168 Commits

Author	SHA1	Message	Date
Kyle Havlovitz	8c2c9705d9	connect/ca: use weak type decoding in the Vault config parsing	2018-06-25 12:25:42 -07:00
Kyle Havlovitz	050da22473	connect/ca: undo the interface changes and use sign-self-issued in Vault	2018-06-25 12:25:42 -07:00
Kyle Havlovitz	914d9e5e20	connect/ca: add leaf verify check to cross-signing tests	2018-06-25 12:25:41 -07:00
Kyle Havlovitz	bc997688e3	connect/ca: update Consul provider to use new cross-sign CSR method	2018-06-25 12:25:41 -07:00
Kyle Havlovitz	8a70ea64a6	connect/ca: update Vault provider to add cross-signing methods	2018-06-25 12:25:41 -07:00
Kyle Havlovitz	6a2fc00997	connect/ca: add URI SAN support to the Vault provider	2018-06-25 12:25:41 -07:00
Kyle Havlovitz	226a59215d	connect/ca: fix vault provider URI SANs and test	2018-06-25 12:25:41 -07:00
Kyle Havlovitz	1a8ac686b2	connect/ca: add the Vault CA provider	2018-06-25 12:25:41 -07:00
Paul Banks	51fc48e8a6	Sign certificates valid from 1 minute earlier to avoid failures caused by clock drift	2018-06-25 12:25:41 -07:00
Paul Banks	e514570dfa	Actually return Intermediate certificates bundled with a leaf!	2018-06-25 12:25:40 -07:00
Kyle Havlovitz	ab4a9a94f4	Re-use uint8ToString	2018-06-14 09:42:23 -07:00
Kyle Havlovitz	5683d628c4	Support giving the duration as a string in CA config	2018-06-14 09:42:22 -07:00
Paul Banks	b4803eca59	Generate CSR using real trust-domain	2018-06-14 09:42:16 -07:00
Paul Banks	c1f2025d96	Return TrustDomain from CARoots RPC	2018-06-14 09:42:15 -07:00
Kyle Havlovitz	e00088e8ee	Rename some of the CA structs/files	2018-06-14 09:42:15 -07:00
Kyle Havlovitz	627aa80d5a	Use provider state table for a global serial index	2018-06-14 09:42:15 -07:00
Kyle Havlovitz	988510f53c	Add test for ca config http endpoint	2018-06-14 09:42:15 -07:00
Kyle Havlovitz	de72834b8c	Move connect CA provider to separate package	2018-06-14 09:42:15 -07:00