10 Commits

Author	SHA1	Message	Date
Hans Hasselberg	87f32c8ba6	auto_encrypt: set dns and ip san for k8s and provide configuration (#6944) ... * Add CreateCSRWithSAN * Use CreateCSRWithSAN in auto_encrypt and cache * Copy DNSNames and IPAddresses to cert * Verify auto_encrypt.sign returns cert with SAN * provide configuration options for auto_encrypt dnssan and ipsan * rename CreateCSRWithSAN to CreateCSR	2020-01-17 23:25:26 +01:00
Todd Radel	54f92e2924	Make all Connect Cert Common Names valid FQDNs (#6423)	2019-11-11 17:11:54 +00:00
Paul Banks	87699eca2f	Fix support for RSA CA keys in Connect. (#6638) ... * Allow RSA CA certs for consul and vault providers to correctly sign EC leaf certs. * Ensure key type ad bits are populated from CA cert and clean up tests * Add integration test and fix error when initializing secondary CA with RSA key. * Add more tests, fix review feedback * Update docs with key type config and output * Apply suggestions from code review Co-Authored-By: R.B. Boyer <rb@hashicorp.com>	2019-11-01 13:20:26 +00:00
Alvin Huang	c516fabfac	revert commits on master (#6413)	2019-08-27 17:45:58 -04:00
tradel	9b1ac4e7ef	add subject names to issued certs	2019-08-27 14:15:10 -07:00
Kyle Havlovitz	57deb28ade	connect/ca: tighten up the intermediate signing verification	2018-09-14 16:08:54 -07:00
Kyle Havlovitz	050da22473	connect/ca: undo the interface changes and use sign-self-issued in Vault	2018-06-25 12:25:42 -07:00
Kyle Havlovitz	6a2fc00997	connect/ca: add URI SAN support to the Vault provider	2018-06-25 12:25:41 -07:00
Paul Banks	140f3f5a44	Fix logical conflicts with CA refactor	2018-06-14 09:42:17 -07:00
Paul Banks	b4803eca59	Generate CSR using real trust-domain	2018-06-14 09:42:16 -07:00