Vault Automation 7f9a3efe21

VAULT-39462 PKI observations (#9576) (#9747) ...

* VAULT-39462 PKI observations first draft?

* acme account

* acme account 2

* license

* belt and braces

* EST, and some tests

* more stuff

* SCEP

* key tests etc

* WIP reorganize code into an observe sub-package with interfaces

* make fmt

* fmt

* fmt

* empty file hehe

* copyright headers

* Update builtin/logical/pki/backend_cmpv2_ent_test.go



* Update builtin/logical/pki/backend_cmpv2_ent_test.go



* Update builtin/logical/pki/path_ocsp.go



* Update builtin/logical/pki/path_acme_order.go



* Update builtin/logical/pki/path_acme_order.go



* extra info

* add stored to cieps

* make fmt

---------

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

2025-09-30 12:34:07 -04:00

..

cmd/pki

[COMPLIANCE] License changes (#22290)

2023-08-10 18:14:03 -07:00

dnstest

Stop processing ACME verifications when active node is stepped down (#23278)

2023-09-26 13:59:13 -04:00

issuing

Delta CRL enablement, including tests. (#30319)

2025-04-23 09:40:58 -04:00

managed_key

PKI refactoring to start breaking apart monolith into sub-packages (#24406)

2023-12-07 09:22:53 -05:00

observe

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

parsing

Add underlining support for the PKI Enterprise SCEP work (#29604)

2025-02-13 15:54:18 +00:00

pki_backend

Add a max_crl_size parameter to CRL config (#28654)

2024-10-09 21:38:55 +00:00

revocation

Add missing revocation storage lock on RevokeCert refactoring (#28259)

2024-09-03 17:18:30 -04:00

acme_authorizations.go

Fix issue building urls with IPv6 IPs for ACME http-01 challenges (#28718)

2024-10-16 14:26:44 -04:00

acme_billing_test.go

Increment certificate counts in all PKI backends (#9693) (#9721)

2025-09-29 15:33:00 -04:00

acme_billing.go

[COMPLIANCE] License changes (#22290)

2023-08-10 18:14:03 -07:00

acme_challenge_engine_test.go

Fix issue building urls with IPv6 IPs for ACME http-01 challenges (#28718)

2024-10-16 14:26:44 -04:00

acme_challenge_engine.go

Fix issue building urls with IPv6 IPs for ACME http-01 challenges (#28718)

2024-10-16 14:26:44 -04:00

acme_challenges_test.go

add gosimport to make fmt and run it (#25383)

2024-02-13 14:07:02 -08:00

acme_challenges.go

Adds ACME specific error types to errors returned by challenge validation functions. (#28678)

2024-10-15 17:13:13 +00:00

acme_eab_policy.go

[COMPLIANCE] License changes (#22290)

2023-08-10 18:14:03 -07:00

acme_errors.go

remove mapstructure - not needed. (#30175)

2025-04-03 17:46:09 +00:00

acme_jws.go

[COMPLIANCE] License changes (#22290)

2023-08-10 18:14:03 -07:00

acme_state_test.go

Bugfix/vault 35002 (#30168)

2025-04-03 13:19:20 -04:00

acme_state.go

PKI: Add management APIs for ACME accounts (#29173)

2025-01-07 09:34:17 -05:00

acme_wrappers_test.go

PKI: Refactor common role path policy code into common area (#27759)

2024-07-11 13:22:33 -04:00

acme_wrappers.go

PKI: Refactor common role path policy code into common area (#27759)

2024-07-11 13:22:33 -04:00

backend_oss_test.go

[COMPLIANCE] License changes (#22290)

2023-08-10 18:14:03 -07:00

backend_oss.go

Add PkiCertificateCountSystemView to the PKI backend's SystemView (#9573) (#9617)

2025-09-24 18:23:22 +00:00

backend_test.go

Batch Certificate Endpoint Addition (#8800) (#9223)

2025-09-09 15:55:34 -04:00

backend.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

ca_test.go

Use go-secure-stdlib's RSA key generator backed by a DRBG (#29020)

2024-12-05 15:39:16 -06:00

ca_util_test.go

make fmt (#29196)

2024-12-16 13:07:28 -05:00

ca_util.go

Key Usage Enablement for Ent-Feature CMPv2 (#28237)

2024-08-30 17:05:20 +00:00

cert_util_test.go

Move all pki-verification calls from sdk-Verify() to pki-specific (#29342)

2025-01-29 11:05:55 -05:00

cert_util.go

Add underlining support for the PKI Enterprise SCEP work (#29604)

2025-02-13 15:54:18 +00:00

chain_test.go

PKI refactoring to start breaking apart monolith into sub-packages (#24406)

2023-12-07 09:22:53 -05:00

chain_util.go

Prepare code base for Go 1.24 update. (#29412)

2025-01-27 14:34:07 -05:00

cieps_util_oss.go

Remove direct usage of logical/pki's storageContext.Backend field (#27401)

2024-06-07 14:18:17 -04:00

cmpv2_util_oss.go

add ce changes and documentation for tidying cmpv2 nonce store (#28362)

2024-09-12 11:32:51 -05:00

config_util.go

PKI refactoring to start breaking apart monolith into sub-packages (#24406)

2023-12-07 09:22:53 -05:00

crl_test.go

Add a max_crl_size parameter to CRL config (#28654)

2024-10-09 21:38:55 +00:00

crl_util.go

fix: fix call Sprintf with wrong err (#30184)

2025-04-04 12:37:20 -04:00

defaultdirectorypolicytype_enumer.go

Use enumer to generate String() methods for most enums (#25705)

2024-04-17 11:14:14 -07:00

fields.go

Add UI support name constraints (#29263)

2025-01-02 11:50:49 -06:00

ifmodifiedreqtype_enumer.go

Use enumer to generate String() methods for most enums (#25705)

2024-04-17 11:14:14 -07:00

integration_test.go

Return the proper serial number in OCSP verification errors (#27696)

2024-07-09 09:03:34 -04:00

key_util.go

Remove direct usage of logical/pki's storageContext.Backend field (#27401)

2024-06-07 14:18:17 -04:00

metadata_oss.go

OSS changes to rename metadata cert_metadata (#27365)

2024-06-05 18:17:04 +00:00

metadata.pb.go

update vault auth submodules to api/v1.16.0 (#29548)

2025-02-11 07:28:45 -08:00

metadata.proto

Address go format and proto linting issues (#26782)

2024-05-02 12:03:06 -04:00

metrics.go

Certificate Metadata, CE components (#26710)

2024-05-01 15:19:53 -05:00

path_acme_account_mgmt.go

PKI: Add management APIs for ACME accounts (#29173)

2025-01-07 09:34:17 -05:00

path_acme_account.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_acme_authorizations.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_acme_challenges.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_acme_directory.go

[COMPLIANCE] License changes (#22290)

2023-08-10 18:14:03 -07:00

path_acme_eab.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_acme_nonce.go

PKI refactoring to start breaking apart monolith into sub-packages (#24406)

2023-12-07 09:22:53 -05:00

path_acme_order_test.go

Fix issue building urls with IPv6 IPs for ACME http-01 challenges (#28718)

2024-10-16 14:26:44 -04:00

path_acme_order.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_acme_revoke.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_acme_test.go

PKI: Add management APIs for ACME accounts (#29173)

2025-01-07 09:34:17 -05:00

path_config_acme_test.go

Use go-secure-stdlib's RSA key generator backed by a DRBG (#29020)

2024-12-05 15:39:16 -06:00

path_config_acme.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_config_ca.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_config_cluster.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_config_crl.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_config_urls.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_fetch_issuers_stubs_oss.go

Add PKI issuer config fields to enable check disablement parameters (#28826)

2024-11-04 11:46:55 -05:00

path_fetch_issuers_test.go

Sign empty to cert on manual-chain update. (#29473)

2025-02-10 15:24:52 -05:00

path_fetch_issuers.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_fetch_keys.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_fetch.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_intermediate.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_issue_sign.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_manage_issuers.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_manage_keys_test.go

add gosimport to make fmt and run it (#25383)

2024-02-13 14:07:02 -08:00

path_manage_keys.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_ocsp_test.go

Commence refactoring to decouple revocation code from main PKI backend (#27417)

2024-06-10 16:41:47 +00:00

path_ocsp.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_resign_crls_test.go

add gosimport to make fmt and run it (#25383)

2024-02-13 14:07:02 -08:00

path_resign_crls.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_revoke.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_roles_test.go

Use reserved enterprise number for documentation purposes from RFC5612 (#9484) (#9492)

2025-09-19 19:00:07 +00:00

path_roles.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_root.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

path_sign_issuers.go

Split the Key_Usage Field into separate fields (#28500)

2024-09-24 15:35:24 -04:00

path_tidy_test.go

Fix bug when writing auto tidy config field tidy_cmpv2_nonce_store (#29852)

2025-03-06 21:14:23 +00:00

path_tidy.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

periodic.go

Move fetchCertBySerial back into the main PKI package. (#27461)

2024-06-12 15:53:40 +00:00

secret_certs.go

VAULT-39462 PKI observations (#9576) (#9747)

2025-09-30 12:34:07 -04:00

storage_migrations_test.go

PKI refactoring to start breaking apart monolith into sub-packages (#24406)

2023-12-07 09:22:53 -05:00

storage_migrations.go

PKI refactoring to start breaking apart monolith into sub-packages (#24406)

2023-12-07 09:22:53 -05:00

storage_test.go

Split the Key_Usage Field into separate fields (#28500)

2024-09-24 15:35:24 -04:00

storage_unified.go

Ongoing refactoring of PKI revocation code (#27427)

2024-06-11 09:25:14 -04:00

storage.go

PKI: Add management APIs for ACME accounts (#29173)

2025-01-07 09:34:17 -05:00

test_helpers.go

Increment certificate counts in all PKI backends (#9693) (#9721)

2025-09-29 15:33:00 -04:00

tidystatusstate_enumer.go

Use enumer to generate String() methods for most enums (#25705)

2024-04-17 11:14:14 -07:00

util.go

Ongoing refactoring of PKI revocation code (#27427)

2024-06-11 09:25:14 -04:00