7782 Commits

Author SHA1 Message Date
Jeff Mitchell
5ed60b7430 changelog++ 2017-05-01 10:37:35 -04:00
vishalnayak
08921021a6 Merge branch 'oss' into sys-tidy-leases 2017-05-01 09:58:58 -04:00
vishalnayak
a05fee0bc3 changelog++ 2017-04-30 11:40:13 -04:00
Michael Ansel
8da4405c99 Add constraints on the Common Name for certificate-based authentication (#2595)
* Refactor to consolidate constraints on the matching chain

* Add CN prefix/suffix constraint

* Maintain backwards compatibility (pick a random cert if multiple match)

* Vendor go-glob

* Replace cn_prefix/suffix with required_name/globbing

Move all the new tests to acceptance-capable tests instead of embedding in the CRL test

* Allow authenticating against a single cert

* Add new params to documentation

* Add CLI support for new param

* Refactor for style

* Support multiple (ORed) name patterns

* Rename required_names to allowed_names

* Update docs for parameter rename

* Use the new TypeCommaStringSlice
2017-04-30 11:37:10 -04:00
Calvin Leung Huang
c426a96ef9 Merge pull request #2660 from hashicorp/version-metadata
Add version metadata
2017-04-28 17:30:45 -04:00
Jeff Mitchell
d2f081ef79 Flip back to sstarcher go-okta post-merge 2017-04-28 17:21:49 -04:00
Calvin Leung Huang
2eb72b69fd Add version metadata 2017-04-28 16:22:00 -04:00
Cameron Stokes
91366e256c Add local flag to docs for API endpoints. (#2625) 2017-04-28 14:33:27 -04:00
Ryan Smith-Evans
c58e4f0817 Added required header (#2656) 2017-04-28 08:56:14 -04:00
Calvin Leung Huang
74965a87af Add test for ca and crl case 2017-04-28 08:55:28 -04:00
Jeff Mitchell
b2db9c35f6 Switch to jefferai/go-okta for now to work around Fatal lines in upstream (#2658)
Switch to jefferai/go-okta for now to work around Fatal lines in upstream
2017-04-28 08:39:51 -04:00
Vishal Nayak
c947e31d1b Return error message for failure to parse CSR (#2657) 2017-04-28 08:30:24 -04:00
greenbrian
8074e6167a Fix links on Consul storage backend page (#2652) 2017-04-28 07:48:23 -04:00
Chris Hoffman
b4602fc244 Randomizing x coordinate in shamir split (#2621) 2017-04-28 07:47:05 -04:00
Brian Kassouf
445a0e339b Update the username length for postgresql 2017-04-27 23:02:33 -07:00
Brian Kassouf
6684e5c91d Update username length for MSSQL 2017-04-27 22:59:22 -07:00
Brian Kassouf
766b90976d If user provides a revocation statement for MSSQL plugin honor it 2017-04-27 22:56:06 -07:00
Calvin Leung Huang
38a01b8e1b Refactor cert_util_test 2017-04-27 17:09:59 -04:00
Calvin Leung Huang
47df4acdf1 Merge pull request #2632 from hashicorp/cassandra-plugin
Add cassandra plugin
2017-04-27 16:28:33 -04:00
vishalnayak
a8ef2c013e Refactor locking code in lease tidy; add ending debug statements 2017-04-27 16:22:19 -04:00
vishalnayak
2ef62fe592 refactor lock handling in token tidy function 2017-04-27 13:48:29 -04:00
Calvin Leung Huang
7fdf4acc6f Verify update operation was performed on revokeCert 2017-04-27 12:30:44 -04:00
vishalnayak
98cdb6807f Use an atomic lock for tidy operation in token store 2017-04-27 11:41:33 -04:00
vishalnayak
3fdf38a58a Distinguish valid and invalid tokens using bool value in cache 2017-04-27 11:31:42 -04:00
vishalnayak
785177af69 Merge branch 'oss' into sys-tidy-leases 2017-04-27 11:23:48 -04:00
vishalnayak
0c65cd422d Some more logging updates 2017-04-27 11:20:55 -04:00
vishalnayak
0d629ffd05 Cache only valid tokens 2017-04-27 11:08:11 -04:00
Calvin Leung Huang
230a36c5a1 Update New() func signature and its references 2017-04-27 11:07:52 -04:00
vishalnayak
711153d74a Fix logging suggestions; put the policyStore nil check back in 2017-04-27 10:56:19 -04:00
Chris Hoffman
804bca7bcd Updating revoke/renew to prefer PUT method (#2646) 2017-04-27 10:47:43 -04:00
Calvin Leung Huang
a5ddaabdba Rename tests, use HandleRequest() for existing paths 2017-04-27 09:47:56 -04:00
Brian Kassouf
2e2d3827da Add check to ensure we don't overwrite existing connections 2017-04-26 16:43:42 -07:00
Brian Kassouf
15842ec280 Fix revoke tree test 2017-04-26 16:26:48 -07:00
Brian Kassouf
f92d6868a0 Add an error check to reset a plugin if it is closed 2017-04-26 15:55:34 -07:00
Brian Kassouf
6b050470fd Update to a RWMutex 2017-04-26 15:23:14 -07:00
vishalnayak
b036478ac2 Fix logging levels 2017-04-26 17:29:04 -04:00
vishalnayak
65c63b4140 Fix the log statements 2017-04-26 17:17:19 -04:00
vishalnayak
de1a2a01c3 Added caching of looked up tokens 2017-04-26 16:54:48 -04:00
vishalnayak
dca0d703aa Added logger to token store and logs to tidy function 2017-04-26 16:11:23 -04:00
Calvin Leung Huang
ced4c88050 Add remaining tests 2017-04-26 16:05:58 -04:00
vishalnayak
e52625d375 Revoke lease that has empty token; added logs 2017-04-26 15:48:28 -04:00
vishalnayak
3477038c9f Added atomic lock to ensure a single tidy operation is in progress 2017-04-26 15:07:58 -04:00
vishalnayak
14aaa0a79c Merge branch 'oss' into clean-stale-leases 2017-04-26 15:07:27 -04:00
Jeff Mitchell
cbb873d241 Update error message to distinguish tree revocation issue from non-tree 2017-04-26 14:06:45 -04:00
Brian Kassouf
cb13786f0a Fix MSSQL test 2017-04-26 10:52:10 -07:00
Brian Kassouf
dc9740d97a Add mssql builtin plugin type 2017-04-26 10:34:45 -07:00
Brian Kassouf
d8dbfc6a0c Update the error messages for renew and revoke 2017-04-26 10:29:16 -07:00
Brian Kassouf
37aacba0da Change ttl types to TypeDurationSecond 2017-04-26 10:02:37 -07:00
Calvin Leung Huang
4bf51ca52c Fix crl_util test 2017-04-26 09:58:34 -04:00
Calvin Leung Huang
c269fe1ce0 Tests for cert and crl util 2017-04-26 02:46:01 -04:00