113 Commits

Author	SHA1	Message	Date
Jeff Mitchell	3d20107e54	Move some mutexes around	2016-05-05 12:53:27 -04:00
Jeff Mitchell	c4f26c9011	Update some mutexes in client config	2016-05-05 12:44:40 -04:00
Jeff Mitchell	1c60388900	Fall back to non-base64 cert if it can't be decoded (it's checked later anyways)	2016-05-05 11:36:28 -04:00
Jeff Mitchell	96cebf9cd1	Update commenting	2016-05-05 11:22:36 -04:00
Jeff Mitchell	3390dca953	Make the roletag blacklist the longest duration, not least	2016-05-05 11:00:41 -04:00
Jeff Mitchell	9a662ff493	Switch client code to shared awsutil code	2016-05-05 10:40:49 -04:00
vishalnayak	ef83605f58	Change image/ to a more flexible /role endpoint	2016-05-03 23:36:59 -04:00
vishalnayak	7945e4668a	Allow custom endpoint URLs to be supplied to make EC2 API calls	2016-05-02 17:21:52 -04:00
vishalnayak	57e6361b24	Remove unnecessary append call	2016-04-30 03:20:21 -04:00
vishalnayak	fed55cff94	Ensure that the instance is running during renewal	2016-04-28 16:34:35 -04:00
vishalnayak	0b44a62e8f	Added allow_instance_migration to the role tag	2016-04-28 11:43:48 -04:00
vishalnayak	1a3c0a1f3e	Change all time references to UTC	2016-04-28 10:19:29 -04:00
vishalnayak	ba88b210e6	Fix the deadlock issue	2016-04-28 01:01:33 -04:00
vishalnayak	05c10dad94	minor updates	2016-04-28 00:35:49 -04:00
vishalnayak	ba62ef6a86	Refactor locks around config tidy endpoints	2016-04-27 22:32:43 -04:00
vishalnayak	c7bfdd7ed0	Fix locking around config/client	2016-04-27 22:25:15 -04:00
vishalnayak	0b561d668b	Fix the list response of role tags	2016-04-27 22:03:11 -04:00
vishalnayak	329361f951	Removed existence check on blacklist/roletags, docs fixes	2016-04-27 21:29:32 -04:00
vishalnayak	aae439b947	Remove unnecessary lock switching around flushCachedEC2Clients	2016-04-27 20:13:56 -04:00
vishalnayak	36193850fd	Remove recreate parameter from clientEC2	2016-04-27 20:01:39 -04:00
vishalnayak	70ea33ccfc	Added ami_id to token metadata	2016-04-27 11:32:05 -04:00
vishalnayak	7e821db4f0	Added tests	2016-04-26 23:40:11 -04:00
vishalnayak	9f06bb2cea	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	3ee386ecb4	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	b05042ff2d	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	2582e5d0ee	Added tests	2016-04-26 10:22:29 -04:00
vishalnayak	06a174c2f0	tidy endpoint fixes	2016-04-26 10:22:29 -04:00
vishalnayak	dd03c55d68	HMAC Key per AMI ID and avoided secondary call to AWS to fetch the tags	2016-04-26 10:22:29 -04:00
vishalnayak	3110f65834	Rework and refactoring	2016-04-26 10:22:29 -04:00
vishalnayak	23a2bc76a5	Added mutex locking for config/certificate endpoint	2016-04-26 10:22:29 -04:00
vishalnayak	4f46bbaa32	Added cooldown period for periodic tidying operation	2016-04-26 10:22:29 -04:00
vishalnayak	81e4235fc0	Support periodic tidy callback and config endpoints.	2016-04-26 10:22:29 -04:00
vishalnayak	b76a4df110	Use fullsailor/pkcs7 package instead of its fork. Fix tests	2016-04-26 10:22:29 -04:00
vishalnayak	7c39fffe0d	Removed redundant AWS public certificate. Docs update.	2016-04-26 10:22:29 -04:00
vishalnayak	22c0ad94ba	Removed region parameter from config/client endpoint. ... Region to create ec2 client objects is fetched from the identity document. Maintaining a map of cached clients indexed by region.	2016-04-26 10:22:29 -04:00
vishalnayak	01d417afbf	Instance ID can optionally be accepted as a the role tag parameter.	2016-04-26 10:22:29 -04:00
vishalnayak	cd3e9e3b5b	Support providing multiple certificates. ... Append all the certificates to the PKCS#7 parser during signature verification.	2016-04-26 10:22:29 -04:00
vishalnayak	9a988ffdee	Docs update	2016-04-26 10:22:29 -04:00
vishalnayak	9e57f66284	Added acceptance test for login endpoint	2016-04-26 10:22:29 -04:00
vishalnayak	2122716f17	Added test case TestBackend_PathBlacklistRoleTag	2016-04-26 10:22:29 -04:00
vishalnayak	9dc519ae68	Return 4xx error at appropriate places	2016-04-26 10:22:29 -04:00
vishalnayak	943cc345fe	Tested pathImageTag	2016-04-26 10:22:29 -04:00
vishalnayak	07ab072ac7	Tested parseRoleTagValue	2016-04-26 10:22:29 -04:00
vishalnayak	a1ca3228b3	Make client nonce optional even during first login, when disallow_reauthentication is set	2016-04-26 10:22:29 -04:00
vishalnayak	7a437d139e	Rename 'name' to 'ami_id' for clarity	2016-04-26 10:22:29 -04:00
vishalnayak	8c439a2f61	Moved HMAC parsing inside parseRoleTagValue	2016-04-26 10:22:29 -04:00
vishalnayak	a2d774b0fc	Properly handle empty client nonce case when disallow_reauthentication is set	2016-04-26 10:22:29 -04:00
vishalnayak	eecdfdc1e9	Added disallow_reauthentication feature	2016-04-26 10:22:29 -04:00
vishalnayak	39c93b5e54	Remove todo and change clientNonce length limit to 128 chars	2016-04-26 10:22:28 -04:00
Jeff Mitchell	8e3192eac1	Fix typo	2016-04-26 10:22:28 -04:00