Dan Fuhry
8abadfcd59
command/ca/token: support custom "user" claim
...
Add the `--set` and `--set-file` flags to the `step ca token` command,
allowing the user to set keys in the "user" claim in the resulting JWT.
Signed-off-by: Dan Fuhry <dan@fuhry.com >
2025-03-03 14:48:39 -05:00
Herman Slatman
5d4c50e0ed
Fix x5rt#S256 for SSH public keys and tests
2024-08-06 15:54:03 +02:00
Mariano Cano
2f0500a633
Apply suggestions from code review
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com >
2024-07-24 11:28:26 -07:00
Mariano Cano
3eb25647ba
Remove SSH cfn support and use x5rt#S256 property
2024-07-23 18:56:17 -07:00
Mariano Cano
e207f94262
Merge branch 'master' into fix-1637
2024-07-23 11:58:33 -07:00
Max
05f95e5b1e
Upgrade certificate 0.26.0 | fix linter warnings ( #1140 )
...
* Update certificates to 0.26.0
* Fix linter warnings
2024-03-28 19:12:36 -07:00
Mariano Cano
4616c58b2e
Allow to add confirmation claims to tokens
...
This commit allows passing confirmation claims to tokens to tie the
tokens with a provided CSR or SSH public key.
The confirmation claim is implemented in the token command as well as
the com commands that uses a given CSR or ssh public key. Those are:
- step ca token
- step ca sign
- step ssh certificate --sign
Fixes smallstep/certificates#1637
2024-01-11 16:50:11 -08:00
Herman Slatman
2cc7174a3a
Add more test cases for Nebula token
2023-12-12 17:18:27 +01:00
Herman Slatman
84519a7b71
Fix linting issue
2023-12-12 16:40:05 +01:00
Herman Slatman
b84beef225
Add key type to error message
2023-12-12 16:17:18 +01:00
Herman Slatman
7c490d1792
Fix Nebula VerifyPrivateKey by selecting curve to use based on key
2023-12-12 16:13:54 +01:00
Andrew Reed
ff43e7d0dc
Detect OIDC tokens issued by Kubernetes ( #953 )
...
Service account tokens issued by the Kubernetes API server in recent
versions are valid OIDC tokens but the do not contain an email in the
payload. Update the Payload Type test to interpret tokens with all five
required claims as OIDC tokens.
2023-06-07 09:59:22 -07:00
Remi Vichery
4a0c6daf83
fixup! Add support for alternate issuer for Azure tokens
2023-03-26 11:33:43 -07:00
Remi Vichery
ddd5b65881
Add support for alternate issuer for Azure tokens
2023-03-06 19:25:07 -08:00
Raal Goff
5ae26a7042
requested changes
2022-10-28 08:19:44 +08:00
Raal Goff
cff4c6d8da
initial work to allow x5c to use KMS certs and keys for token generation
2022-10-24 20:00:25 +08:00
Mariano Cano
d63010ef16
Use go.step.sm/jose
2022-10-04 15:26:08 -07:00
Mariano Cano
bf5e922780
Delete unused packages
2022-10-03 19:04:44 -07:00
Mariano Cano
116600896d
Use pemutil, randutil, and keyutil from go.step.sm/crypto
2022-09-30 14:30:40 -07:00
vijayjt
f1e39e670f
Change VirtualMachine to ResourceName
2022-03-22 00:22:48 +00:00
vijayjt
5688694051
Support Azure tokens from managed identities not associated with a VM
2022-03-07 12:01:36 +00:00
Mariano Cano
bf0a16f242
Fix review comments.
2022-01-11 15:05:17 -08:00
Mariano Cano
7207b53413
Verify nebula cert and keys.
2022-01-06 14:29:01 -08:00
Mariano Cano
a9075d3cbf
Add initial support for the nebula provisioner.
2021-12-29 14:20:43 -08:00
max furman
31bea20e26
standardize k8ssa token check on issuer name
2020-08-31 20:56:42 -07:00
Mariano Cano
b47ea68840
Use crypto/ed25519
2020-01-28 13:34:00 -08:00
max furman
a4670fc632
Use x5cInsecure token in step ssh check-host
...
* token allows the use of expired identity certificates to authenticate
the /ssh/check-host endpoint.
2020-01-28 13:34:00 -08:00
max furman
b8d289b654
sshpop provisioner + ssh renew | revoke | rekey
2020-01-28 13:33:59 -08:00
Mariano Cano
c1318bfa95
Update certificates version.
2020-01-28 13:33:59 -08:00
Mariano Cano
bc40b8f60d
Add support for multiple types of versions.
2020-01-28 13:33:59 -08:00
max furman
3b8506e18e
Add kubernetes service account provisioner / tokens
...
* add/remove provisioner
* use kubernetes service accoun tokens with `step ca
sign|token|certificate`
2019-10-29 17:41:22 -07:00
max furman
323f7e11ab
Add x5c provisioner capabilities
...
* certificate create/sign with x5c token
* provisioner add/remove
* jwt/jws sign with x5c hdr
2019-10-14 15:01:46 -07:00
Mariano Cano
84df5b491b
Add support for multiple types of versions.
2019-09-18 15:54:47 -07:00
Mariano Cano
70b8f5c71a
Add initial support for step ca ssh-certificate command.
...
Fixes smallstep/ca-component#187
2019-07-24 19:17:34 -07:00
Mariano Cano
ea92c904da
Add a method to set the SHA parameter.
2019-06-17 18:14:09 -07:00
Mariano Cano
d1b10e259d
Fix test.
2019-05-08 18:09:41 -07:00
Mariano Cano
bb6fda7a55
Fix test.
2019-05-08 15:39:26 -07:00
Mariano Cano
40944bf06d
Add parse test for azure and aws.
2019-05-08 14:59:10 -07:00
Mariano Cano
e76f3c022e
Add initial support for azure.
...
Fixes smallstep/certificates#69
2019-05-07 19:09:18 -07:00
Mariano Cano
19c493d3ec
Add support for AWS and GCP provisioners.
...
Fixes smallstep/certificates#67
Fixes smallstep/certificates#68
2019-04-24 14:52:11 -07:00
Mariano Cano
8d46da4a08
Add methods to parse supported CA tokens.
2019-04-17 18:44:44 -07:00
max furman
e44e88254d
Add revoke subcommand to step ca
...
* Access the CA /revoke API from the cli
2019-04-10 13:52:48 -07:00
max furman
43b7de3a87
Set the SANS when generating a certificate with step CA
...
* examples
* modify WithHosts to add only if missing
* add a new claim to step provisioning tokens
2019-01-30 18:15:20 -06:00
Mariano Cano
82169b430d
Sort imports.
2018-11-06 11:25:34 -08:00
Mariano Cano
ae76957096
Allow to set custom kids.
2018-11-06 11:25:34 -08:00
Mariano Cano
4fbe2b9fa0
Remove removed option from tests.
2018-10-29 13:08:21 -07:00
Mariano Cano
2bc7b2f5bf
Remove unnecessary claim ca
2018-10-24 11:46:59 -07:00
max furman
802214a46a
change pemutil.Parse WithStdLib default
...
* WithStepCrypto as option
* add pemutil.Parse unit tests
2018-10-08 12:46:34 -07:00
Mariano Cano
6208035382
Fix unit tests
2018-10-04 18:51:00 -07:00
Mariano Cano
351ed7d5d2
Adapt step ca init and step ca new-token to provisioners.
2018-10-04 17:49:46 -07:00
