crypt/step-ca-cli
1
0
Fork 0
mirror of https://github.com/smallstep/cli.git synced 2026-10-24 11:19:19 +03:00
Code Activity
3,753 Commits 27 Branches 361 Tags
6bc838deba11fd4c1ffbcc8aaf19aa650ca77418
Commit Graph

648 Commits

Author SHA1 Message Date
Max
60a4eef3de Fix linter warnings (#1450) 
* Remove unnecessary utils files in favor of cli-utils package
* Remove nolint:revive directive from bcrypt-pbkdf file
 2025-07-10 11:15:28 -07:00
Herman Slatman
cdb6e0157a Fix linter issues by updating linters and ignoring some issues 2025-05-29 19:20:12 +02:00
Carl Tashian
a0c882c7ba Fix step ca token help text around validity period flags 2025-04-16 12:16:02 -05:00
Herman Slatman
1156e4475b Use existing provisioner flag instead of redefining one 2025-03-28 19:06:14 +01:00
Herman Slatman
c153ef3e75 Simplify ingoring usage of provisioner flag when managing policies 2025-03-27 21:56:54 +01:00
Herman Slatman
064866f86c Refactor ignoring of provisioner flag to not rely on package globals 2025-03-27 19:50:31 +01:00
Herman Slatman
1cec31e5b4 Fix some provisioner prompt issues related to SCEP and policies 
This PR fixes the following issues:

 - SCEP provisioners not detected in admin token flows
 - Invalid provisioner selection logic when managing provisioner policies
 - Unexpected error messages showing "issuer" instead or "provisioner" flag
 2025-03-27 19:50:30 +01:00
Herman Slatman
565dcf0ebb Change .Token.user.field to not use curly braces 
The unescaped curly braces result in a broken docs site. Besides
that, other template variables are also not demarcated using curly
braces.
 2025-03-05 12:02:53 +01:00
Dan Fuhry
8abadfcd59 command/ca/token: support custom "user" claim 
Add the `--set` and `--set-file` flags to the `step ca token` command,
allowing the user to set keys in the "user" claim in the resulting JWT.

Signed-off-by: Dan Fuhry <dan@fuhry.com>
 2025-03-03 14:48:39 -05:00
Herman Slatman
475b7eb3c8 Fix new golangci-lint issues 2025-02-18 11:34:53 +01:00
Mariano Cano
153b692946 Add help with the limitations of the --kms flag 2025-01-29 10:52:17 -08:00
Mariano Cano
da3b6d393c Apply suggestions from code review 
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com>
 2025-01-29 10:39:23 -08:00
Mariano Cano
bbc2f41f69 Add support for KMS in the ca renew and rekey commands 
This commit adds support for using a key present in a KMS when renewing
or rekeying an X.509 certificate.

Fixes #1314
 2025-01-27 17:49:33 -08:00
Herman Slatman
afa6eac6b9 Use github.com/smallstep/linkedca @ v0.23.0 2025-01-07 00:37:05 +01:00
SamuelBoerlin
e3a16d4c15 Remove --bundle from step ca certificate usage text (#1302) 
Fixes #521
 2024-10-29 09:36:51 -07:00
Max
ebeca4f8f8 Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner (#1305) 
* Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner
 2024-10-28 21:41:16 -07:00
Herman Slatman
9cbb404165 Add --remove-scope flag 2024-10-02 17:54:42 +02:00
Herman Slatman
de85fd0cef Use github.com/smallstep/cli-utils and reorder imports 2024-09-30 13:25:46 +02:00
Herman Slatman
a6a421459f Fix linter issues 2024-08-21 12:55:59 +02:00
Mariano Cano
3eb25647ba Remove SSH cfn support and use x5rt#S256 property 2024-07-23 18:56:17 -07:00
Mariano Cano
e207f94262 Merge branch 'master' into fix-1637 2024-07-23 11:58:33 -07:00
Mariano Cano
2a6e644000 Add console flag to ssh commands 
This commit adds the `--console` flag to the following commands:
 * `step ssh certificate`
 * `step ssh config`
 * `step ssh hosts`
 * `step ssh login`
 * `step ssh proxycommand`
 2024-07-15 18:47:24 -07:00
Mariano Cano
7be7142e30 Merge branch 'master' into AuthParams 2024-06-12 16:12:08 -07:00
Herman Slatman
9a01088c04 Merge pull request #1174 from smallstep/carl/template-flags 
Add template flags to `step ca provisioner update` help text
 2024-05-15 12:47:32 +02:00
Carl Tashian
ae17a8a107 Add template flags to step ca provisioner add help text 2024-05-09 07:51:46 -07:00
Carl Tashian
d4bd44f6e0 Add template flags to step ca provisioner update help text 2024-05-09 07:47:39 -07:00
Jeremy Doupe
85e8884367 add scope and authparam flags and parameters for OIDC 2024-04-17 17:42:59 -05:00
Max
05f95e5b1e Upgrade certificate 0.26.0 | fix linter warnings (#1140) 
* Update certificates to 0.26.0

* Fix linter warnings
 2024-03-28 19:12:36 -07:00
Jakub Jindra
ef4a7365ac add missing dash for --offline in help 2024-03-26 14:33:44 +01:00
Herman Slatman
eb5fbfb1b4 Use localhost in the step ca health CA url 2024-03-05 23:20:46 +01:00
Herman Slatman
c25f5c3821 Add very basic step ca health integration test 2024-03-04 21:49:48 +01:00
Herman Slatman
6c8661fafc Fix usage of deprecated Sign() method 2024-03-04 21:05:51 +01:00
Lars Kellogg-Stedman
c592ed47ac Teach step ca init about --key-password-file 
This commit permits you, when using the --root and --key options, to pass
the password for decrypting the key in --key-password-file rather than
requiring an interactive prompt.

Example usage:

    step ca init --root root.crt --key root.key \
      --key-password-file root_key_password ...

Closes #453
 2024-02-13 12:24:39 -08:00
Mariano Cano
4616c58b2e Allow to add confirmation claims to tokens 
This commit allows passing confirmation claims to tokens to tie the
tokens with a provided CSR or SSH public key.

The confirmation claim is implemented in the token command as well as
the com commands that uses a given CSR or ssh public key. Those are:

  - step ca token
  - step ca sign
  - step ssh certificate --sign

Fixes smallstep/certificates#1637
 2024-01-11 16:50:11 -08:00
Carl Tashian
b6ea4b2568 Merge branch 'master' into carl/team-ca-flag-incompatibility 2023-09-26 10:21:07 -07:00
Carl Tashian
f59669bd90 Make --ca-url incompatible with --team 2023-09-26 10:19:03 -07:00
Herman Slatman
dc047bbf13 Remove scep-decrypter-key flag 2023-09-25 23:06:53 +02:00
Carl Tashian
7bd4efe9da step ca bootstrap: Make --team incompatible with --fingerprint 2023-09-25 13:22:28 -07:00
Herman Slatman
33c53c1819 Remove the CLI flag for real 2023-09-25 21:37:34 +02:00
Herman Slatman
642b9b907d Remove the scep-decrypter-certificate flag 2023-09-25 21:32:31 +02:00
Herman Slatman
d7474d33bb Fix linter issues 2023-09-25 16:20:41 +02:00
Herman Slatman
6b27ddfce3 Update SCEP decrypter flags 2023-09-25 15:56:13 +02:00
Herman Slatman
96ea896820 Upgrade to latest SCEP properties 2023-09-25 15:39:31 +02:00
Herman Slatman
4fd8701a1b Merge branch 'master' into herman/scep-decrypter-configuration 2023-09-04 15:09:19 +02:00
Herman Slatman
ff7dc489b8 Add --exclude-intermediate flag for SCEP provisioner 2023-09-04 15:05:13 +02:00
Carl Tashian
1463dba705 Merge pull request #999 from toraritte/term-consistency-fix 
Make term "trust store" consistent across the docs
 2023-08-09 09:15:14 -07:00
Linda Ikechukwu
c86cb4f76f grammar fix for ca/sign.go 2023-08-09 14:14:48 +01:00
Attila Gulyas
3991e172b2 Make term "trust store" consistent across the docs [..] 
See PR https://github.com/smallstep/docs/pull/260 for context.
 2023-08-08 17:32:51 -04:00
Mariano Cano
b09aee2dc8 Allow to disable smallstep extensions using the cli 
This commit adds the flag --disable-smallstep-extensions to "step ca
provisioner" commands. A provisioner created with this flag will have
the claim DisableSmallstepExtensions set to true and certificates
created using that provisioner will not have the smallstep provisioner
extension.

Related to smallstep/certificates#620
 2023-07-28 11:36:05 -07:00
Herman Slatman
dea9fe9034 Accept KMS types with colon 2023-06-01 14:19:03 +02:00