Jeff Mitchell
79164f38ad
Merge branch 'master' into f-pki
2015-06-16 13:43:25 -04:00
Ryan Currah
35f1cfeb77
Do not output the trailing newline in encoding.
...
Added -n to echo command to prevent newlines from showing up in encoding.
2015-06-13 12:03:57 -04:00
Jeff Mitchell
067fbc9078
Fix a docs-out-of-date bug.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-12 16:33:00 -04:00
Jeff Mitchell
0ee9735a5a
Fix some out-of-date examples.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-11 21:17:05 -04:00
Jeff Mitchell
20ac7a46f7
Add acceptance tests
...
* CA bundle uploading
* Basic role creation
* Common Name restrictions
* IP SAN restrictions
* EC + RSA keys
* Various key usages
* Lease times
* CA fetching in various formats
* DNS SAN handling
Also, fix a bug when trying to get code signing certificates.
Not tested:
* Revocation (I believe this is impossible with the current testing framework)
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Jeff Mitchell
530b67bbb9
Initial PKI backend implementation.
...
Complete:
* Up-to-date API documents
* Backend configuration (root certificate and private key)
* Highly granular role configuration
* Certificate generation
* CN checking against role
* IP and DNS subject alternative names
* Server, client, and code signing usage types
* Later certificate (but not private key) retrieval
* CRL creation and update
* CRL/CA bare endpoints (for cert extensions)
* Revocation (both Vault-native and by serial number)
* CRL force-rotation endpoint
Missing:
* OCSP support (can't implement without changes in Vault)
* Unit tests
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Armon Dadgar
9b879d3434
Merge pull request #263 from sheldonh/iam-policy
...
List IAM permissions required by root credentials
2015-06-01 13:16:51 +02:00
Armon Dadgar
35b10a7a9a
Merge pull request #261 from jsok/consul-lease
...
Add ability to configure consul lease durations
2015-06-01 13:04:28 +02:00
Chad Whitacre
adb777cc0f
Provide missing verb
2015-05-31 17:19:34 -04:00
certifiedloud
2521e90ef7
replaced confusing term 'physical' with 'storage'.
2015-05-27 14:44:17 -06:00
Sheldon Hearn
5a28f0bcbd
Missed a few IAM permissions
2015-05-27 16:42:12 +02:00
Sheldon Hearn
7cba6f84de
List IAM permissions required by root credentials
2015-05-27 16:28:24 +02:00
Jonathan Sokolowski
b872babb7b
website: Update /consul/roles/ parameters
2015-05-27 09:54:15 +10:00
Armon Dadgar
2d9b12b853
website: Document overwrite behavior. Fixes #182
2015-05-11 10:58:29 -07:00
Mitchell Hashimoto
9f9527ddc3
Merge pull request #54 from pborreli/typos
...
website: fixed typos
2015-04-28 11:37:49 -07:00
Emil Hessman
4079905682
website: merge
2015-04-28 20:36:27 +02:00
Pascal Borreli
bbd3ce341a
Fixed typos
2015-04-28 19:36:16 +01:00
Emil Hessman
79b098b89e
website: address minor doc typos
2015-04-28 20:32:04 +02:00
Andrew Williams
cfe60c4846
website: fix small typo
2015-04-28 13:21:44 -05:00
Mat Elder
680f55aee6
msyql to consul on consul backend docs
2015-04-28 14:11:42 -04:00
Armon Dadgar
2bcba24561
website: remove TODO from transit quickstart
2015-04-27 14:58:53 -07:00
Armon Dadgar
478a5965ee
secret/aws: Using roles instead of policy
2015-04-27 14:20:28 -07:00
Armon Dadgar
aaf10cd624
Do not root protect role configurations
2015-04-27 14:07:20 -07:00
Armon Dadgar
3330d43d44
secret/postgres: secret/mysql: roles endpoints root protected
2015-04-27 14:04:10 -07:00
Armon Dadgar
f159750509
secret/consul: replace policy with roles, and prefix the token path
2015-04-27 13:59:56 -07:00
Armon Dadgar
d425ca22df
secret/transit: rename policy to keys
2015-04-27 13:52:47 -07:00
Armon Dadgar
b80f3e4e06
website: API consistency
2015-04-27 12:30:46 -07:00
Armon Dadgar
26b5dc20c6
website: aws API
2015-04-27 12:26:23 -07:00
Armon Dadgar
27902b1d06
website: make PG quickstart like MySQL
2015-04-27 12:16:07 -07:00
Armon Dadgar
fd00322981
website: adding postgresql API docs
2015-04-27 11:17:13 -07:00
Armon Dadgar
e44fd556a8
website: document Consul APIs
2015-04-27 11:08:47 -07:00
Seth Vargo
6b62366d2b
Add Quick Start for Postgresql
2015-04-27 09:30:21 -04:00
Seth Vargo
ad8f1f3659
Add Quick Start for AWS
2015-04-27 09:29:16 -04:00
Armon Dadgar
e7298e1169
website: start consul api
2015-04-26 22:03:38 -07:00
Armon Dadgar
d6a1344bfd
website: consul quickstart
2015-04-26 22:03:38 -07:00
Armon Dadgar
7db392217c
website: adding mysql quickstart and API
2015-04-26 22:03:38 -07:00
Armon Dadgar
a6ec8e7685
website: quickstart + API for transit
2015-04-26 22:03:38 -07:00
Armon Dadgar
3670757628
website: quickstart for generic
2015-04-26 22:03:38 -07:00
Armon Dadgar
cc69073b37
website: adding mysql docs skeleton
2015-04-25 12:10:53 -07:00
Mitchell Hashimoto
8f49e8a919
website: postgresql backend
2015-04-18 22:47:23 -07:00
Mitchell Hashimoto
06c4e52377
logical/aws: move root creds config to config/root
2015-04-18 22:21:31 -07:00
Mitchell Hashimoto
d77faa2760
website: transit backend
2015-04-17 12:56:31 -07:00
Mitchell Hashimoto
1dac233812
website: add a couple more secret backend sections
2015-04-13 20:42:07 -07:00
Mitchell Hashimoto
061f6cfd2f
website: consul secret backend
2015-04-10 20:26:01 -07:00
Mitchell Hashimoto
148129030b
website: aws secret backend
2015-04-10 20:24:45 -07:00
Mitchell Hashimoto
87ebb09ca8
website: secrets index
2015-04-09 23:31:26 -07:00
