Max
60a4eef3de
Fix linter warnings ( #1450 )
...
* Remove unnecessary utils files in favor of cli-utils package
* Remove nolint:revive directive from bcrypt-pbkdf file
2025-07-10 11:15:28 -07:00
Herman Slatman
f8c1eaf36f
Ignore insecure ssh.KeyAlgoDSA usages using nolint
2025-06-09 20:43:08 +02:00
Herman Slatman
cdb6e0157a
Fix linter issues by updating linters and ignoring some issues
2025-05-29 19:20:12 +02:00
Carl Tashian
a0c882c7ba
Fix step ca token help text around validity period flags
2025-04-16 12:16:02 -05:00
Herman Slatman
1156e4475b
Use existing provisioner flag instead of redefining one
2025-03-28 19:06:14 +01:00
Herman Slatman
c153ef3e75
Simplify ingoring usage of provisioner flag when managing policies
2025-03-27 21:56:54 +01:00
Herman Slatman
064866f86c
Refactor ignoring of provisioner flag to not rely on package globals
2025-03-27 19:50:31 +01:00
Herman Slatman
1cec31e5b4
Fix some provisioner prompt issues related to SCEP and policies
...
This PR fixes the following issues:
- SCEP provisioners not detected in admin token flows
- Invalid provisioner selection logic when managing provisioner policies
- Unexpected error messages showing "issuer" instead or "provisioner" flag
2025-03-27 19:50:30 +01:00
Herman Slatman
565dcf0ebb
Change .Token.user.field to not use curly braces
...
The unescaped curly braces result in a broken docs site. Besides
that, other template variables are also not demarcated using curly
braces.
2025-03-05 12:02:53 +01:00
Max
c957358f02
Allow a few global defaults to be pulled from the CA ( #1377 )
...
- min-encryption-password-length
- provisioner
Enforce min-encryption-password-length, if set, in the 'step ssh
certificate' command.
Add flags.FirstStringOf returns value of first defined flag in input list
2025-03-04 08:58:21 -08:00
Mariano Cano
b1cff60231
Merge pull request #1375 from fuhry/cli-token-set-option
...
command/ca/token: support custom "user" claim
2025-03-03 17:49:01 -08:00
Dan Fuhry
8abadfcd59
command/ca/token: support custom "user" claim
...
Add the `--set` and `--set-file` flags to the `step ca token` command,
allowing the user to set keys in the "user" claim in the resulting JWT.
Signed-off-by: Dan Fuhry <dan@fuhry.com >
2025-03-03 14:48:39 -05:00
Herman Slatman
31c9b1438d
Format code using make fmt
2025-02-25 10:39:43 +01:00
Joe Doss
191dc06137
Adjust if statement from PR feedback.
2025-02-25 10:38:40 +01:00
Joe Doss
c8872948a4
Add STEP_OPEN_BROWSER env var to skip opening a browser and just output the authURL.
2025-02-25 10:38:40 +01:00
Herman Slatman
475b7eb3c8
Fix new golangci-lint issues
2025-02-18 11:34:53 +01:00
Mariano Cano
153b692946
Add help with the limitations of the --kms flag
2025-01-29 10:52:17 -08:00
Mariano Cano
da3b6d393c
Apply suggestions from code review
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com >
2025-01-29 10:39:23 -08:00
Mariano Cano
bbc2f41f69
Add support for KMS in the ca renew and rekey commands
...
This commit adds support for using a key present in a KMS when renewing
or rekeying an X.509 certificate.
Fixes #1314
2025-01-27 17:49:33 -08:00
Herman Slatman
afa6eac6b9
Use github.com/smallstep/linkedca @ v0.23.0
2025-01-07 00:37:05 +01:00
SamuelBoerlin
e3a16d4c15
Remove --bundle from step ca certificate usage text ( #1302 )
...
Fixes #521
2024-10-29 09:36:51 -07:00
Max
ebeca4f8f8
Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner ( #1305 )
...
* Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner
2024-10-28 21:41:16 -07:00
Herman Slatman
9cbb404165
Add --remove-scope flag
2024-10-02 17:54:42 +02:00
Herman Slatman
de85fd0cef
Use github.com/smallstep/cli-utils and reorder imports
2024-09-30 13:25:46 +02:00
Max
ded186112d
Allow input from stdin for 'certificate fingerprint' command ( #1270 )
2024-09-12 14:24:30 -07:00
Herman Slatman
a6a421459f
Fix linter issues
2024-08-21 12:55:59 +02:00
Mariano Cano
8a2d36e2df
Fix linter warning
2024-07-24 11:51:57 -07:00
Mariano Cano
2f0500a633
Apply suggestions from code review
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com >
2024-07-24 11:28:26 -07:00
Mariano Cano
3eb25647ba
Remove SSH cfn support and use x5rt#S256 property
2024-07-23 18:56:17 -07:00
Mariano Cano
e207f94262
Merge branch 'master' into fix-1637
2024-07-23 11:58:33 -07:00
Mariano Cano
2a6e644000
Add console flag to ssh commands
...
This commit adds the `--console` flag to the following commands:
* `step ssh certificate`
* `step ssh config`
* `step ssh hosts`
* `step ssh login`
* `step ssh proxycommand`
2024-07-15 18:47:24 -07:00
Max
1f6b6c5e44
See notes ... ( #1232 )
2024-07-11 22:01:36 -07:00
Mariano Cano
f15f7fad80
Update go.step.sm/crypto
...
This commit upgrades go.step.sm/crypto. The new version includes
template support for rawSubject. It also updates `step certificate sign`
to use the RawSubject instead of the constructed subject.
2024-07-09 16:58:27 -07:00
Magnus Watn
f1fa097d74
Fix fish completion
...
`ToFishCompletion()` returns an error that needs to be handled.
2024-06-29 13:51:19 +02:00
Mariano Cano
242248c8e0
Fix error message on step certificate inspect
...
This commit fixes the error message displayed when we run "step
certificate inspect --short --format pem ...".
2024-06-27 15:11:12 -07:00
Francesco
fa1fc09aec
Restore check for the option bundle in the URL certificate inspection ( #1215 )
2024-06-25 19:44:05 -04:00
Mariano Cano
7be7142e30
Merge branch 'master' into AuthParams
2024-06-12 16:12:08 -07:00
Herman Slatman
9a01088c04
Merge pull request #1174 from smallstep/carl/template-flags
...
Add template flags to `step ca provisioner update` help text
2024-05-15 12:47:32 +02:00
Herman Slatman
3156aecae0
Merge pull request #1175 from smallstep/carl/template-flags-1
...
Add template flags to `step ca provisioner add` help text
2024-05-15 12:47:02 +02:00
Mariano Cano
af6511acfc
Fix linter errors
...
This commit fixes the linter errors introduced in merged PRs
2024-05-14 15:23:55 -07:00
Alex Carder
9fef15bd5e
Add OCSP and CRL support to certificate verify
...
Add args and functionality to certificate verify to check a CRL
and OCSP for a certificate based on the extensions. Users can pass
flags to enable verification of each (CRL, OCSP). The command will try
and get the CRL and OCSP server from the certifiacate and verify the
certificate against each.
I also moved functions from the crl command into internal/crlutil
package so they can be re-used with the certificate verify command.
Implements #845
2024-05-14 14:41:06 -07:00
Max
cd22f47ac0
Fix spacing in ssh/certificate with goimports ( #1178 )
2024-05-14 11:25:00 -07:00
redrac
32bdf40111
Allow users to define certificate comment in agent ( #1158 )
...
* Allow users to define certificate comment in agent
Added a comment flag which allows users to set the comment for a
certificate when it gets added to an agent. It defaults to current
behavior if not set, which is it uses the subject as the comment.
This allows users who interact with mutliple CAs with the same
identity (email) to have multiple certificates in the agent. It
also allows for use cases when users generate SSH certs with different
extensions to load multiple certificates in their agent.
2024-05-14 11:20:26 -07:00
Alex Carder
aeee3d0abd
Add support for setting ssh key types
...
Add --kty, --curve, and --size to ssh commands (login, certificate)
Implements PR #477
2024-05-14 10:54:02 -07:00
Herman Slatman
bf70d3ed75
Merge pull request #1177 from smallstep/herman/read-certificate-once
...
Reduce number of times certificate file is read when installing
2024-05-14 19:47:29 +02:00
Herman Slatman
42e275a5b3
Reduce number of times certificate file is read when installing
2024-05-14 12:47:18 +02:00
Max
e5ab833d0e
Add CSR common name to SANs if no other SANs are defined in CSR ( #1172 )
...
* Add CSR common name to SANs if no other SANs are defined in CSR
2024-05-09 11:43:09 -07:00
Carl Tashian
ae17a8a107
Add template flags to step ca provisioner add help text
2024-05-09 07:51:46 -07:00
Carl Tashian
d4bd44f6e0
Add template flags to step ca provisioner update help text
2024-05-09 07:47:39 -07:00
redrac
1f36d23724
Allow stdin input of cert for needs-renewal ( #1157 )
2024-05-06 17:13:21 -07:00
