luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
open-vault/builtin/logical/pki
History
Jeff Mitchell 12c00b97ef Allow backends to see taint status. 
This can be seen via System(). In the PKI backend, if the CA is
reconfigured but not fully (e.g. an intermediate CSR is generated but no
corresponding cert set) and there are already leases (issued certs), the
CRL is unable to be built. As a result revocation fails. But in this
case we don't actually need revocation to be successful since the CRL is
useless after unmounting. By checking taint status we know if we can
simply fast-path out of revocation with a success in this case.

Fixes #946
2016-01-22 17:01:22 -05:00
..
backend.go Split root and intermediate functionality into their own sections in the API. Update documentation. Add sign-verbatim endpoint. 2015-11-19 09:51:18 -05:00
backend_test.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
ca_util.go Split root and intermediate functionality into their own sections in the API. Update documentation. Add sign-verbatim endpoint. 2015-11-19 09:51:18 -05:00
cert_util.go Built on GH-890 to add other types 2015-12-29 13:07:24 -05:00
crl_util.go Allow backends to see taint status. 2016-01-22 17:01:22 -05:00
fields.go Fix zero path length handling, and move common field defs elsewhere 2015-11-19 09:51:18 -05:00
path_config_ca.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_config_crl.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_config_urls.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_fetch.go A few things: 2015-06-19 12:48:18 -04:00
path_intermediate.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_issue_sign.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_revoke.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_roles.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_root.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
secret_certs.go Update documentation, some comments, make code cleaner, and make generated roots be revoked when their TTL is up 2015-11-19 17:14:22 -05:00