open-vault/builtin/logical/pki
Alexander Scheel 3166d1ff78
Allow issuer/:issuer_ref/sign-verbatim/:role, add error on missing role (#15543)
* Allow role-based sign-verbatim with chosen issuer

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add warning with missing requested verbatim role

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add changelog

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Update builtin/logical/pki/backend.go

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2022-05-23 13:09:18 -04:00
..
cmd/pki Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
backend.go Allow issuer/:issuer_ref/sign-verbatim/:role, add error on missing role (#15543) 2022-05-23 13:09:18 -04:00
backend_test.go Return the signed ca in the ca_chain response field within sign-intermediate api call. (#15524) 2022-05-20 11:06:44 -04:00
ca_test.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
ca_util.go Rebase #14178 / Add not_before_duration API parameter to Root/Intermediate CA generation (#15511) 2022-05-19 12:35:08 -04:00
cert_util.go Always return PKI configs for CRLs, URLs (#15470) 2022-05-17 11:40:09 -04:00
cert_util_test.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
chain_test.go Add tests for usage-based restrictions of issuers (#15411) 2022-05-13 09:57:58 -04:00
chain_util.go Root issuers lack CA Chain + Chain Building Bug Fix (#15306) 2022-05-11 13:09:18 -04:00
config_util.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
crl_test.go Use backendUUID instead of mount points for managed keys (OSS) (#15441) 2022-05-16 12:48:54 -04:00
crl_util.go Always return PKI configs for CRLs, URLs (#15470) 2022-05-17 11:40:09 -04:00
fields.go Rebase #14178 / Add not_before_duration API parameter to Root/Intermediate CA generation (#15511) 2022-05-19 12:35:08 -04:00
key_util.go Use backendUUID instead of mount points for managed keys (OSS) (#15441) 2022-05-16 12:48:54 -04:00
managed_key_util.go secret/pki: Return correct algorithm type from key fetch API for managed keys (#15468) 2022-05-17 11:36:14 -04:00
path_config_ca.go Fix revoking certificates in pre-migration state within PKI (#15360) 2022-05-11 13:33:04 -04:00
path_config_crl.go Always return PKI configs for CRLs, URLs (#15470) 2022-05-17 11:40:09 -04:00
path_config_urls.go Always return PKI configs for CRLs, URLs (#15470) 2022-05-17 11:40:09 -04:00
path_fetch.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
path_fetch_issuers.go Add role patching test case (#15545) 2022-05-20 15:30:22 -04:00
path_fetch_keys.go PKI: Do not error out on unknown issuers/keys on delete api calls. (#15541) 2022-05-20 13:33:26 -04:00
path_intermediate.go Add warning on missing AIA info fields (#15509) 2022-05-19 11:12:10 -04:00
path_issue_sign.go Allow issuer/:issuer_ref/sign-verbatim/:role, add error on missing role (#15543) 2022-05-23 13:09:18 -04:00
path_manage_issuers.go Protect against key and issuer name re-use (#15481) 2022-05-18 10:31:39 -04:00
path_manage_keys.go Protect against key and issuer name re-use (#15481) 2022-05-18 10:31:39 -04:00
path_manage_keys_test.go PKI: Do not error out on unknown issuers/keys on delete api calls. (#15541) 2022-05-20 13:33:26 -04:00
path_revoke.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
path_roles.go Vault 5917 allow patch operations to pki roles issuers (#15510) 2022-05-20 13:34:55 -04:00
path_roles_test.go Add role patching test case (#15545) 2022-05-20 15:30:22 -04:00
path_root.go Return the signed ca in the ca_chain response field within sign-intermediate api call. (#15524) 2022-05-20 11:06:44 -04:00
path_sign_issuers.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
path_tidy.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
secret_certs.go Allow Multiple Issuers in PKI Secret Engine Mounts - PKI Pod (#15277) 2022-05-11 12:42:28 -04:00
storage.go Vault 6122 pki role issuer name validation (#15473) 2022-05-18 16:21:17 -04:00
storage_migrations.go Log less around the current status of the PKI migration (#15451) 2022-05-17 08:52:42 -04:00
storage_migrations_test.go Store migrated issuer, key in migration log (#15449) 2022-05-16 16:12:49 -04:00
storage_test.go Use backendUUID instead of mount points for managed keys (OSS) (#15441) 2022-05-16 12:48:54 -04:00
test_helpers.go Add tests for usage-based restrictions of issuers (#15411) 2022-05-13 09:57:58 -04:00
util.go secret/pki: Return correct algorithm type from key fetch API for managed keys (#15468) 2022-05-17 11:36:14 -04:00