9692 Commits

Author SHA1 Message Date
Pradeep Chhetri
7c7f64fe67 Fixed a failing test and drop table after running tests 2015-06-13 08:24:27 +05:45
Jeff Mitchell
067fbc9078 Fix a docs-out-of-date bug.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-12 16:33:00 -04:00
Pradeep Chhetri
3ff10a7573 Fixing List command behaviour 2015-06-12 23:16:46 +05:45
Pradeep Chhetri
b33d707b69 Added the test as per suggestion 2015-06-12 15:32:45 +05:45
Pradeep Chhetri
c42bc38c62 Changes done as per feedback 2015-06-12 13:24:41 +05:45
Jeff Mitchell
8b55d33722 Erp, forgot this feedback...
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-11 23:16:13 -04:00
Jeff Mitchell
64c8a437e9 Add locking for revocation/CRL generation. I originally was going to use an RWMutex but punted, because it's not worth trying to save some milliseconds with the possibility of getting something wrong. So the entire operations are now wrapped, which is minimally slower but very safe.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-11 22:28:13 -04:00
Jeff Mitchell
722eca1367 Address most of Armon's initial feedback.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-11 21:57:05 -04:00
Jeff Mitchell
0ee9735a5a Fix some out-of-date examples.
Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-11 21:17:05 -04:00
Pradeep Chhetri
9c3881442e Physical MySQL backend implementation - First Cut 2015-06-09 01:37:25 +05:45
Jeff Mitchell
20ac7a46f7 Add acceptance tests
* CA bundle uploading
* Basic role creation
* Common Name restrictions
* IP SAN restrictions
* EC + RSA keys
* Various key usages
* Lease times
* CA fetching in various formats
* DNS SAN handling

Also, fix a bug when trying to get code signing certificates.

Not tested:
* Revocation (I believe this is impossible with the current testing framework)

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Jeff Mitchell
530b67bbb9 Initial PKI backend implementation.
Complete:
* Up-to-date API documents
* Backend configuration (root certificate and private key)
* Highly granular role configuration
* Certificate generation
* CN checking against role
* IP and DNS subject alternative names
* Server, client, and code signing usage types
* Later certificate (but not private key) retrieval
* CRL creation and update
* CRL/CA bare endpoints (for cert extensions)
* Revocation (both Vault-native and by serial number)
* CRL force-rotation endpoint

Missing:
* OCSP support (can't implement without changes in Vault)
* Unit tests

Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>
2015-06-08 00:06:09 -04:00
Armon Dadgar
2b0b519a16 Merge pull request #318 from jefferai/f-fix-client-default
Fix nil dereference in API client
2015-06-06 13:35:48 -07:00
Jeff Mitchell
6f5f247b28 The docs say that if HttpClient is nil, http.DefaultClient will be used. However, the code doesn't do this, resulting in a nil dereference. 2015-06-04 14:01:10 -04:00
Seth Vargo
a0ad309d1f Merge pull request #315 from justincampbell/docs-json-auth
docs: Fix examples of auth via JSON
2015-06-04 11:08:01 -04:00
Justin Campbell
a8850ed5ed docs: Fix examples of auth via JSON
For both userpass and LDAP
2015-06-04 10:38:11 -04:00
Justin Campbell
55de351b98 Remove .DS_Store
Already gitignored
2015-06-04 10:17:00 -04:00
Armon Dadgar
798892a470 Merge pull request #313 from hashicorp/sethvargo/update_aws
Update to the new location for the aws sdk
2015-06-03 21:41:44 +02:00
Seth Vargo
91775a3ecc Save new aws library 2015-06-03 15:07:39 -04:00
Seth Vargo
3fbbf6bcf8 AWS moved from labs to official 2015-06-03 15:02:49 -04:00
Armon Dadgar
3ebde4b268 Merge pull request #297 from buth/etcd-ha
etcd HA + tests
2015-06-03 00:44:46 +02:00
Eric Buth
00f5119a38 etcd HA physical backend: added documention + style updates 2015-06-02 18:00:06 -04:00
Armon Dadgar
95ce9c2364 vault: attempt to resolve #303 2015-06-02 22:55:18 +02:00
Eric Buth
e751395e8c etcd HA physical backend: stopchannel style, held state remote-only, lock value stored in semaphore key 2015-06-02 13:18:55 -04:00
Armon Dadgar
9700bcd3e5 vault: fixing a typo 2015-06-02 16:04:05 +02:00
Armon Dadgar
6399e69810 Merge pull request #299 from boncheff/patch-1
Update SPEC.md
2015-06-02 15:56:31 +02:00
boncheff
89a75bac51 Update SPEC.md 2015-06-02 14:51:43 +01:00
Eric Buth
2e17df9b4b etcd HA + tests 2015-06-01 18:29:54 -04:00
Seth Vargo
669686f654 Merge pull request #270 from sheldonh/no_export_vault_token
Don't recommend exporting VAULT_TOKEN
2015-06-01 11:52:40 -04:00
Armon Dadgar
63b3a4f61e Merge pull request #293 from karel1980/typo1
Typo fix
2015-06-01 17:26:16 +02:00
Karel Vervaeke
e44ebb91ab Typo fix 2015-06-01 15:29:20 +02:00
Armon Dadgar
9b879d3434 Merge pull request #263 from sheldonh/iam-policy
List IAM permissions required by root credentials
2015-06-01 13:16:51 +02:00
Armon Dadgar
3e3989915f Merge pull request #290 from jalateras/makefile-bootstrap
Makefile bootstrap
2015-06-01 13:15:37 +02:00
Armon Dadgar
3f9a3a5811 Merge pull request #278 from Zhann/feature/add_dev_to_server_options_help
Add help info for -dev flag
2015-06-01 13:08:50 +02:00
Armon Dadgar
7abe375a9c command/rekey: use same language in rekey as init 2015-06-01 13:08:20 +02:00
Armon Dadgar
b1f64cb521 Merge pull request #273 from hashicorp/unseal-keys-notice
Change phrasing for unseal key notification
2015-06-01 13:06:52 +02:00
Armon Dadgar
35b10a7a9a Merge pull request #261 from jsok/consul-lease
Add ability to configure consul lease durations
2015-06-01 13:04:28 +02:00
Armon Dadgar
601d888ee2 Merge pull request #252 from kenbreeman/physical_zookeeper_ha
Physical zookeeper ha
2015-06-01 13:03:27 +02:00
Armon Dadgar
96241c4972 Merge pull request #277 from hashicorp/f-rotate
Add support for key rotation
2015-06-01 12:52:32 +02:00
Seth Vargo
6e9f37e993 Cleanup style on http index docs 2015-05-31 21:23:44 -07:00
Seth Vargo
767a3e9e32 Merge pull request #271 from boncheff/f-doc-update-read-write-example
Update index.html.md
2015-05-31 21:20:34 -07:00
Jim Alateras
8f85dd739a Merge branch 'master' of https://github.com/hashicorp/vault into makefile-bootstrap 2015-06-01 09:33:23 +10:00
Jim Alateras
21baf6dc95 Added a bootstrap target in the makefile to download required tools and updated the README.md instructions 2015-06-01 09:32:36 +10:00
Seth Vargo
6c677fd4f1 Merge pull request #279 from whit537/patch-1
Capitalize the first word of a sentence
2015-05-31 15:53:34 -07:00
Seth Vargo
974e8526cd Merge pull request #280 from whit537/patch-2
Put me in charge of dev mode :)
2015-05-31 15:53:24 -07:00
Seth Vargo
bdd6fed13f Merge pull request #282 from whit537/patch-3
Add a missing word
2015-05-31 15:52:21 -07:00
Seth Vargo
6d0a5f3e8a Merge pull request #283 from whit537/patch-4
revisions to Getting Started > Dynamic Secrets
2015-05-31 15:52:08 -07:00
Seth Vargo
81466baecc Merge pull request #284 from whit537/patch-5
revisions to Getting Started > Built-in Help
2015-05-31 15:51:51 -07:00
Seth Vargo
cefceb35d8 Merge pull request #285 from whit537/patch-6
revisions to Getting Started > Authentication
2015-05-31 15:51:39 -07:00
Seth Vargo
4724b9ce56 Merge pull request #286 from whit537/patch-7
revisions to Getting Started > Access Control Policies
2015-05-31 15:51:08 -07:00