redrac
1f36d23724
Allow stdin input of cert for needs-renewal ( #1157 )
2024-05-06 17:13:21 -07:00
Max
05f95e5b1e
Upgrade certificate 0.26.0 | fix linter warnings ( #1140 )
...
* Update certificates to 0.26.0
* Fix linter warnings
2024-03-28 19:12:36 -07:00
Herman Slatman
25beed9f54
Add --certificate flag to step ssh fingerprint command
...
With the changes from https://github.com/smallstep/crypto/pull/207 ,
the default behavior of `step ssh fingerprint` changes to be like
the behavior of `ssh-add` (and similar tools). When a fingerprint
is determined for an SSH certificate, the fingerprint will only
include the bytes of the public key. With the `--certificate` flag,
a user can create a fingerprint for the entire SSH certificate
contents.
2023-04-12 15:39:17 +02:00
max furman
18b9f17058
Fixing up new linter warnings
2023-04-11 14:33:52 -07:00
max furman
993b15491f
Update changelog for 0.23.4
2023-03-09 15:52:57 -08:00
max furman
073e95f1aa
Update usage for --verbose flag in needs-renewal
2023-03-09 15:43:22 -08:00
max furman
b93f2faa6a
Only log verbose if cert needs renewal | fix grammar and improve
...
examples
2023-03-09 15:43:22 -08:00
max furman
25c5a48865
Update the command descriptions slightly
2023-03-09 15:43:22 -08:00
max furman
d341038fd9
Add --verbose flag for x509 and ssh needs-renewal command
2023-03-09 15:43:22 -08:00
Raal Goff
cff4c6d8da
initial work to allow x5c to use KMS certs and keys for token generation
2022-10-24 20:00:25 +08:00
Mariano Cano
133357f8ea
Merge branch 'master' into use/crypto
2022-10-06 17:12:04 -07:00
Josh Soref
4afe4cfb73
Spelling
...
* access
* adminclient
* ampersand
* and
* ascii
* associated
* auto-detected
* browser
* certificate
* certificates
* characters
* command
* compatibility
* consist
* decodes
* digital
* distinguished
* doesn't
* encoded
* encrypted
* encrypting
* entities
* error
* extension
* from the
* from
* github
* herd
* inspecting
* interchangeable
* interchangeably
* issuing
* json
* macos
* mixed
* onboarding
* outer
* parameter
* parses
* password
* preexisting
* processed
* publickey
* reference
* remaining
* renegotiate
* represents
* secrecy
* serialization
* smartypants
* smartypantsable
* subcommand
* subject
* subtle
* suppression
* the
* tidiness
* too-soon
* truststore
* unmarshaling
* use
* wrapping
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com >
2022-10-06 18:25:44 -04:00
Mariano Cano
73429de6ea
Move crypto/sshutil to an internal folder
2022-10-04 16:38:11 -07:00
Mariano Cano
d63010ef16
Use go.step.sm/jose
2022-10-04 15:26:08 -07:00
Mariano Cano
c6d8972249
Use go.step.sm/crypto for fingerprints in step ssh list
2022-10-03 18:19:29 -07:00
Mariano Cano
ff7b6eb597
Use go.step.sm/crypto to create fingerprints
2022-10-03 18:09:22 -07:00
Mariano Cano
116600896d
Use pemutil, randutil, and keyutil from go.step.sm/crypto
2022-09-30 14:30:40 -07:00
max furman
2d96380899
Fix unused linter warnings
...
* use errors.As with interface{} correctly
2022-09-21 18:19:24 -07:00
max furman
b9b48800ea
A bunch more sensible linters and fixes
2022-08-18 22:39:04 -07:00
Carl Tashian
d77dc82f35
The ssh needs-renewal command does not accept a hostname
2022-07-19 09:04:26 -07:00
Mariano Cano
a393c33738
Add ssh signataure to step ssh inspect
...
Fixes #699
2022-07-15 12:20:18 -07:00
Mariano Cano
5034e3637f
Allow to inspect ssh certificates without the type.
2022-04-26 17:58:14 -07:00
Mariano Cano
25ce40805b
Add the --provisioner-password-file to proxycommand.
...
Machines doing ssh client connections might want to use a JWK
provisioner to create the SSH certificate, this change allows
to automatically create the token if --provisioner and
--provisioner-password-file are passed.
2022-02-14 15:21:39 -08:00
Mariano Cano
9ab5040bff
Merge pull request #621 from smallstep/ssh-login-logout
...
Improvements step ssh login and logout
2022-02-01 18:30:42 -08:00
Mariano Cano
e204fcc82a
Merge branch 'master' into nebulous
2022-02-01 16:39:53 -08:00
Mariano Cano
2c2a8b5e79
Rename function
2022-02-01 14:17:37 -08:00
max furman
340cd41dd8
Merge if conditions
2022-02-01 13:07:25 -08:00
Mariano Cano
3fe25da566
Remove only certificates if get ssh roots fails.
2022-02-01 13:01:09 -08:00
Mariano Cano
56f88b0108
Fill subject if empty for non-oidc provisioners.
2022-02-01 12:46:46 -08:00
Mariano Cano
3fdcde8caf
Allow step ssh login without arguments for OIDC.
2022-01-31 19:40:58 -08:00
max furman
df799eddf5
Add --no-agent flag to 'ssh certificate' command
2022-01-31 16:40:09 -08:00
Mariano Cano
13c25ee29a
Allow to logout without specifying an identity.
...
`step ssh logout` will remove all identities singed by the configured
ssh CA.
2022-01-31 12:55:31 -08:00
Mariano Cano
a9075d3cbf
Add initial support for the nebula provisioner.
2021-12-29 14:20:43 -08:00
max furman
2881ea481e
Remove internal ui package
2021-12-19 11:27:07 -05:00
Dominik Roos
8de234779b
feedback
2021-12-02 22:38:16 +01:00
Dominik Roos
c4401e8650
Add emoji format to fingerprint commands
...
Add an additional `emoji` format for the `step certificate fingerprint`
that encodes the certificate fingerprint as an emoji string.
Add the `--format` flag to the `step ssh fingerprint` command that
controls the encoding of the fingerprint. The default behavior of the
command is unchanged. The additional encodings are the same as for
`step certificate fingerprint`.
Add teh `--format` flag to the `step crypto key fingerprint` command that
controls the encoding of the fingerprint. The default behavior of the
command is unchanged. For `sha1` hex encoding is used, for `sha256`
base64 encoding is used. The additional encodings are the same as for
`step certificate fingerprint`.
fixes #570
2021-12-02 22:03:21 +01:00
max furman
100980b133
Fixing linter errors
2021-11-17 12:56:07 -08:00
max furman
e1ce7de736
Merge branch 'master' into max/steppath
2021-11-17 12:39:07 -08:00
max furman
e3d4f67527
Fixing linter warning errors
2021-11-16 11:39:14 -08:00
max furman
bd543ba4d7
Update ssh config default template attributes
...
- remove unused user.Authority
- use parameter instead of hard coded string for template version key
2021-11-13 14:27:25 -08:00
max furman
8c4addeb5b
add Version:v2 to ssh config user data map, and updates to go mod
2021-11-12 13:15:15 -08:00
max furman
b59106b010
couple big fixes
2021-11-11 12:28:06 -08:00
max furman
2eccb2be3d
Fixing a load of errors from the PR review
2021-11-10 23:18:33 -08:00
max furman
77ca7a53a8
More contexts work
...
- move context warning before other output for ca init
- attempt to remove ssh include for context remove
2021-11-10 00:43:14 -08:00
max furman
c4af2452a8
Remove commented code
2021-11-09 15:26:20 -08:00
max furman
7715b21d17
Updates for multiple SSH contexts and small fixes
2021-11-09 15:23:57 -08:00
max furman
d76fa897fe
HACK: apply the context in 'ssh config' if no team bootstrap
2021-11-05 13:34:05 -07:00
Hunter Hawke
014b1a3e51
Updated ssh renew description with user/host
2021-10-28 13:38:58 +02:00
max furman
e933aed82d
Move hidden helper commands into functions.
2021-10-27 15:55:18 -07:00
max furman
da2d28901f
Addressing some PR commentary
2021-10-27 15:55:18 -07:00
