Commit Graph

2109 Commits (d6203eb2512de64f9394e08b9b65797c0249a069)
 

Author SHA1 Message Date
Mariano Cano 072ba4227c Add deployment type to config.
This field is ignored except for the start of the ca. If the type
is linked and the token is not passed, it will fail with an error.
3 years ago
Mariano Cano 56bb3eb6e1 Add next steps for linked ca. 3 years ago
Mariano Cano 47a30f1524 Add JWK provisioner to generic config.
Fix linter errors.
3 years ago
Mariano Cano 536536c92d Wrap json errors. 3 years ago
Mariano Cano 640f523150 Remove unused function. 3 years ago
Mariano Cano 9d51c2cceb Fix linter errors in the name of export methods. 3 years ago
Mariano Cano 16d3afb92a Remove unused method. 3 years ago
Mariano Cano d72fa953ac Remove debug statements. 3 years ago
Mariano Cano 3f07eb597a Implement revocation using linkedca. 3 years ago
Mariano Cano 81004ce1f9 Remove deprecated functions. 3 years ago
Mariano Cano f643af7095 Update onboarding flow with new pki package. 3 years ago
Mariano Cano 79cf059447 Remove deprecated methods and write all pki files at once. 3 years ago
Mariano Cano ad4dbd6764 Write all files on save. 3 years ago
Mariano Cano 50f7a0d0c0 Work in progress implementation of PKI with helm support 3 years ago
Mariano Cano 798b90c359 Move linkedca configuration to the main package. 3 years ago
Mariano Cano de719eb6f0 Add an option to avoid password prompts on step cas
When we are using `step ca init` to create a stepcas RA we don't
have access to the password for verify the provisioner.
3 years ago
Mariano Cano de292fbed6 Use branch version of linkedca. 3 years ago
Mariano Cano 721459210e Make pki initialization more flexible. 3 years ago
Mariano Cano 384be6e205 Do not show provisioners if they are not required.
For deployment types like linked ca, the list of provisioners in
the ca.json are not required, so we should tag the json as omitempty.
3 years ago
Mariano Cano b0e0f2b89d Use linkedca GetAdmin and GetProvisioner. 3 years ago
Mariano Cano 91a369f618 Automatically enable admin properly on linked cas. 3 years ago
Mariano Cano 26122a2cbf Enable admin automatically if a token is provided. 3 years ago
Carl Tashian 9572c62520
Merge pull request #657 from smallstep/ra-installer
RA install script
3 years ago
Mariano Cano 5344f42f21 Allow to use the environment variable STEP_CA_TOKEN
For helm charts we want to store the tokens in a secret and load
it from an environment variable.
3 years ago
Mariano Cano 2620c38aee Add is converting provisioners to linkedca.
The ids are required to be able to link admins with provisioners.
3 years ago
Mariano Cano e62d7988b8 Do not store password on exports. 3 years ago
Mariano Cano ac363d7824 Add --password-file and --issuer-password-file flags to export. 3 years ago
Mariano Cano 4f27f4b002 Change default ciphersuites to newer names. 3 years ago
Carl Tashian 97af829805 RA install script 3 years ago
Mariano Cano 07f7316851 Add bastion to export. 3 years ago
Mariano Cano 0730a165fd Add collection of files and authority template. 3 years ago
Mariano Cano c7f8516142 Add to export all the information in the ca.json 3 years ago
Mariano Cano 887423ee6e Update TLS cipher suites. 3 years ago
Carl Tashian 53d08e1f5c
Remove microbadger.com (the website is gone) 3 years ago
Carl Tashian 8f4c833845
Update README.md 3 years ago
Mariano Cano dc1ec18b52 Create a way to export ca configurations. 3 years ago
Mariano Cano d0c1530f89 Remove replace of linkedca package. 3 years ago
Mariano Cano 3a00b6b396 Properly marshal a certificate when we send it to linkedca. 3 years ago
Mariano Cano 4ad82a2f76 Check linkedca for revocation. 3 years ago
Mariano Cano f7542a5bd9 Move check of ssh revocation from provisioner to the authority. 3 years ago
Carl Tashian cff19691b3
Merge pull request #654 from smallstep/needs-renewal
Fix needs-renewal condition and switch to using ExecCondition
3 years ago
Carl Tashian 09b554f855
Merge pull request #609 from smallstep/discord
update gitter to discord
3 years ago
Carl Tashian 22ef324534 Fix needs-renewal condition and switch to using ExecCondition 3 years ago
Mariano Cano 71f8019243 Store x509 and ssh certificates on linkedca if enabled. 3 years ago
Mariano Cano 17eef81c91 Remove linkerd replace. 3 years ago
Mariano Cano a72eab915b Use linkedca v0.1.0 3 years ago
Mariano Cano 7c0faab73e Remove now unused step-ca login. 3 years ago
Carl Tashian f8c137af4f
Update provisioners.md 3 years ago
Carl Tashian 28acc1b7d2
Merge pull request #653 from smallstep/needs-renewal
systemd cert renewer can now use 'step certificate needs-renewal'
3 years ago
Mariano Cano 8fb5340dc9 Use a token at start time to configure linkedca.
Instead of using `step-ca login` we will use a new token provided
as a flag to configure and start linkedca. Certificates will be kept
in memory and refreshed automatically.
3 years ago