Mariano Cano	08eac1b00d	Make sure to define the KeyID from the token if available.	4 years ago
max furman	9caadbb341	Fix authority calling wrong revoke method	4 years ago
max furman	414a94b210	Instrument getIdentity func for OIDC ssh provisioner	4 years ago
Mariano Cano	a86dc78b5d	Add missing comment.	4 years ago
Mariano Cano	7db7b1ee4c	Fix some provisioner tests	4 years ago
max furman	54e3cf7322	Add multiuse capability to k8ssa provisioners	4 years ago
max furman	29853ae016	sshpop provisioner + ssh renew | revoke | rekey first pass	4 years ago
max furman	d368791606	Add x5c provisioner capabilities	5 years ago
Mariano Cano	396b4222aa	Implement validator for ssh keys. ... Fixes #100	5 years ago
Mariano Cano	10e7b81b9f	Merge branch 'master' into ssh-ca	5 years ago
max furman	2b41faa9cf	Enforce >= 2048 bit rsa keys at the provisioner layer ... * Fixes #94 * In the future this should be configurable by provisioner	5 years ago
max furman	635c59ed24	Accept emails SANs	5 years ago
Mariano Cano	57a529cc1a	Allow to enable the SSH CA per provisioner	5 years ago
Mariano Cano	a8f4ad1b8e	Set default SSH options if no user options are given.	5 years ago
Mariano Cano	53f62f871c	Set not extensions to host certificates.	5 years ago
Mariano Cano	f01286bb48	Add support for SSH certificates to OIDC. ... Update the interface for all the provisioners.	5 years ago
Mariano Cano	1c8f610ca9	Add initial implementation of an SSH CA using the JWK provisioner. ... Fixes smallstep/ca-component#187	5 years ago
Mariano Cano	f794dbeb93	Add support for GCP identity tokens.	5 years ago
max furman	ab4d569f36	Add /revoke API with interface db backend	5 years ago
Mariano Cano	7378ed27ac	Refactor claims so they can be totally omitted if only the parent is set.	5 years ago
Mariano Cano	0b4cde1ad3	Move type to the first position of the struct.	5 years ago
Mariano Cano	23e6de57a2	Address comments in code review.	5 years ago
Mariano Cano	dce3100cfb	Add missing time in validation.	5 years ago
Mariano Cano	67c79fd014	Add tests for default provisioner.	5 years ago
Mariano Cano	a97ea87caa	Move options to provisioner so we can set the duration of the cert.	5 years ago
Mariano Cano	d92a7f2948	Rename provisioner to jwk.	5 years ago
Mariano Cano	a1782733fe	Rename files.	5 years ago