a10dc14625
Fix AllowedBaseDomain Migration
...
AllowedBaseDomain is only zero-ed out if the domain is not found in the (new) AllowedDomains configuration setting. If the domain is found, AllowedBaseDomain is not emptied and this code will be run every single time.
//untested
2016-02-09 15:42:15 -06:00
940a58cb9d
Typo in error message in path_intermediate.go
2016-02-09 15:08:30 -06:00
8901c0b67d
Type in kdf.go
2016-02-08 14:39:46 -06:00
e5952a1c28
Typo in policy.go
2016-02-08 12:00:06 -06:00
005ce81404
Cut version 0.5.0
2016-02-08 11:41:06 -05:00
b7896fba65
changelog++
2016-02-08 11:40:52 -05:00
ba71ff7b0c
Update documentation for status command to reflect new return codes
2016-02-08 11:36:08 -05:00
c36007ab25
changelog++
2016-02-07 14:02:55 -05:00
c636a8ad29
Merge pull request #1036 from hashicorp/tls-notbefore-skew
...
Add slack on NotBefore value for generated certs.
2016-02-07 14:01:05 -05:00
4771884c78
Add slack on NotBefore value for generated certs.
...
This fixes an issue where, due to clock skew, one system can get a cert
and try to use it before it thinks it's actually valid. The tolerance of
30 seconds should be high enough for pretty much any set of systems
using NTP.
Fixes #1035
2016-02-07 14:00:03 -05:00
06810f2ac7
changelog++
2016-02-04 16:40:00 -05:00
4837ba23df
changelog++
2016-02-04 13:49:01 -05:00
550d6096ed
Add some extra info on the build to the changelog and bump the version in preparation for release
2016-02-04 11:54:14 -05:00
642240db27
changelog++
2016-02-04 11:42:58 -05:00
67591b5778
Cut version 0.5.0-rc2
2016-02-04 09:53:39 -05:00
d31c07b480
Bump version
2016-02-04 09:53:27 -05:00
64309b3b4b
Fix some changelog formatting
2016-02-04 09:53:23 -05:00
eb1deefac1
Introduce a locking inmem storage for unit tests that are doing concurrent things
2016-02-04 09:40:35 -05:00
1adc2fbf77
Merge pull request #1028 from hashicorp/transit-fuzz-test
...
Add transit fuzz test
2016-02-03 21:19:01 -05:00
f9dda87362
Merge pull request #1029 from hashicorp/list-command-ending-slash
...
On the CLI, ensure listing ends with /.
2016-02-03 21:09:20 -05:00
da2360c7f4
On the CLI, ensure listing ends with /.
2016-02-03 21:08:46 -05:00
70eeaa1519
Add transit fuzz test
2016-02-03 17:36:15 -05:00
fff201014d
Merge pull request #1021 from hashicorp/vault-seal-1006
...
Sealing vault in standby mode
2016-02-03 15:22:16 -05:00
ed3ae4541a
changelog++
2016-02-03 15:14:34 -05:00
23abc957c4
Merge pull request #1025 from mhaji/patch-1
...
Correct a small typo in HA internals
2016-02-03 15:14:24 -05:00
f27e691c6c
Correct a small typo
2016-02-03 20:08:33 +00:00
fc7eadbbb7
changelog++
2016-02-03 15:07:53 -05:00
14d7fcc618
Merge pull request #1024 from merri-j/patch-1
...
Add postgresql to bullet list of backends
2016-02-03 15:07:36 -05:00
eeea9710b6
Generalized the error message and updated doc
2016-02-03 15:06:18 -05:00
63d63e8dbc
Oops, we needed that, but for a different reason than the comment said. So put the test back but fix the comment
2016-02-03 14:05:29 -05:00
3a996e11fd
Add postgresql to bullet list of backends
2016-02-03 14:04:55 -05:00
fd4283b430
Remove some unneeded copied logic from passthrough in cubbyhole
2016-02-03 13:57:34 -05:00
fab388597f
Merge pull request #1023 from hashicorp/cubbyhole-list-default-policy
...
Add listing of cubbyhole's root to the default policy.
2016-02-03 13:52:40 -05:00
1394555a4d
Add listing of cubbyhole's root to the default policy.
...
This allows `vault list cubbyhole` to behave as expected rather than
requiring `vault list cubbyhole/`. It could be special cased in logic,
but it also serves as a model for the same behavior in e.g. `generic`
mounts where special casing is not possible due to unforeseen mount
paths.
2016-02-03 13:50:47 -05:00
f5fbd12ac3
Test for seal on standby node
2016-02-03 12:28:01 -05:00
0c427e27e9
Add some documentation to the API revoke functions
2016-02-03 11:42:13 -05:00
a10888f1f1
Added comments to changes the error message
2016-02-03 11:35:47 -05:00
93cf4ba2c4
changelog++
2016-02-03 11:25:43 -05:00
f1facb0f9f
Throw error on sealing vault in standby mode
2016-02-03 10:58:33 -05:00
bb9d364cce
changelog++
2016-02-03 09:13:40 -05:00
d773af7dff
Merge pull request #1017 from hashicorp/phinze/api-sys-mount-config
...
Parse and return MountConfigOutput from API
2016-02-03 09:12:31 -05:00
0ef8dced48
Merge pull request #1015 from hashicorp/command-server-hatest
...
Add test for HA availability to command/server
2016-02-03 08:42:52 -05:00
38c51f9412
Fix build tag
2016-02-03 08:41:31 -05:00
1102341523
Merge pull request #1016 from hashicorp/sethvargo/post
...
Link to blog post on using with CM
2016-02-02 22:36:43 -05:00
073965de8c
Parse and return MountConfigOutput from API
...
When working on the Terraform / Vault integration I came across the fact
that `Sys().MountConfig(...)` didn't seem to return a response struct,
even though it's a `GET` method.
Looks like just a simple oversight to me. This fix does break API BC,
but the method had no use without its return value so I feel like that's
probably a mitigating factor.
2016-02-02 17:11:05 -06:00
4ca9d72f3a
Link to blog post on using with CM
2016-02-02 18:00:39 -05:00
7e0d4bef3e
Add test for HA availability to command/server
2016-02-02 17:47:02 -05:00
1e66451c0d
Cut version 0.5.0-rc1.2
2016-02-02 15:13:30 -05:00
a2bb51e7de
remove unneeded assignment
2016-02-02 15:11:35 -05:00
a5bf677bb3
Ensure that we fall back to Backend if HABackend is not specified.
2016-02-02 15:09:58 -05:00
Tom Ritter