7782 Commits

Author SHA1 Message Date
Jeff Mitchell
20ac7a46f7 Add acceptance tests
* CA bundle uploading
* Basic role creation
* Common Name restrictions
* IP SAN restrictions
* EC + RSA keys
* Various key usages
* Lease times
* CA fetching in various formats
* DNS SAN handling

Also, fix a bug when trying to get code signing certificates.

Not tested:
* Revocation (I believe this is impossible with the current testing framework)

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Jeff Mitchell
530b67bbb9 Initial PKI backend implementation.
Complete:
* Up-to-date API documents
* Backend configuration (root certificate and private key)
* Highly granular role configuration
* Certificate generation
* CN checking against role
* IP and DNS subject alternative names
* Server, client, and code signing usage types
* Later certificate (but not private key) retrieval
* CRL creation and update
* CRL/CA bare endpoints (for cert extensions)
* Revocation (both Vault-native and by serial number)
* CRL force-rotation endpoint

Missing:
* OCSP support (can't implement without changes in Vault)
* Unit tests

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Armon Dadgar
2b0b519a16 Merge pull request #318 from jefferai/f-fix-client-default
Fix nil dereference in API client
2015-06-06 13:35:48 -07:00
Jeff Mitchell
6f5f247b28 The docs say that if HttpClient is nil, http.DefaultClient will be used. However, the code doesn't do this, resulting in a nil dereference. 2015-06-04 14:01:10 -04:00
Seth Vargo
a0ad309d1f Merge pull request #315 from justincampbell/docs-json-auth
docs: Fix examples of auth via JSON
2015-06-04 11:08:01 -04:00
Justin Campbell
a8850ed5ed docs: Fix examples of auth via JSON
For both userpass and LDAP
2015-06-04 10:38:11 -04:00
Justin Campbell
55de351b98 Remove .DS_Store
Already gitignored
2015-06-04 10:17:00 -04:00
Armon Dadgar
798892a470 Merge pull request #313 from hashicorp/sethvargo/update_aws
Update to the new location for the aws sdk
2015-06-03 21:41:44 +02:00
Seth Vargo
91775a3ecc Save new aws library 2015-06-03 15:07:39 -04:00
Seth Vargo
3fbbf6bcf8 AWS moved from labs to official 2015-06-03 15:02:49 -04:00
Armon Dadgar
3ebde4b268 Merge pull request #297 from buth/etcd-ha
etcd HA + tests
2015-06-03 00:44:46 +02:00
Eric Buth
00f5119a38 etcd HA physical backend: added documention + style updates 2015-06-02 18:00:06 -04:00
Armon Dadgar
95ce9c2364 vault: attempt to resolve #303 2015-06-02 22:55:18 +02:00
Eric Buth
e751395e8c etcd HA physical backend: stopchannel style, held state remote-only, lock value stored in semaphore key 2015-06-02 13:18:55 -04:00
Armon Dadgar
9700bcd3e5 vault: fixing a typo 2015-06-02 16:04:05 +02:00
Armon Dadgar
6399e69810 Merge pull request #299 from boncheff/patch-1
Update SPEC.md
2015-06-02 15:56:31 +02:00
boncheff
89a75bac51 Update SPEC.md 2015-06-02 14:51:43 +01:00
Eric Buth
2e17df9b4b etcd HA + tests 2015-06-01 18:29:54 -04:00
Seth Vargo
669686f654 Merge pull request #270 from sheldonh/no_export_vault_token
Don't recommend exporting VAULT_TOKEN
2015-06-01 11:52:40 -04:00
Armon Dadgar
63b3a4f61e Merge pull request #293 from karel1980/typo1
Typo fix
2015-06-01 17:26:16 +02:00
Karel Vervaeke
e44ebb91ab Typo fix 2015-06-01 15:29:20 +02:00
Armon Dadgar
9b879d3434 Merge pull request #263 from sheldonh/iam-policy
List IAM permissions required by root credentials
2015-06-01 13:16:51 +02:00
Armon Dadgar
3e3989915f Merge pull request #290 from jalateras/makefile-bootstrap
Makefile bootstrap
2015-06-01 13:15:37 +02:00
Armon Dadgar
3f9a3a5811 Merge pull request #278 from Zhann/feature/add_dev_to_server_options_help
Add help info for -dev flag
2015-06-01 13:08:50 +02:00
Armon Dadgar
7abe375a9c command/rekey: use same language in rekey as init 2015-06-01 13:08:20 +02:00
Armon Dadgar
b1f64cb521 Merge pull request #273 from hashicorp/unseal-keys-notice
Change phrasing for unseal key notification
2015-06-01 13:06:52 +02:00
Armon Dadgar
35b10a7a9a Merge pull request #261 from jsok/consul-lease
Add ability to configure consul lease durations
2015-06-01 13:04:28 +02:00
Armon Dadgar
601d888ee2 Merge pull request #252 from kenbreeman/physical_zookeeper_ha
Physical zookeeper ha
2015-06-01 13:03:27 +02:00
Armon Dadgar
96241c4972 Merge pull request #277 from hashicorp/f-rotate
Add support for key rotation
2015-06-01 12:52:32 +02:00
Seth Vargo
6e9f37e993 Cleanup style on http index docs 2015-05-31 21:23:44 -07:00
Seth Vargo
767a3e9e32 Merge pull request #271 from boncheff/f-doc-update-read-write-example
Update index.html.md
2015-05-31 21:20:34 -07:00
Jim Alateras
8f85dd739a Merge branch 'master' of https://github.com/hashicorp/vault into makefile-bootstrap 2015-06-01 09:33:23 +10:00
Jim Alateras
21baf6dc95 Added a bootstrap target in the makefile to download required tools and updated the README.md instructions 2015-06-01 09:32:36 +10:00
Seth Vargo
6c677fd4f1 Merge pull request #279 from whit537/patch-1
Capitalize the first word of a sentence
2015-05-31 15:53:34 -07:00
Seth Vargo
974e8526cd Merge pull request #280 from whit537/patch-2
Put me in charge of dev mode :)
2015-05-31 15:53:24 -07:00
Seth Vargo
bdd6fed13f Merge pull request #282 from whit537/patch-3
Add a missing word
2015-05-31 15:52:21 -07:00
Seth Vargo
6d0a5f3e8a Merge pull request #283 from whit537/patch-4
revisions to Getting Started > Dynamic Secrets
2015-05-31 15:52:08 -07:00
Seth Vargo
81466baecc Merge pull request #284 from whit537/patch-5
revisions to Getting Started > Built-in Help
2015-05-31 15:51:51 -07:00
Seth Vargo
cefceb35d8 Merge pull request #285 from whit537/patch-6
revisions to Getting Started > Authentication
2015-05-31 15:51:39 -07:00
Seth Vargo
4724b9ce56 Merge pull request #286 from whit537/patch-7
revisions to Getting Started > Access Control Policies
2015-05-31 15:51:08 -07:00
Seth Vargo
0af7e11fc6 Merge pull request #287 from whit537/patch-8
revisions to Getting Started > Deploy Vault
2015-05-31 15:50:58 -07:00
Seth Vargo
e3e0477997 Merge pull request #289 from whit537/patch-9
revisions to Secrets > Generic
2015-05-31 15:50:09 -07:00
Chad Whitacre
adb777cc0f Provide missing verb 2015-05-31 17:19:34 -04:00
Chad Whitacre
15ed262345 Fix punctuation
We want an apostrophe (for the contraction, not the possessive), but we don't want an extra period.
2015-05-31 17:00:44 -04:00
Chad Whitacre
d0520bf24a Remove an errant article 2015-05-31 16:47:15 -04:00
Chad Whitacre
1e5841aa4d Fix number of a noun 2015-05-31 16:42:29 -04:00
Chad Whitacre
678edf5376 Fix another broken passive 2015-05-31 16:34:34 -04:00
Chad Whitacre
28fd5ed7f6 Fix a broken verb voice 2015-05-31 16:31:10 -04:00
Chad Whitacre
b201f0a54f Charges don't incur themselves 2015-05-31 16:24:03 -04:00
Chad Whitacre
86e8195cb1 REMOVE A SINGLE WHITESPACE CHARACTER 2015-05-31 16:21:39 -04:00