Mariano Cano
ba40ce037b
Merge branch 'master' into okta-support
2019-09-20 16:00:44 -07:00
max furman
8bf124f6db
Add linters and fix some new linting errors.
2019-09-20 15:33:33 -07:00
Mariano Cano
27d69966c2
Add support for listenAddress from the CA in OIDC provisioners.
...
Fixes #150
2019-09-18 15:26:04 -07:00
Mariano Cano
61ba11a7fb
Fix typo.
2019-09-18 11:14:10 -07:00
Mariano Cano
7d92c3297f
Allow to add provisioners with ssh enabled.
2019-09-17 17:40:09 -07:00
max furman
1868ec39d8
Add ACME CA capabilities
2019-09-13 15:53:34 -07:00
max furman
e097873f95
Add a few examples with nbf and naf to ssh cert examplew
2019-09-13 14:29:04 -07:00
max furman
6aefd9fa6b
Set lifetime for ssh certs added to agent
...
* Fixes #142
2019-09-12 16:08:09 -07:00
max furman
01564f6a7e
Changes based on SSH CA PR Review
...
* Use global flags rather than flags local to the CA package.
* Alphabetize flag names so they're easier to parse for humans.
* Fix some documentation snafus.
* crt -> cert where possible. At least for internal naming. Not gonna
change JSON req/resp bodies b/c that would affect clients.
2019-09-09 13:08:25 -07:00
Sebastian Tiedtke
5a8c65510a
Help edits to limit scope to CA issuing certs and how to use them
2019-09-06 09:43:49 -07:00
Mariano Cano
59fa1ba3f8
Update examples.
2019-09-06 00:02:12 +02:00
Mariano Cano
b09a93d567
Merge branch 'master' into ssh-ca
2019-09-05 23:48:18 +02:00
max furman
2d4d5a0527
Add ability to set no password when using change-pass
2019-09-03 09:59:26 -07:00
max furman
ad0e89fd56
Solicit feedback from users
...
* step
* step help
* step ca init
2019-08-29 10:08:08 -07:00
max furman
043a79a76c
Add example for step ca certificate with RSA pub key
2019-08-28 18:15:42 -07:00
max furman
4fcf70192f
Support console mode in step ca [sign|certificate]
...
* Fixes #132
2019-08-27 13:10:00 -07:00
Max
37a648b70b
Merge pull request #136 from smallstep/kty
...
Add kty|crv|size options to 'step ca certificate'
2019-08-27 13:01:13 -07:00
max furman
e49b733fbf
switch to golangci-lint and fix lots of linting errors
2019-08-26 19:04:54 -07:00
max furman
b47a0b9110
Add kty|crv|size options to 'step ca certificate'
...
Fixes #133
2019-08-26 13:39:54 -07:00
max furman
c986fb1d00
Add emails sans to ca [sign|certificate] and certificate create
...
* x509util.SplitSANs now finds emails as well
2019-08-23 15:59:51 -07:00
max furman
7add520a41
linting
2019-08-21 18:19:31 -07:00
Mariano Cano
aa5aa257e6
Use sign types from cautils package.
2019-08-15 11:28:57 -07:00
Mariano Cano
af1b9db7ad
Remove dead code.
2019-08-14 16:54:19 -07:00
Mariano Cano
49579b9969
Rename command to step ssh certificate
2019-08-14 16:33:53 -07:00
Mariano Cano
0759276702
Refactor common code between ssh and ca to cautils and flags.
2019-08-14 15:46:05 -07:00
Mariano Cano
99e5cb985f
Move ssh code to new package
2019-08-14 13:02:03 -07:00
max furman
82d32aee44
Add bundle option to 'certificate [sign|create]'
...
* Fixes #126
2019-08-14 12:56:04 -04:00
max furman
4e65e79a7a
wip
2019-08-13 12:57:10 -04:00
Mariano Cano
f0496a97ee
Remove the bold bracket.
2019-08-12 17:16:11 -07:00
Sebastian Tiedtke
263410b4b5
Minor md fix
2019-08-12 17:12:55 -07:00
max furman
60085840de
Add a self-signed x509 profile and enable created from cli
2019-08-09 12:32:25 -07:00
Mariano Cano
30d66553c8
Change ssh to be false by default.
2019-08-06 12:13:46 -07:00
Mariano Cano
20b67e5400
Add experimental support for provisioning users.
2019-08-02 18:00:24 -07:00
Mariano Cano
af825e23b5
Add option to create SSH keys in step ca init
2019-08-01 15:05:42 -07:00
Mariano Cano
2d47c9182a
Use provisioner.SanitizeSSHUserPrincipal
2019-07-29 18:27:15 -07:00
Mariano Cano
58f6eb0219
Addapt offline to new interface.
2019-07-29 18:26:59 -07:00
Mariano Cano
c5ac01828b
Move subject check to sign.
2019-07-29 18:26:25 -07:00
jibin george
8ba584f772
review changes
2019-07-27 08:06:33 +05:30
Mariano Cano
9ac4e52318
Add key to agent.
2019-07-26 14:54:28 -07:00
Mariano Cano
63cbaad245
Switch order for private/public key
2019-07-26 13:52:32 -07:00
Mariano Cano
6790f5d087
Add support for offline mode in step ca ssh-certificate.
2019-07-26 13:49:25 -07:00
jibin george
abfcda25b7
Added configurable callback listener
...
Add cli flag to configure callback listener's port. default
127.0.0.1:8080
2019-07-26 19:55:24 +05:30
Mariano Cano
58a93b07a0
Remove dead code.
2019-07-25 18:39:03 -07:00
Mariano Cano
a6ecb701f3
Add support for ssh flags in step ca token.
...
Complete refactor of generate token.
2019-07-25 18:36:16 -07:00
Mariano Cano
028091935c
Refactor generate token.
2019-07-25 18:36:04 -07:00
Mariano Cano
0373b672b1
Format file.
2019-07-25 16:52:28 -07:00
Mariano Cano
f2267cbc09
Encrypt private key and allow to pass the passwords with flags.
2019-07-25 16:51:44 -07:00
Mariano Cano
913f36c35b
Add first pass on help for step ca ssh-certificate.
2019-07-25 16:16:42 -07:00
Mariano Cano
5f0c7a0f5b
Add option for signing an existing public key
2019-07-25 12:36:14 -07:00
Mariano Cano
b36ccb38df
Add missing command step ca ssh-certificate
...
Fixes smallstep/ca-component#187
2019-07-25 11:54:41 -07:00