103 commits

Author	SHA1	Message	Date
Jeff Mitchell	29e7ec3e21	A lot of refactoring: move PEM bundle parsing into helper/certutil, so that it is usable by other backends that want to use it to get the necessary data for TLS auth. ... Also, enhance the raw cert bundle => parsed cert bundle to make it more useful and perform more validation checks. More refactoring could be done within the PKI backend itself, but that can wait. Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>	2015-06-17 16:07:20 -04:00
Jeff Mitchell	03b0675350	A bunch of cleanup and moving around. logical/certutil is a package that now has helper functions ... useful for other parts of Vault (including the API) to take advantage of. Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>	2015-06-16 13:43:12 -04:00
Jeff Mitchell	1513e2baa4	Add acceptance tests ... * CA bundle uploading * Basic role creation * Common Name restrictions * IP SAN restrictions * EC + RSA keys * Various key usages * Lease times * CA fetching in various formats * DNS SAN handling Also, fix a bug when trying to get code signing certificates. Not tested: * Revocation (I believe this is impossible with the current testing framework) Commit contents (C)2015 Akamai Technologies, Inc. <opensource@akamai.com>	2015-06-08 00:06:09 -04:00