52 Commits

Author	SHA1	Message	Date
Jeff Mitchell	a2b3e1302a	A bunch of cleanup and moving around. logical/certutil is a package that now has helper functions ... useful for other parts of Vault (including the API) to take advantage of. Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>	2015-06-16 13:43:12 -04:00
Jeff Mitchell	530b67bbb9	Initial PKI backend implementation. ... Complete: * Up-to-date API documents * Backend configuration (root certificate and private key) * Highly granular role configuration * Certificate generation * CN checking against role * IP and DNS subject alternative names * Server, client, and code signing usage types * Later certificate (but not private key) retrieval * CRL creation and update * CRL/CA bare endpoints (for cert extensions) * Revocation (both Vault-native and by serial number) * CRL force-rotation endpoint Missing: * OCSP support (can't implement without changes in Vault) * Unit tests Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>	2015-06-08 00:06:09 -04:00