luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
open-vault/builtin/credential/cert/test-fixtures
History
joe miller d39ffc9e25 add allowed_organiztaional_units parameter to cert credential backend (#5252) 
Specifying the `allowed_organiztaional_units` parameter to a cert auth
backend role will require client certificates to contain at least one of
a list of one or more "organizational units" (OU).

Example use cases:

Certificates are issued to entities in an organization arrangement by
organizational unit (OU). The OU may be a department, team, or any other logical
grouping of resources with similar roles. The entities within the OU
should be granted the same policies.

```
$ vault write auth/cert/certs/ou-engineering \
    certificate=@ca.pem \
    policies=engineering \
    allowed_organiztaional_units=engineering

$ vault write auth/cert/certs/ou-engineering \
    certificate=@ca.pem \
    policies=engineering \
    allowed_organiztaional_units=engineering,support
```
2018-09-27 19:04:55 -05:00
..
keys
root add allowed_organiztaional_units parameter to cert credential backend (#5252) 2018-09-27 19:04:55 -05:00
cacert.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
cacert2crl Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
cakey.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
generate.txt Change default TTL from 30 to 32 to accommodate monthly operations (#1942) 2016-09-28 18:32:49 -04:00
issuedcertcrl Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
noclientauthcert.pem
testcacert1.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
testcacert2.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
testcakey1.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
testcakey2.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
testissuedcert4.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00
testissuedkey4.pem Extend the expiry of test-fixture certs of Cert backend 2016-05-02 12:34:46 -04:00