Commit Graph

118 Commits (0c7a2257ec7bccf4aee9f279c7589387fbb12026)

Author SHA1 Message Date
Kyle Havlovitz 8c2c9705d9 connect/ca: use weak type decoding in the Vault config parsing
7 years ago
Kyle Havlovitz 050da22473 connect/ca: undo the interface changes and use sign-self-issued in Vault
7 years ago
Kyle Havlovitz 914d9e5e20 connect/ca: add leaf verify check to cross-signing tests
7 years ago
Kyle Havlovitz bc997688e3 connect/ca: update Consul provider to use new cross-sign CSR method
7 years ago
Kyle Havlovitz 8a70ea64a6 connect/ca: update Vault provider to add cross-signing methods
7 years ago
Kyle Havlovitz 6a2fc00997 connect/ca: add URI SAN support to the Vault provider
7 years ago
Kyle Havlovitz 226a59215d connect/ca: fix vault provider URI SANs and test
7 years ago
Kyle Havlovitz 1a8ac686b2 connect/ca: add the Vault CA provider
7 years ago
Paul Banks 51fc48e8a6 Sign certificates valid from 1 minute earlier to avoid failures caused by clock drift
7 years ago
Paul Banks e514570dfa Actually return Intermediate certificates bundled with a leaf!
7 years ago
Kyle Havlovitz ab4a9a94f4
Re-use uint8ToString
7 years ago
Kyle Havlovitz 5683d628c4
Support giving the duration as a string in CA config
7 years ago
Paul Banks b4803eca59
Generate CSR using real trust-domain
7 years ago
Paul Banks c1f2025d96
Return TrustDomain from CARoots RPC
7 years ago
Kyle Havlovitz e00088e8ee
Rename some of the CA structs/files
7 years ago
Kyle Havlovitz 627aa80d5a
Use provider state table for a global serial index
7 years ago
Kyle Havlovitz 988510f53c
Add test for ca config http endpoint
7 years ago
Kyle Havlovitz de72834b8c
Move connect CA provider to separate package
7 years ago