Commit Graph

74 Commits (d83ca96d2a37f3846280c739637b994cb7cfb8c6)

Author SHA1 Message Date
Herman Slatman e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues 3 years ago
Mariano Cano e15b5faf7d Merge branch 'master' into keyvault 3 years ago
max furman 933b40a02a Introduce gocritic linter and address warnings 3 years ago
Mariano Cano 52a18e0c2d Add key name to CreateCertificateAuthority 3 years ago
Mariano Cano e4e799ca85 Fix typos in comment. 3 years ago
Mariano Cano 6d644880bd Allow to kms signers to define the SignatureAlgorithm
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.

On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
3 years ago
Mariano Cano de719eb6f0 Add an option to avoid password prompts on step cas
When we are using `step ca init` to create a stepcas RA we don't
have access to the password for verify the provisioner.
3 years ago
max furman 77fdfc9fa3 Merge branch 'master' into max/cert-mgr-crud 3 years ago
max furman 9fdef64709 Admin level API for provisioner mgmt v1 3 years ago
Mariano Cano 35e6cc275a Fix typos in comments. 3 years ago
Mariano Cano dce1b290bd Remove debug statements. 3 years ago
Mariano Cano ac3c754a6d Use known CA and add tier and gcs bucket options. 3 years ago
Mariano Cano 529eb4bae9 Rename CAPool to CaPool. 3 years ago
Mariano Cano 9db68db509 Add tests with cloudCAS EnableCertificateAuthority. 3 years ago
Mariano Cano 48bc4e549d Fix cloudcas tests. 3 years ago
Mariano Cano 072bd0dcf4 Add support for Google CAS v1 3 years ago
Herman Slatman 491c2b8d93 Improve initialization of SCEP authority 3 years ago
Herman Slatman 2a249d20de Refactor initialization of SCEP authority 3 years ago
Herman Slatman c5e4ea08b3
Merge branch 'master' into hs/scep 3 years ago
Mariano Cano 84018ec71b Clarify comment. 3 years ago
Mariano Cano a9297100d8 Allow to configure the JWK using the encrypted key. 3 years ago
Mariano Cano d9f93ccfde Fix typo. 3 years ago
Mariano Cano edc7c4d90e Add support for password encrypted files 3 years ago
Mariano Cano 80542d6d9a Add JWK as an issuer for stepcas. 3 years ago
Mariano Cano ce3e6bfdf6 Fix linting errors. 3 years ago
Mariano Cano 96de4e6ec8 Return a non-implemented error in stepcas.RenewCertificate. 3 years ago
Mariano Cano 348815f4f6 Fix error message. 3 years ago
Herman Slatman 583d60dc0d
Address (most) PR comments 3 years ago
Mariano Cano e7a6c46e54 Fix linting errors. 3 years ago
Mariano Cano 08e75b614e Do not depend on Go 1.16. 3 years ago
Mariano Cano 6fd6270e7d Remove debug statements. 3 years ago
Mariano Cano 7958f6ebb5 Add support for lifetime. 3 years ago
Mariano Cano ae4b8f58b8 Add support for emails, ips and uris. 3 years ago
Mariano Cano dbb48ecf8d Add tests for stepcas. 3 years ago
Mariano Cano bcf70206ac Add support for revocation using an extra provisioner in the RA. 3 years ago
Mariano Cano a6115e29c2 Add initial implementation of StepCAS.
StepCAS allows to configure step-ca as an RA using another step-ca
as the main CA.
3 years ago
Herman Slatman e1cab4966f
Improve initialization of SCEP authority 3 years ago
Herman Slatman 7ad90d10b3
Refactor initialization of SCEP authority 3 years ago
Miclain Keffeler ffbfcfb1f2 format. 3 years ago
Miclain K Keffeler 7a1eb43bb1
Update options.go 3 years ago
Miclain K Keffeler f3396bf964
Update softcas.go 3 years ago
Miclain Keffeler 7545b4a625 leverage intermediate_ca.crt for appending certs. 3 years ago
Mariano Cano a97fab4119 Fix mispell. 4 years ago
Mariano Cano b057c6677a Use test/bufconn instead of a real listener. 4 years ago
Mariano Cano 4f9200cc47 Add missing docs. 4 years ago
Mariano Cano 41a46bbd75 Enable default cas implementation. 4 years ago
Mariano Cano 7020011842 Add some extra tests. 4 years ago
Mariano Cano 7aa8a8fe1e Complete tests for softCAS. 4 years ago
Mariano Cano bb4f2aef2f Fix lint error. 4 years ago
Mariano Cano b275758018 Complete CloudCAS tests.
Upgrade cloud.google.com/go
4 years ago