8 commits

Author	SHA1	Message	Date
Vishal Nayak	766c2e6ee0	SSH CA enhancements (#2442) ... * Use constants for storage paths * Upgrade path for public key storage * Fix calculateValidPrincipals, upgrade ca_private_key, and other changes * Remove a print statement * Added tests for upgrade case * Make exporting consistent in creation bundle * unexporting and constants * Move keys into a struct instead of plain string * minor changes	2017-03-08 17:36:21 -05:00
Jeff Mitchell	5119b173c4	Rename helper 'duration' to 'parseutil'. (#2449) ... Add a ParseBool function that accepts various kinds of ways of specifying booleans. Have config use ParseBool for UI and disabling mlock/cache.	2017-03-07 11:21:22 -05:00
Jeff Mitchell	fa474924aa	Update error text to make it more obvious what the issue is when valid principals aren't found	2017-03-02 15:56:08 -05:00
Jeff Mitchell	eca68d5913	Fix a bunch of errors from returning 5xx, and parse more duration types	2017-03-02 15:38:34 -05:00
Vishal Nayak	3795d2ea64	Rework ssh ca (#2419) ... * docs: input format for default_critical_options and default_extensions * s/sshca/ssh * Added default_critical_options and default_extensions to the read endpoint of role * Change default time return value to 0	2017-03-01 15:50:23 -05:00
Will May	9f75f84175	Changes from code review ... Major changes are: * Remove duplicate code * Check the public key used to configure the backend is a valid one	2017-03-01 15:19:18 -05:00
Will May	ff1ff02bd7	Changes from code review ... Major changes are: * Change `allow_{user,host}_certificates` to default to false * Add separate `allowed_domains` role property	2017-03-01 15:19:18 -05:00
Will May	099d561b20	Add ability to create SSH certificates	2017-03-01 15:19:18 -05:00