Vishal Nayak
795d1a8d40
Vault SSH: Added vault server otp verify API
2015-07-22 16:00:58 -04:00
Vishal Nayak
ef05fe4051
Vault SSH: Vault agent support
2015-07-22 14:15:19 -04:00
Bradley Girardeau
709b91fbd1
ldap: change setting user policies to setting user groups
2015-07-20 11:33:39 -07:00
Vishal Nayak
c564f643a4
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-07-17 17:22:17 -04:00
Bradley Girardeau
7ee2419323
ldap: add ability to set policies based on username as well as groups
2015-07-14 15:46:15 -07:00
Bradley Girardeau
cbb6b64ce6
ldap: add ability to login with a userPrincipalName (user@upndomain)
2015-07-14 15:37:46 -07:00
Armon Dadgar
e7993c5bbd
auth/userpass: store password as hash instead of direct. Credit @kenbreeman
2015-07-13 15:09:24 +10:00
Armon Dadgar
e907cad8be
auth/userpass: protect against timing attack. Credit @kenbreeman
2015-07-13 15:01:18 +10:00
Armon Dadgar
d54ff83113
auth/app-id: protect against timing attack. Credit @kenbreeman
2015-07-13 14:58:18 +10:00
Vishal Nayak
47a9f548fe
Vault SSH: Refactoring and fixes
2015-07-10 18:44:31 -06:00
Vishal Nayak
eb0f119491
Vault SSH: Backend and CLI testing
2015-07-10 16:18:02 -06:00
Vishal Nayak
41d9006ea2
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-07-10 09:56:21 -06:00
Vishal Nayak
c25525a22a
Vault SSH: Test case skeleton
2015-07-10 09:56:14 -06:00
Armon Dadgar
b8754e740c
audit: properly restore TLS state
2015-07-08 16:45:15 -06:00
Vishal Nayak
6f86d32089
Vault SSH: Made port number configurable
2015-07-06 16:56:45 -04:00
Vishal Nayak
2bc139dfd1
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-07-06 11:05:08 -04:00
Armon Dadgar
c062345146
secret/transit: address PR feedback
2015-07-05 19:58:31 -06:00
Armon Dadgar
f2c7ba9357
secret/transit: use base64 for context to allow binary
2015-07-05 14:37:51 -07:00
Armon Dadgar
3af435d4b5
secret/transit: testing key derivation
2015-07-05 14:30:45 -07:00
Armon Dadgar
1ef4049f17
secret/transit: support key derivation in encrypt/decrypt
2015-07-05 14:19:24 -07:00
Armon Dadgar
d50eb96448
secret/transit: check for context for derived keys
2015-07-05 14:12:07 -07:00
Armon Dadgar
0a7fe56e0a
secret/transit: support derived keys
2015-07-05 14:11:02 -07:00
Vishal Nayak
280efd28f6
Vault SSH: PR review rework: Formatting/Refactoring
2015-07-02 19:52:47 -04:00
Bradley Girardeau
0ef2eca24f
ldap: add starttls support and option to specificy ca certificate
2015-07-02 15:49:51 -07:00
Vishal Nayak
5868213267
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-07-02 17:23:13 -04:00
Vishal Nayak
fbaea45101
Vault SSH: PR review rework
2015-07-02 17:23:09 -04:00
Jeff Mitchell
db1b4aadf9
Fix regexes to allow hyphens in role names, as the documentation shows
2015-07-01 20:39:18 -05:00
Vishal Nayak
2ebd10cdf4
Vault SSH: review rework: formatted and moved code
2015-07-01 21:26:42 -04:00
Vishal Nayak
e6e243b4ca
Vault SSH: Regex supports hypen in key name and role names
2015-07-01 21:05:52 -04:00
Vishal Nayak
57174693ce
Vault SSH: replaced concatenated strings by fmt.Sprintf
2015-07-01 20:35:11 -04:00
Vishal Nayak
13ab7fc40b
Vault SSH: PR review rework - 1
2015-07-01 11:58:49 -04:00
Vishal Nayak
af03222a3e
For SSH backend, allow factory to be provided instead of Backend
2015-07-01 09:37:11 -04:00
Vishal Nayak
b6293662f2
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-07-01 09:31:25 -04:00
Armon Dadgar
5151516127
cred/app-id: testing upgrade to salted keys
2015-06-30 18:37:10 -07:00
Armon Dadgar
ae324ce941
cred/app-id: first pass at automatic upgrading to salting
2015-06-30 18:09:08 -07:00
Armon Dadgar
6a9dc00e57
Remove SetLogger, and unify on framework.Setup
2015-06-30 17:45:20 -07:00
Armon Dadgar
22f543f837
Updating for backend API change
2015-06-30 17:36:12 -07:00
Vishal Nayak
d258b1819a
lease handling fix
2015-06-30 20:21:41 -04:00
Vishal Nayak
b821a8e872
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-06-30 18:33:37 -04:00
Vishal Nayak
2163818bd6
Input validations, help strings, default_user support
2015-06-30 18:33:17 -04:00
Armon Dadgar
e9f05fbe4f
helper/uuid: single generateUUID definition
2015-06-30 12:38:32 -07:00
Armon Dadgar
f7602dd44a
Merge pull request #380 from kgutwin/cert-cli
...
Enable TLS client cert authentication via the CLI
2015-06-30 11:44:28 -07:00
Armon Dadgar
dd9040b85d
ldap: fixing merge conflict
2015-06-30 09:40:43 -07:00
Jeff Mitchell
5df856b519
Put timestamp back into the username. Since Cassandra doesn't support expiration, this can be used by scripts to manually clean up old users if revocation fails for some reason.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-30 11:15:46 -04:00
Jeff Mitchell
035c430eb2
Address some issues from code review.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-30 09:27:23 -04:00
Jeff Mitchell
1faaf20b92
A Cassandra secrets backend.
...
Supports creation and deletion of users in Cassandra using flexible CQL queries.
TLS, including client authentication, is supported.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-30 09:04:01 -04:00
Karl Gutwin
67993efeb0
Better error messages.
2015-06-30 08:59:38 -04:00
Karl Gutwin
c26fca9180
Merge remote-tracking branch 'upstream/master' into cert-cli
2015-06-30 08:31:00 -04:00
Karl Gutwin
48e3a8d8ce
enable CLI cert login
2015-06-29 23:29:41 -04:00
Vishal Nayak
9ba1d26f4e
merge changes from master
2015-06-29 22:01:43 -04:00