76 Commits (9fdef647099dd91b53683bff49e205f16f743a57)

Author	SHA1	Message	Date
max furman	9fdef64709	Admin level API for provisioner mgmt v1	3 years ago
max furman	7b5d6968a5	first commit	3 years ago
Mariano Cano	2cbaee9c1d	Allow to use an alternative interface to store renewed certs. ... This can be useful to know if a certificate has been renewed and link one certificate with the 'parent'.	3 years ago
Mariano Cano	e6833ecee3	Add extension of db.AuthDB to store the fullchain. ... Add a temporary solution to allow an extension of an db.AuthDB interface that logs the fullchain of certificates instead of just the leaf.	3 years ago
Mariano Cano	0b8528ce6b	Allow mTLS revocation without provisioner.	3 years ago
Mariano Cano	bcf70206ac	Add support for revocation using an extra provisioner in the RA.	3 years ago
Mariano Cano	a6115e29c2	Add initial implementation of StepCAS. ... StepCAS allows to configure step-ca as an RA using another step-ca as the main CA.	3 years ago
Mariano Cano	3e0ab8fba7	Fix typo.	4 years ago
Mariano Cano	d64427487d	Add comment about the missing error check.	4 years ago
Mariano Cano	e17ce39e3a	Add support for Revoke using CAS.	4 years ago
Mariano Cano	aad8f9e582	Pass issuer and signer to softCAS options. ... Remove commented code and initialize CAS properly. Minor fixes in CloudCAS.	4 years ago
Mariano Cano	1b1f73dec6	Early attempt to develop a CAS interface.	4 years ago
Mariano Cano	cef0475e71	Make clear what's a template/unsigned certificate.	4 years ago
Mariano Cano	c94a1c51be	Merge branch 'master' into ssh-cert-templates	4 years ago
Mariano Cano	ba918100d0	Use go.step.sm/crypto/jose ... Replace use of github.com/smallstep/cli/crypto with the new package go.step.sm/crypto/jose.	4 years ago
max furman	81875074e3	tie -> the in comment	4 years ago
max furman	cb594ed2e0	go mod tidy and golang 1.15.0 cleanup ... ... - cs.NegotiatedProtocolIsMutual has been deprecated but we still build in travis with 1.14 so for now we'll ignore this linting error - string(int) was resolving to string of a single rune rather than string of digits -> use fmt.Sprint	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	0a59efd853	Use new x509util to generate the CA certificate.	4 years ago
Mariano Cano	4943ae58d8	Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates.	4 years ago
Mariano Cano	ce1eb0a01b	Use new x509util for renew/rekey.	4 years ago
Mariano Cano	c8d225a763	Use x509util from go.step.sm/crypto/x509util	4 years ago
Mariano Cano	a7b65f1e1e	Add authority.Sign test with custom templates.	4 years ago
Mariano Cano	6c64fb3ed2	Rename provisioner options structs: ... * provisioner.ProvisionerOptions => provisioner.Options * provisioner.Options => provisioner.SignOptions * provisioner.SSHOptions => provisioner.SingSSHOptions	4 years ago
Mariano Cano	ccc705cdcd	Use alias x509legacy to cli x509util in tls.go.	4 years ago
Mariano Cano	8f0dd811af	Allow to send errors from template to cli.	4 years ago
Mariano Cano	4795e371bd	Add back the support for ca.json DN template.	4 years ago
Mariano Cano	d1d9ae42d6	Use certificates x509util instead of cli for certificate signing.	4 years ago
max furman	fd05f3249b	A few last fixes and tests added for rekey/renew ... ... - remove all `renewOrRekey` - explicitly test difference between renew and rekey (diff pub keys) - add back tests for renew	4 years ago
Max	ea9bc493b8	Merge pull request #307 from dharanikumar-s/master ... Add support for rekeying Fixes #292	4 years ago
dharanikumar-s	57fb0c80cf	Removed calculating SubjectKeyIdentifier on Rekey	4 years ago
dharanikumar-s	dfda497929	Renamed RenewOrRekey to Rekey	4 years ago
dharanikumar-s	fe73154a20	Corrected misspelling	4 years ago
dharanikumar-s	2479371c06	Added error check while marshalling public key	4 years ago
dharanikumar-s	c8c3581e2f	SubjectKeyIdentifier extention is calculated from public key passed to this function instead of copying from old certificate	4 years ago
dharanikumar-s	8f504483ce	Added RenewOrRekey function based on @maraino suggestion. RenewOrReky is called from Renew.	4 years ago
dharanikumar-s	3813f57b1a	Add support for rekeying Fixes #292	4 years ago
max furman	d25e7f64c2	wip	4 years ago
max furman	3636ba3228	wip	4 years ago
max furman	1951669e13	wip	4 years ago
Mariano Cano	bfe1f4952d	Rename interface to CertificateEnforcer and add tests.	4 years ago
Mariano Cano	64f26c0f40	Enforce a duration for identity certificates.	4 years ago
Mariano Cano	05cc1437b7	Remove unnecessary parse of certificate.	4 years ago
Mariano Cano	43bd8113aa	Remove unnecessary comments.	4 years ago
Mariano Cano	69a1b68283	Merge branch 'ssh' into kms	4 years ago
max furman	b265877050	Simplify statuscoder error generators.	4 years ago
max furman	c387b21808	Introduce generalized statusCoder errors and loads of ssh unit tests. ... * StatusCoder api errors that have friendly user messages. * Unit tests for SSH sign/renew/rekey/revoke across all provisioners.	4 years ago
Mariano Cano	c62526b39f	Add wip support for kms.	4 years ago
Mariano Cano	e67ccd9e3d	Add fault tolerance against clock skew accross system on TLS certificates.	4 years ago
Mariano Cano	8eeb82d0ce	Store renew certificate in the database.	5 years ago