293 Commits

Author SHA1 Message Date
Jeff Mitchell
08cea6aad1 Bump deps 2017-06-16 11:14:18 -04:00
Jeff Mitchell
b938163ad1 Update vendoring 2017-06-05 10:51:53 -04:00
Jeff Mitchell
1265e6d7e3 Finish dep update 2017-05-24 21:16:17 -04:00
Jeff Mitchell
cfd739d783 Add peer cluster address cache 2017-05-24 20:51:53 -04:00
Jeff Mitchell
c4377e1ce5 Revert azure vendor updates 2017-05-24 10:12:06 -04:00
Jeff Mitchell
d468da79e0 Bump deps 2017-05-24 09:40:58 -04:00
Mitchell Hashimoto
4dc061e923 audit: hash time.Time values in map fields (#2689)
This enables audit.Hash to hash time.Time values that may exist as
direct fields in the map. This will error (instead of panic) for any
time.Time values that don't occur within map values. For example, this
does not support a time.Time within a slice. If that needs to be
supported then modifications will need to be made.

This also requires an update to reflectwalk (included in this PR). This
is a minimal change that allows SkipEntry to signal to skip an entire
struct. We do this because we don't want to walk any of time.Time since
we handle it directly.
2017-05-08 14:06:08 -04:00
Brian Kassouf
fcd4f903c3 Merge remote-tracking branch 'oss/master' into database-refactor 2017-05-04 12:40:00 -07:00
mymercurialsky
461d658e88 Implemented TOTP Secret Backend (#2492)
* Initialized basic outline of TOTP backend using Postgresql backend as template

* Updated TOTP backend.go's structure and help string

* Updated TOTP path_roles.go's structure and help strings

* Updated TOTP path_role_create.go's structure and help strings

* Fixed typo in path_roles.go

* Fixed errors in path_role_create.go and path_roles.go

* Added TOTP secret backend information to cli commands

* Fixed build errors in path_roles.go and path_role_create.go

* Changed field values of period and digits from uint to int, added uint conversion of period when generating passwords

* Initialized TOTP test file based on structure of postgresql test file

* Added enforcement of input values

* Added otp library to vendor folder

* Added test steps and cleaned up errors

* Modified read credential test step, not working yet

* Use of vendored package not allowed - Test error

* Removed vendor files for TOTP library

* Revert "Removed vendor files for TOTP library"

This reverts commit fcd030994bc1741dbf490f3995944e091b11da61.

* Hopefully fixed vendor folder issue with TOTP Library

* Added additional tests for TOTP backend

* Cleaned up comments in TOTP backend_test.go

* Added default values of period, algorithm and digits to field schema

* Changed account_name and issuer fields to optional

* Removed MD5 as a hash algorithm option

* Implemented requested pull request changes

* Added ability to validate TOTP codes

* Added ability to have a key generated

* Added skew, qr size and key size parameters

* Reset vendor.json prior to merge

* Readded otp and barcode libraries to vendor.json

* Modified help strings for path_role_create.go

* Fixed test issue in testAccStepReadRole

* Cleaned up error formatting, variable names and path names. Also added some additional documentation

* Moveed barcode and url output to key creation function and did some additional cleanup based on requested changes

* Added ability to pass in TOTP urls

* Added additional tests for TOTP server functions

* Removed unused QRSize, URL and Generate members of keyEntry struct

* Removed unnecessary urlstring variable from pathKeyCreate

* Added website documentation for TOTP secret backend

* Added errors if generate is true and url or key is passed, removed logger from backend, and revised parameter documentation.

* Updated website documentation and added QR example

* Added exported variable and ability to disable QR generation, cleaned up error reporting, changed default skew value, updated documentation and added additional tests

* Updated API documentation to inlude to exported variable and qr size option

* Cleaned up return statements in path_code, added error handling while validating codes and clarified documentation for generate parameters in path_keys
2017-05-04 10:49:42 -07:00
Brian Kassouf
55f1f5116a Merge remote-tracking branch 'oss/master' into database-refactor 2017-05-04 10:45:18 -07:00
Michael Ansel
8da4405c99 Add constraints on the Common Name for certificate-based authentication (#2595)
* Refactor to consolidate constraints on the matching chain

* Add CN prefix/suffix constraint

* Maintain backwards compatibility (pick a random cert if multiple match)

* Vendor go-glob

* Replace cn_prefix/suffix with required_name/globbing

Move all the new tests to acceptance-capable tests instead of embedding in the CRL test

* Allow authenticating against a single cert

* Add new params to documentation

* Add CLI support for new param

* Refactor for style

* Support multiple (ORed) name patterns

* Rename required_names to allowed_names

* Update docs for parameter rename

* Use the new TypeCommaStringSlice
2017-04-30 11:37:10 -04:00
Jeff Mitchell
d2f081ef79 Flip back to sstarcher go-okta post-merge 2017-04-28 17:21:49 -04:00
Jeff Mitchell
b2db9c35f6 Switch to jefferai/go-okta for now to work around Fatal lines in upstream (#2658)
Switch to jefferai/go-okta for now to work around Fatal lines in upstream
2017-04-28 08:39:51 -04:00
Brian Kassouf
afc5be1c67 Merge remote-tracking branch 'oss/master' into database-refactor 2017-04-19 15:16:00 -07:00
Jeff Mitchell
f11f4bca86 Update to new Azure code after dep update (#2603) 2017-04-17 12:15:12 -04:00
Jeff Mitchell
cccfb2dc13 Bump deps 2017-04-17 11:17:06 -04:00
Brian Kassouf
c9dc7b800b vendor go-plugin 2017-04-12 14:23:15 -07:00
Jeff Mitchell
7902612773 Bump deps 2017-03-30 20:03:13 -04:00
Jeff Mitchell
7a31da8d94 Add dockertest.v3 to vendor 2017-02-26 16:53:19 -05:00
Jeff Mitchell
ec7ec42e4c Update deps 2017-02-24 14:36:54 -05:00
Jeff Mitchell
cda27d5834 Update deps, particularly to ensure https://aws.amazon.com/blogs/developer/aws-sdk-for-go-update-needed-for-go-1-8/ is covered 2017-02-16 23:42:07 -05:00
Jeff Mitchell
a18f77e69c Update go-cleanhttp 2017-02-10 19:34:41 -05:00
Jeff Mitchell
25bcca2fad Bump deps 2017-02-08 02:13:15 -05:00
Jeff Mitchell
5e20429298 Update deps 2017-02-02 16:19:55 -05:00
Jeff Mitchell
15993a9934 Update deps 2017-01-26 20:16:19 -05:00
Shane Starcher
a0b5eecc6d Okta implementation (#1966) 2017-01-26 19:08:52 -05:00
Xiang Li
73ad5b7da8 etcdbackend: support version auto discovery (#2299) 2017-01-26 17:19:13 -05:00
Jeff Mitchell
fc1d75032b Bump deps 2017-01-13 09:06:34 -05:00
Jeff Mitchell
454ddd4c48 Use dockertest.v2 (#2247)
New dockertest has a totally different API and will require some serious
refactoring. This will tide over until then by pinning the API version.
2017-01-09 13:46:54 -05:00
Jeff Mitchell
de5d4f8f08 Bump deps 2017-01-04 16:47:38 -05:00
Jeff Mitchell
0dd5a2a6ba JWT wrapping tokens (#2172) 2017-01-04 16:44:03 -05:00
Xiang Li
e086a81353 physical: add etcd3 backend (#2168) 2017-01-03 14:43:46 -05:00
Conor Mongey
1c7f9a6954 Update go-syslog package (#2219) 2016-12-31 10:22:25 -06:00
Jeff Mitchell
5a5b9a689e Bump go-multierror to fix panic 2016-12-16 13:45:55 -05:00
Jeff Mitchell
4cc781f511 Fix up vendor reverting 2016-12-16 13:35:12 -05:00
Jeff Mitchell
a57666b693 Reset vendoring to 0.6.3 2016-12-16 13:31:07 -05:00
Jeff Mitchell
35a1917bc7 bump deps 2016-12-13 19:12:26 -05:00
Jeff Mitchell
d79afd9e24 Update deps 2016-12-01 14:46:57 -05:00
Christopher Pauley
973e3c2b1e gcs physical backend (#2099) 2016-12-01 11:42:31 -08:00
Jeff Mitchell
7c21a9a3e7 Bump deps 2016-11-16 18:22:54 -05:00
matt maier
2cd3cfd83e Vendor circonus (#2082) 2016-11-10 16:17:55 -05:00
Jeff Mitchell
ebf4318dae Bump deps 2016-11-02 15:34:30 -04:00
Jeff Mitchell
023aa9640f Bump deps 2016-09-30 09:50:46 -04:00
Jeff Mitchell
f62f53a09f Add missing dep 2016-09-21 14:02:35 -04:00
Jeff Mitchell
8482118ac6 Transit and audit enhancements 2016-09-21 10:49:26 -04:00
Jeff Mitchell
abd621a9e4 Update deps 2016-09-12 15:16:55 -04:00
Jeff Mitchell
a26fe991ba Update deps 2016-09-02 18:05:09 -04:00
Jeff Mitchell
68345eb770 Convert to logxi 2016-08-21 18:13:37 -04:00
Jeff Mitchell
3eba24de39 Change to keybase openpgp fork as it has important fixes 2016-08-11 08:31:43 -04:00
Jeff Mitchell
593954d40c Fix tests and update mapstructure 2016-08-08 16:00:31 -04:00