Mariano Cano
f96b4bdf36
Add fallback=-context poc
...
This commit adds a fallback context that can be used on some commands
to retry a command using a different context.
2025-10-07 18:37:55 -07:00
Mariano Cano
c8fd9a7f2b
Do not require client authentication if not enabled
...
This commit removes the creation of an identity certificate when we get
an unauthorized response if the client authentication is not enabled.
2025-10-06 12:29:46 -07:00
Mariano Cano
5c85efa9d4
Add remote configuration of the GCP organization id
...
This commit adds support for configuring the organization id in the GCP
provisioner.
Fixes #1449
2025-09-23 18:02:48 -07:00
Mariano Cano
800d82a44d
Add PKIX fingerprint support
...
This commit adds the `--pkix` flag to `step crypto key fingerprint` command.
This flag and the PKIX encoding of the key instead of the X.509 subjectPublicKey
format.
2025-08-12 18:40:42 -07:00
Carl Tashian
450bd22a1c
Add required <scope> param to help text for step ca policy
2025-07-21 10:19:09 -07:00
Max
60a4eef3de
Fix linter warnings ( #1450 )
...
* Remove unnecessary utils files in favor of cli-utils package
* Remove nolint:revive directive from bcrypt-pbkdf file
2025-07-10 11:15:28 -07:00
Herman Slatman
f8c1eaf36f
Ignore insecure ssh.KeyAlgoDSA usages using nolint
2025-06-09 20:43:08 +02:00
Herman Slatman
cdb6e0157a
Fix linter issues by updating linters and ignoring some issues
2025-05-29 19:20:12 +02:00
Carl Tashian
a0c882c7ba
Fix step ca token help text around validity period flags
2025-04-16 12:16:02 -05:00
Herman Slatman
1156e4475b
Use existing provisioner flag instead of redefining one
2025-03-28 19:06:14 +01:00
Herman Slatman
c153ef3e75
Simplify ingoring usage of provisioner flag when managing policies
2025-03-27 21:56:54 +01:00
Herman Slatman
064866f86c
Refactor ignoring of provisioner flag to not rely on package globals
2025-03-27 19:50:31 +01:00
Herman Slatman
1cec31e5b4
Fix some provisioner prompt issues related to SCEP and policies
...
This PR fixes the following issues:
- SCEP provisioners not detected in admin token flows
- Invalid provisioner selection logic when managing provisioner policies
- Unexpected error messages showing "issuer" instead or "provisioner" flag
2025-03-27 19:50:30 +01:00
Herman Slatman
565dcf0ebb
Change .Token.user.field to not use curly braces
...
The unescaped curly braces result in a broken docs site. Besides
that, other template variables are also not demarcated using curly
braces.
2025-03-05 12:02:53 +01:00
Max
c957358f02
Allow a few global defaults to be pulled from the CA ( #1377 )
...
- min-encryption-password-length
- provisioner
Enforce min-encryption-password-length, if set, in the 'step ssh
certificate' command.
Add flags.FirstStringOf returns value of first defined flag in input list
2025-03-04 08:58:21 -08:00
Mariano Cano
b1cff60231
Merge pull request #1375 from fuhry/cli-token-set-option
...
command/ca/token: support custom "user" claim
2025-03-03 17:49:01 -08:00
Dan Fuhry
8abadfcd59
command/ca/token: support custom "user" claim
...
Add the `--set` and `--set-file` flags to the `step ca token` command,
allowing the user to set keys in the "user" claim in the resulting JWT.
Signed-off-by: Dan Fuhry <dan@fuhry.com >
2025-03-03 14:48:39 -05:00
Herman Slatman
31c9b1438d
Format code using make fmt
2025-02-25 10:39:43 +01:00
Joe Doss
191dc06137
Adjust if statement from PR feedback.
2025-02-25 10:38:40 +01:00
Joe Doss
c8872948a4
Add STEP_OPEN_BROWSER env var to skip opening a browser and just output the authURL.
2025-02-25 10:38:40 +01:00
Herman Slatman
475b7eb3c8
Fix new golangci-lint issues
2025-02-18 11:34:53 +01:00
Mariano Cano
153b692946
Add help with the limitations of the --kms flag
2025-01-29 10:52:17 -08:00
Mariano Cano
da3b6d393c
Apply suggestions from code review
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com >
2025-01-29 10:39:23 -08:00
Mariano Cano
bbc2f41f69
Add support for KMS in the ca renew and rekey commands
...
This commit adds support for using a key present in a KMS when renewing
or rekeying an X.509 certificate.
Fixes #1314
2025-01-27 17:49:33 -08:00
Herman Slatman
afa6eac6b9
Use github.com/smallstep/linkedca @ v0.23.0
2025-01-07 00:37:05 +01:00
SamuelBoerlin
e3a16d4c15
Remove --bundle from step ca certificate usage text ( #1302 )
...
Fixes #521
2024-10-29 09:36:51 -07:00
Max
ebeca4f8f8
Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner ( #1305 )
...
* Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner
2024-10-28 21:41:16 -07:00
Herman Slatman
9cbb404165
Add --remove-scope flag
2024-10-02 17:54:42 +02:00
Herman Slatman
de85fd0cef
Use github.com/smallstep/cli-utils and reorder imports
2024-09-30 13:25:46 +02:00
Max
ded186112d
Allow input from stdin for 'certificate fingerprint' command ( #1270 )
2024-09-12 14:24:30 -07:00
Herman Slatman
a6a421459f
Fix linter issues
2024-08-21 12:55:59 +02:00
Mariano Cano
8a2d36e2df
Fix linter warning
2024-07-24 11:51:57 -07:00
Mariano Cano
2f0500a633
Apply suggestions from code review
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com >
2024-07-24 11:28:26 -07:00
Mariano Cano
3eb25647ba
Remove SSH cfn support and use x5rt#S256 property
2024-07-23 18:56:17 -07:00
Mariano Cano
e207f94262
Merge branch 'master' into fix-1637
2024-07-23 11:58:33 -07:00
Mariano Cano
2a6e644000
Add console flag to ssh commands
...
This commit adds the `--console` flag to the following commands:
* `step ssh certificate`
* `step ssh config`
* `step ssh hosts`
* `step ssh login`
* `step ssh proxycommand`
2024-07-15 18:47:24 -07:00
Max
1f6b6c5e44
See notes ... ( #1232 )
2024-07-11 22:01:36 -07:00
Mariano Cano
f15f7fad80
Update go.step.sm/crypto
...
This commit upgrades go.step.sm/crypto. The new version includes
template support for rawSubject. It also updates `step certificate sign`
to use the RawSubject instead of the constructed subject.
2024-07-09 16:58:27 -07:00
Magnus Watn
f1fa097d74
Fix fish completion
...
`ToFishCompletion()` returns an error that needs to be handled.
2024-06-29 13:51:19 +02:00
Mariano Cano
242248c8e0
Fix error message on step certificate inspect
...
This commit fixes the error message displayed when we run "step
certificate inspect --short --format pem ...".
2024-06-27 15:11:12 -07:00
Francesco
fa1fc09aec
Restore check for the option bundle in the URL certificate inspection ( #1215 )
2024-06-25 19:44:05 -04:00
Mariano Cano
7be7142e30
Merge branch 'master' into AuthParams
2024-06-12 16:12:08 -07:00
Herman Slatman
9a01088c04
Merge pull request #1174 from smallstep/carl/template-flags
...
Add template flags to `step ca provisioner update` help text
2024-05-15 12:47:32 +02:00
Herman Slatman
3156aecae0
Merge pull request #1175 from smallstep/carl/template-flags-1
...
Add template flags to `step ca provisioner add` help text
2024-05-15 12:47:02 +02:00
Mariano Cano
af6511acfc
Fix linter errors
...
This commit fixes the linter errors introduced in merged PRs
2024-05-14 15:23:55 -07:00
Alex Carder
9fef15bd5e
Add OCSP and CRL support to certificate verify
...
Add args and functionality to certificate verify to check a CRL
and OCSP for a certificate based on the extensions. Users can pass
flags to enable verification of each (CRL, OCSP). The command will try
and get the CRL and OCSP server from the certifiacate and verify the
certificate against each.
I also moved functions from the crl command into internal/crlutil
package so they can be re-used with the certificate verify command.
Implements #845
2024-05-14 14:41:06 -07:00
Max
cd22f47ac0
Fix spacing in ssh/certificate with goimports ( #1178 )
2024-05-14 11:25:00 -07:00
redrac
32bdf40111
Allow users to define certificate comment in agent ( #1158 )
...
* Allow users to define certificate comment in agent
Added a comment flag which allows users to set the comment for a
certificate when it gets added to an agent. It defaults to current
behavior if not set, which is it uses the subject as the comment.
This allows users who interact with mutliple CAs with the same
identity (email) to have multiple certificates in the agent. It
also allows for use cases when users generate SSH certs with different
extensions to load multiple certificates in their agent.
2024-05-14 11:20:26 -07:00
Alex Carder
aeee3d0abd
Add support for setting ssh key types
...
Add --kty, --curve, and --size to ssh commands (login, certificate)
Implements PR #477
2024-05-14 10:54:02 -07:00
Herman Slatman
bf70d3ed75
Merge pull request #1177 from smallstep/herman/read-certificate-once
...
Reduce number of times certificate file is read when installing
2024-05-14 19:47:29 +02:00
