67 Commits (d6203eb2512de64f9394e08b9b65797c0249a069)

Author	SHA1	Message	Date
Mariano Cano	a0633a6efb	Merge pull request #612 from gdbelvin/kmspin ... Allow reading pin from kms string	3 years ago
Gary Belvin	1fb4406801	minimize diff	3 years ago
Gary Belvin	c6bb7aa199	Add back UI check, but don't read file	3 years ago
Gary Belvin	a63a1d6482	Don't double read from u.Pin()	3 years ago
Gary Belvin	063a09a521	Allow reading pin from kms string	3 years ago
Mariano Cano	595f12505c	Merge branch 'master' into name	3 years ago
Gary Belvin	c264e8f580	Configurable pkcs11-init output paths	3 years ago
Gary Belvin	623e387fb0	Allow configuration of PKCS11 subject name	3 years ago
Mariano Cano	e727532963	Fix wrong format of the first flag on `step-ca --help`	3 years ago
Mariano Cano	bdeb0ccd7c	Add support for the flag --issuer-password-file ... The new flag allows to pass a file with the password used to decrypt the key used in RA mode.	3 years ago
Mariano Cano	71f59de396	Merge pull request #510 from smallstep/ra-mode ... StepCAS.	3 years ago
Gary Belvin	341966c30f	Check pin flag	3 years ago
Gary Belvin	1ac838628a	Add flag for setting the pin	3 years ago
Mariano Cano	a6115e29c2	Add initial implementation of StepCAS. ... StepCAS allows to configure step-ca as an RA using another step-ca as the main CA.	3 years ago
Mariano Cano	e446e22520	Remove extra default.	3 years ago
Mariano Cano	3648c3fab6	Fix error message when --kms is not passed.	3 years ago
Mariano Cano	1d2146166b	Close key manager.	3 years ago
Mariano Cano	51ac28656e	Fix protection level for host keys in cloudkms script. ... Fixes #460	3 years ago
Mariano Cano	7f9d7eadc9	Attempt to delete key and certificate with the same name. ... Nitrokey will override the label of the key with the certificate one. If they are stored with the same id.	3 years ago
Mariano Cano	162c535705	Add option to not store certificates in the pkcs11 module.	3 years ago
Mariano Cano	8dca652bc7	Add support for PKCS #11 KMS. ... The implementation works with YubiHSM2. Unit tests are still pending. Fixes #301	3 years ago
Anton Lundin	3e6137110b	Add support for using ssh-agent as a KMS ... This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se>	4 years ago
Mariano Cano	40d0596b71	Use smallstep/cli-utils instead of smallstep/cli	4 years ago
Mariano Cano	647b9b4541	Merge pull request #367 from smallstep/cas ... Support for CAS Interface and CloudCAS	4 years ago
Carl Tashian	fd07e25e61	Change Gitter links to GH Discussions tab	4 years ago
Mariano Cano	f100b2d0e3	Make the YubiKey management key configurable. ... With this change the default management key is not required as the user is able to set its own. Fixes #323	4 years ago
Mariano Cano	1b1f73dec6	Early attempt to develop a CAS interface.	4 years ago
Mariano Cano	d30a95236d	Use always go.step.sm/crypto	4 years ago
Mariano Cano	ddb4ca7a74	Move load of kms to main package. ... With this change packages that import the authority won't load by default all the supported kms with all its dependencies. Fixes #228	4 years ago
Mariano Cano	26c89cf779	Rename method.	4 years ago
Mariano Cano	7a985b1470	Fix usage, remove unsupported flag.	4 years ago
Mariano Cano	5b680b2349	Add initialization script for an AWS KMS.	4 years ago
Mariano Cano	89e164dad6	Add AuthorityKeyId to cloudkms root cert.	4 years ago
Mariano Cano	97508ca215	Add AuthorityKeyId to root certificate. ... Fix error string.	4 years ago
Mariano Cano	03a6789f0e	Fix compile errors without cgo support.	4 years ago
Mariano Cano	025c0aa20f	Display the proper yubikey uri.	4 years ago
Mariano Cano	22b86c3fcc	Only rewrite keys with --force.	4 years ago
Mariano Cano	6868190fff	Add initial support for yubikey.	4 years ago
Mariano Cano	6b01128bcc	Reference root.Subject instead of hardcoding it.	4 years ago
Mariano Cano	1535e95d89	Add tool to initialize pki in cloud kms.	4 years ago
Mariano Cano	869ef70211	Merge pull request #172 from 256dpi/master ... Added Resolver Option	4 years ago
Sebastian Tiedtke	f2b95647f3	Use date range in copyright	4 years ago
Joël Gähwiler	445fcbe621	added resolver	4 years ago
Mariano Cano	4d423137f0	Re-enable profiler.	4 years ago
Mariano Cano	c60641701b	Add version endpoint.	4 years ago
Alan Christopher Thomas	8f08b47a9c	Rough wiring for basics of connecting to onboarding flow	4 years ago
Mariano Cano	5013f7ffe0	Move ca commands to its own package.	5 years ago
Mariano Cano	0efae31a29	Generate PKI and start server using onboarding.	5 years ago
Mariano Cano	bca5dcc326	Remove url from error message.	5 years ago
Mariano Cano	0c654d93ea	Create method for onboard action and clean code.	5 years ago