7782 Commits

Author SHA1 Message Date
Armon Dadgar
01dc26bdeb Fixing merge conflict 2015-06-29 15:19:04 -07:00
Armon Dadgar
111856a00f vault: handle a panic while generating audit output 2015-06-29 15:11:35 -07:00
Armon Dadgar
b62cd81299 Updating Godeps 2015-06-29 15:05:44 -07:00
Armon Dadgar
68ea05db0b Fixing godeps file 2015-06-29 14:54:25 -07:00
Armon Dadgar
c812623327 Merge branch 'bluecmd-master' 2015-06-29 14:51:03 -07:00
Armon Dadgar
de6ce89c39 Fixing merge conflict 2015-06-29 14:50:55 -07:00
Armon Dadgar
199155b41b Merge pull request #373 from nbrownus/audit_key-status
Fixing key-status if audit logging is on
2015-06-29 14:47:55 -07:00
Karl Gutwin
75861c7c3b Initial sketch for client TLS auth 2015-06-29 15:33:16 -04:00
Vishal Nayak
208e068138 SCP in pure GO and CIDR parsing fix 2015-06-29 11:49:34 -04:00
Vishal Nayak
5da639feff Creating SSH keys and removal of files in pure 'go' 2015-06-26 15:43:27 -04:00
Vishal Nayak
7dbad8386c ssh/lookup implementation and refactoring 2015-06-25 21:47:32 -04:00
Vishal Nayak
e90fb0cc09 Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault 2015-06-24 18:13:26 -04:00
Vishal Nayak
4b07eba487 POC: Rework. Doing away with policy file. 2015-06-24 18:13:12 -04:00
esell
11a0b3b6c6 Set SkipSSLVerify default to false, add warning in help message 2015-06-24 13:38:14 -06:00
Nate Brown
74013ac751 Fixing key-status if audit logging is on 2015-06-24 10:57:05 -07:00
esell
e3a3fc8ab1 cleanup the code a bit 2015-06-24 10:09:29 -06:00
esell
ee690118b9 allow skipping SSL verification on ldap auth 2015-06-24 10:05:45 -06:00
Armon Dadgar
01592c0744 Merge pull request #310 from jefferai/f-pki
Initial PKI backend implementation
2015-06-21 11:12:22 +01:00
Armon Dadgar
2f556a1a31 Merge pull request #365 from swills/passwd
allow building on FreeBSD
2015-06-21 11:09:19 +01:00
Armon Dadgar
27a61eb92f Merge pull request #368 from sergiopatino/master
Fix typo in link to Atlas URL on Community page.
2015-06-21 11:08:57 +01:00
sergiopatino
cc52aaf585 Fix typo in link to Atlas URL.
Missing a colon after https!
2015-06-21 02:41:26 -07:00
Nate Brown
a6b70d04d4 Fixing tests 2015-06-19 14:04:32 -07:00
Nate Brown
ed0853ce18 Doing a little better with http response codes 2015-06-19 14:00:48 -07:00
Steve Wills
fce09c2962 allow building on FreeBSD
Allow this file to build on FreeBSD
2015-06-19 16:59:24 -04:00
Jeff Mitchell
15594561ab Add unit tests for certutil, and fix a whitespace stripping issue.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-19 16:06:56 -04:00
Jeff Mitchell
d8ed14a603 Merge remote-tracking branch 'upstream/master' into f-pki 2015-06-19 13:01:26 -04:00
Vishal Nayak
3a3270028b Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault 2015-06-19 12:59:41 -04:00
Vishal Nayak
9d709bd5a9 SSHs to multiple users by registering the respective host keys 2015-06-19 12:59:36 -04:00
Jeff Mitchell
435aefc072 A few things:
* Add comments to every non-obvious (e.g. not basic read/write handler type) function
* Remove revoked/ endpoint, at least for now
* Add configurable CRL lifetime
* Cleanup
* Address some comments from code review

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-19 12:48:18 -04:00
Mitchell Hashimoto
943d914fec audit: some tests 2015-06-19 03:31:19 -07:00
Nate Brown
f5ebc5cc3b Fixing tests 2015-06-18 20:14:20 -07:00
Nate Brown
fb3ee8838c Collapsing audit response logging to a single point 2015-06-18 19:48:26 -07:00
Nate Brown
55e37392ad Actually not logging auth in the response if nil 2015-06-18 19:48:00 -07:00
Nate Brown
71a738ad7d Logging authentication errors and bad token usage 2015-06-18 18:30:18 -07:00
Vishal Nayak
5cd9b7a7d8 merging with master 2015-06-18 20:51:11 -04:00
Vishal Nayak
fe5bb20e92 Roles, key renewal handled. End-to-end basic flow working. 2015-06-18 20:48:41 -04:00
Nate Brown
314eea7ff0 Adding error and remote_address to audit log lines 2015-06-18 17:17:18 -07:00
Armon Dadgar
8c970cf000 cli: adding path-help to common commands list 2015-06-18 17:12:21 -07:00
Armon Dadgar
f91b91289c command/read: Ensure only a single argument. Fixes #304 2015-06-18 16:00:41 -07:00
Armon Dadgar
48e7531f79 command/path-help: rename command, better error if sealed. Fixes #234 2015-06-18 15:56:42 -07:00
Armon Dadgar
2d0cde4ccc vault: improve lease error message. Fixes #338 2015-06-18 15:37:08 -07:00
Armon Dadgar
57c8e7cb25 Merge branch 'pradeepchhetri-master' 2015-06-18 14:31:16 -07:00
Armon Dadgar
46ba8d10a5 physical/mysql: cleanup and documentation 2015-06-18 14:31:00 -07:00
Armon Dadgar
748c8508a5 Merge branch 'master' of https://github.com/pradeepchhetri/vault into pradeepchhetri-master 2015-06-18 13:55:25 -07:00
Armon Dadgar
2772807547 command/write: adding force flag for when no data fields are necessary. Fixes #357 2015-06-18 13:51:06 -07:00
Armon Dadgar
57d1230e6c command/server: fixing output weirdness 2015-06-18 13:48:18 -07:00
Armon Dadgar
0696bc47e0 command/auth: warn earlier about VAULT_TOKEN 2015-06-18 13:48:04 -07:00
Jeff Mitchell
23ba605068 Refactor to allow only issuing CAs to be set and not have things blow up. This is useful/important for e.g. the Cassandra backend, where you may want to do TLS with a specific CA cert for server validation, but not actually do client authentication with a client cert.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-18 15:22:58 -04:00
Jeff Mitchell
c4256601f2 Restructure a little bit to make the helper library fully standalone. This makes it easier to move around later if desired, and for use by external programs.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-18 06:42:57 -04:00
Armon Dadgar
ee176b2f5d command/auth: warn about the VAULT_TOKEN env var. Fixes #195 2015-06-17 19:19:02 -07:00