Nicki Watt
05c9e5b5ad
Make token-lookup functionality available via Vault CLI
2015-12-29 20:18:59 +00:00
Jeff Mitchell
c15974cbdd
Make TokenHelper an interface and split exisiting functionality
...
Functionality is split into ExternalTokenHelper, which is used if a path
is given in a configuration file, and InternalTokenHelper which is used
otherwise. The internal helper no longer shells out to the same Vault
binary, instead performing the same actions with internal code. This
avoids problems using dev mode when there are spaces in paths or when
the binary is built in a container without a shell.
Fixes #850 among others
2015-12-22 10:23:30 -05:00
Jeff Mitchell
904e1ee600
Print version on startup.
...
Fixes #765
2015-11-09 13:52:55 -05:00
Jeff Mitchell
6c21b3b693
Remove JWT for the 0.3 release; it needs a lot of rework.
2015-09-24 16:23:44 -04:00
Jeff Mitchell
dd8ac00daa
Rejig how dynamic values are represented in system view and location of some functions in various packages; create mount-tune command and API analogues; update documentation
2015-09-10 15:09:54 -04:00
vishalnayak
2ac3cabf87
Merging changes from master
2015-08-12 09:28:16 -07:00
Erik Kristensen
d877b713e9
initial pass at JWT secret backend
2015-08-06 17:49:44 -06:00
Vishal Nayak
13ab7fc40b
Vault SSH: PR review rework - 1
2015-07-01 11:58:49 -04:00
Vishal Nayak
b821a8e872
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-06-30 18:33:37 -04:00
Armon Dadgar
f7602dd44a
Merge pull request #380 from kgutwin/cert-cli
...
Enable TLS client cert authentication via the CLI
2015-06-30 11:44:28 -07:00
Jeff Mitchell
1faaf20b92
A Cassandra secrets backend.
...
Supports creation and deletion of users in Cassandra using flexible CQL queries.
TLS, including client authentication, is supported.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-30 09:04:01 -04:00
Karl Gutwin
48e3a8d8ce
enable CLI cert login
2015-06-29 23:29:41 -04:00
Vishal Nayak
e90fb0cc09
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-06-24 18:13:26 -04:00
Jeff Mitchell
d8ed14a603
Merge remote-tracking branch 'upstream/master' into f-pki
2015-06-19 13:01:26 -04:00
Vishal Nayak
5cd9b7a7d8
merging with master
2015-06-18 20:51:11 -04:00
Armon Dadgar
48e7531f79
command/path-help: rename command, better error if sealed. Fixes #234
2015-06-18 15:56:42 -07:00
Armon Dadgar
70ee1866ca
server: graceful shutdown for fast failover. Fixes #308
2015-06-17 18:24:56 -07:00
Vishal Nayak
fb866f9059
Added: Ssh CLI command and API, config lease impl, sshConnect path to backend, http handler for Ssh connect
2015-06-17 12:39:49 -04:00
Vishal Nayak
647f3a59d9
Vault SSH: POC Stage 1. Skeleton implementation.
2015-06-16 16:58:54 -04:00
Jeff Mitchell
530b67bbb9
Initial PKI backend implementation.
...
Complete:
* Up-to-date API documents
* Backend configuration (root certificate and private key)
* Highly granular role configuration
* Certificate generation
* CN checking against role
* IP and DNS subject alternative names
* Server, client, and code signing usage types
* Later certificate (but not private key) retrieval
* CRL creation and update
* CRL/CA bare endpoints (for cert extensions)
* Revocation (both Vault-native and by serial number)
* CRL force-rotation endpoint
Missing:
* OCSP support (can't implement without changes in Vault)
* Unit tests
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Armon Dadgar
da566a41fd
command/rekey: first pass at rekey
2015-05-28 15:08:09 -07:00
Armon Dadgar
4a11980dc1
command/rotate: Adding new rotate command
2015-05-28 10:16:33 -07:00
Armon Dadgar
db55ac7d74
command/key-status: Adding new key-status command
2015-05-27 18:17:02 -07:00
Mitchell Hashimoto
131a540a1d
cli: should be !=
2015-05-11 11:45:48 -07:00
Mitchell Hashimoto
cbbc16476f
cli: typo
2015-05-11 11:45:02 -07:00
Mitchell Hashimoto
3b79bc3449
cli: fix dev on version flga
2015-05-11 11:44:44 -07:00
Giovanni Bajo
230fc30ea2
Initial implementation of the LDAP credential backend
2015-05-09 22:04:19 +02:00
Armon Dadgar
44fb28f762
audit/syslog: first pass
2015-04-27 15:56:40 -07:00
Armon Dadgar
9daf07176b
commands: enable the mysql secret backend
2015-04-25 12:06:08 -07:00
Armon Dadgar
6bd4dd7f2b
Enable the credential backend
2015-04-23 21:46:30 -07:00
Armon Dadgar
e4285526b2
command: Rename seal-status to status
2015-04-20 12:11:21 -07:00
Mitchell Hashimoto
8137bf7588
cli: add token-renew
2015-04-19 18:04:24 -07:00
Mitchell Hashimoto
42743eb109
command/policy-delete
2015-04-19 16:36:11 -07:00
Mitchell Hashimoto
c8498c3c91
credentials/userpass: integrate into auth cli
2015-04-19 15:17:24 -07:00
Mitchell Hashimoto
550db69c42
cli: add postgresql
2015-04-18 18:44:23 -07:00
Armon Dadgar
d02028a0e4
Adding transit logical backend
2015-04-15 17:08:12 -07:00
Mitchell Hashimoto
4faf951f03
command/renew
2015-04-13 20:42:07 -07:00
Mitchell Hashimoto
8f12a29b1e
cli: make commands more customizable
2015-04-12 17:19:26 -07:00
Mitchell Hashimoto
0b058d6335
move the cli to the cli/ package so enterprising individuals can call it
2015-04-12 16:58:45 -07:00