vault

mirror of https://github.com/hashicorp/vault.git synced 2025-12-10 12:01:28 +01:00

History

Alexander Scheel 696e1e456f

Allow generation of other types of SSH CA keys (#14008 )

* Add generation support for other SSH CA key types

This adds two new arguments to config/ca, mirroring the values of PKI
secrets engine but tailored towards SSH mounts. Key types are specified
as x/crypto/ssh KeyAlgo identifiers (e.g., ssh-rsa or ssh-ed25519)
and respect current defaults (ssh-rsa/4096). Key bits defaults to 0,
which for ssh-rsa then takes a value of 4096.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add documentation on key_type, key_bits for ssh/config/ca

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add changelog

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

2022-02-15 14:14:05 -05:00

auth

Use secret_id_bound_cidrs instead of bound_cidr_list in approle docs (#12658 )

2022-02-09 09:34:13 -08:00

secret

Allow generation of other types of SSH CA keys (#14008 )

2022-02-15 14:14:05 -05:00

system

Add sys/version-history endpoint and associated command (#13766 )

2022-02-14 15:26:57 -05:00

index.mdx

Add docs about path param restrictions (#13413 )