Armon Dadgar
b49683a40b
audit: fixing panic caused by tls connection state. Fixes #322
2015-06-29 17:16:17 -07:00
Armon Dadgar
4776825e20
Updating godep
2015-06-29 16:44:02 -07:00
Armon Dadgar
11289b7263
Merge pull request #379 from hashicorp/sethvargo/authorship
...
Restore authorship on commits
2015-06-29 16:42:36 -07:00
Christian Svensson
8f53a187df
Update Godeps for go-ldap/ldap
2015-06-29 19:03:51 -04:00
Christian Svensson
1bd1fac70f
Pass ServerName for LDAPS TLS connection validation
2015-06-29 19:01:11 -04:00
Christian Svensson
92d483004d
Use go-ldap/ldap's ParseDN to extract group name from DN
2015-06-29 19:01:02 -04:00
Christian Svensson
dfd75d7d79
Allow almost all leagal LDAP names to be used
...
Implement LDAP escaping according to RFC 4514 to allow
complex LDAP usernames to be used.
Leaving ASN BER encoded values unsupported for now.
2015-06-29 19:00:53 -04:00
Armon Dadgar
7cdff23e4f
Merge pull request #366 from nbrownus/http_responses
...
Better http responses
2015-06-29 15:31:45 -07:00
Armon Dadgar
1a085c1c89
vault: cleanups for the audit log changes
2015-06-29 15:27:28 -07:00
Armon Dadgar
10faab18c7
Merge branch 'nbrownus-audit-logging'
2015-06-29 15:19:12 -07:00
Armon Dadgar
01dc26bdeb
Fixing merge conflict
2015-06-29 15:19:04 -07:00
Armon Dadgar
111856a00f
vault: handle a panic while generating audit output
2015-06-29 15:11:35 -07:00
Armon Dadgar
b62cd81299
Updating Godeps
2015-06-29 15:05:44 -07:00
Armon Dadgar
68ea05db0b
Fixing godeps file
2015-06-29 14:54:25 -07:00
Armon Dadgar
c812623327
Merge branch 'bluecmd-master'
2015-06-29 14:51:03 -07:00
Armon Dadgar
de6ce89c39
Fixing merge conflict
2015-06-29 14:50:55 -07:00
Armon Dadgar
199155b41b
Merge pull request #373 from nbrownus/audit_key-status
...
Fixing key-status if audit logging is on
2015-06-29 14:47:55 -07:00
Karl Gutwin
75861c7c3b
Initial sketch for client TLS auth
2015-06-29 15:33:16 -04:00
Vishal Nayak
208e068138
SCP in pure GO and CIDR parsing fix
2015-06-29 11:49:34 -04:00
Vishal Nayak
5da639feff
Creating SSH keys and removal of files in pure 'go'
2015-06-26 15:43:27 -04:00
Vishal Nayak
7dbad8386c
ssh/lookup implementation and refactoring
2015-06-25 21:47:32 -04:00
Vishal Nayak
e90fb0cc09
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-06-24 18:13:26 -04:00
Vishal Nayak
4b07eba487
POC: Rework. Doing away with policy file.
2015-06-24 18:13:12 -04:00
esell
11a0b3b6c6
Set SkipSSLVerify default to false, add warning in help message
2015-06-24 13:38:14 -06:00
Nate Brown
74013ac751
Fixing key-status if audit logging is on
2015-06-24 10:57:05 -07:00
esell
e3a3fc8ab1
cleanup the code a bit
2015-06-24 10:09:29 -06:00
esell
ee690118b9
allow skipping SSL verification on ldap auth
2015-06-24 10:05:45 -06:00
Armon Dadgar
01592c0744
Merge pull request #310 from jefferai/f-pki
...
Initial PKI backend implementation
2015-06-21 11:12:22 +01:00
Armon Dadgar
2f556a1a31
Merge pull request #365 from swills/passwd
...
allow building on FreeBSD
2015-06-21 11:09:19 +01:00
Armon Dadgar
27a61eb92f
Merge pull request #368 from sergiopatino/master
...
Fix typo in link to Atlas URL on Community page.
2015-06-21 11:08:57 +01:00
sergiopatino
cc52aaf585
Fix typo in link to Atlas URL.
...
Missing a colon after https!
2015-06-21 02:41:26 -07:00
Nate Brown
a6b70d04d4
Fixing tests
2015-06-19 14:04:32 -07:00
Nate Brown
ed0853ce18
Doing a little better with http response codes
2015-06-19 14:00:48 -07:00
Steve Wills
fce09c2962
allow building on FreeBSD
...
Allow this file to build on FreeBSD
2015-06-19 16:59:24 -04:00
Jeff Mitchell
15594561ab
Add unit tests for certutil, and fix a whitespace stripping issue.
...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-19 16:06:56 -04:00
Jeff Mitchell
d8ed14a603
Merge remote-tracking branch 'upstream/master' into f-pki
2015-06-19 13:01:26 -04:00
Vishal Nayak
3a3270028b
Merge branch 'master' of https://github.com/hashicorp/vault into vishalvault
2015-06-19 12:59:41 -04:00
Vishal Nayak
9d709bd5a9
SSHs to multiple users by registering the respective host keys
2015-06-19 12:59:36 -04:00
Jeff Mitchell
435aefc072
A few things:
...
* Add comments to every non-obvious (e.g. not basic read/write handler type) function
* Remove revoked/ endpoint, at least for now
* Add configurable CRL lifetime
* Cleanup
* Address some comments from code review
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-19 12:48:18 -04:00
Mitchell Hashimoto
943d914fec
audit: some tests
2015-06-19 03:31:19 -07:00
Nate Brown
f5ebc5cc3b
Fixing tests
2015-06-18 20:14:20 -07:00
Nate Brown
fb3ee8838c
Collapsing audit response logging to a single point
2015-06-18 19:48:26 -07:00
Nate Brown
55e37392ad
Actually not logging auth in the response if nil
2015-06-18 19:48:00 -07:00
Nate Brown
71a738ad7d
Logging authentication errors and bad token usage
2015-06-18 18:30:18 -07:00
Vishal Nayak
5cd9b7a7d8
merging with master
2015-06-18 20:51:11 -04:00
Vishal Nayak
fe5bb20e92
Roles, key renewal handled. End-to-end basic flow working.
2015-06-18 20:48:41 -04:00
Nate Brown
314eea7ff0
Adding error and remote_address to audit log lines
2015-06-18 17:17:18 -07:00
Armon Dadgar
8c970cf000
cli: adding path-help to common commands list
2015-06-18 17:12:21 -07:00
Armon Dadgar
f91b91289c
command/read: Ensure only a single argument. Fixes #304
2015-06-18 16:00:41 -07:00
Armon Dadgar
48e7531f79
command/path-help: rename command, better error if sealed. Fixes #234
2015-06-18 15:56:42 -07:00
