luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/sdk/helper
History
Steven Clark 10ecf10248
PKI: Add support for signature_bits param to the intermediate/generate api (#17388) 
* PKI: Add support for signature_bits param to the intermediate/generate api

 - Mainly to work properly with GCP backed managed keys, we need to
   issue signatures that would match the GCP key algorithm.
 - At this time due to https://github.com/golang/go/issues/45990 we
   can't issue PSS signed CSRs, as the libraries in Go always request
   a PKCS1v15.
 - Add an extra check in intermediate/generate that validates the CSR's
   signature before providing it back to the client in case we generated
   a bad signature such as if an end-user used a GCP backed managed key
   with a RSA PSS algorithm.
   - GCP ignores the requested signature type and always signs with the
     key's algorithm which can lead to a CSR that says it is signed with
     a PKCS1v15 algorithm but is actually a RSA PSS signature

* Add cl

* PR feedback
 		2022-10-03 12:39:54 -04:00
..
authmetadata Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
base62 Swap out sdk/helper libs with implementations in go-secure-stdlib (#12088) 2021-07-15 01:56:37 -04:00
certutil PKI: Add support for signature_bits param to the intermediate/generate api (#17388) 2022-10-03 12:39:54 -04:00
cidrutil only check Contains if IP address (#14487) 2022-03-15 09:55:50 -06:00
compressutil reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
consts Handle deprecated builtins (#17005) 2022-09-06 15:49:35 -04:00
cryptoutil Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
custommetadata VAULT-7256: Add custom_metadata to namespaces (#16640) 2022-08-09 11:38:03 -04:00
dbtxn refactor: replace strings.Replace with strings.ReplaceAll (#15392) 2022-08-03 15:22:48 -04:00
errutil Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
hclutil Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
identitytpl Add Custom metadata field to alias (#12502) 2021-09-17 11:03:47 -07:00
jsonutil Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
kdf reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
keysutil Update missing go-kms-wrapping v2 dep and address some ENT->OSS drift (#17178) 2022-09-19 10:23:40 -04:00
ldaputil Fix handling of username_as_alias during LDAP authentication (#15525) 2022-05-20 14:17:26 -07:00
license Create sdk/ and api/ submodules (#6583) 2019-04-12 17:54:35 -04:00
locksutil update gofumpt to 0.3.1 and reformat the repo (#17055) 2022-09-07 17:31:20 -07:00
logging Add endpoints to provide ability to modify logging verbosity (#16111) 2022-06-27 11:39:53 -04:00
mlock Swap out sdk/helper libs with implementations in go-secure-stdlib (#12088) 2021-07-15 01:56:37 -04:00
parseutil Swap out sdk/helper libs with implementations in go-secure-stdlib (#12088) 2021-07-15 01:56:37 -04:00
password Swap out sdk/helper libs with implementations in go-secure-stdlib (#12088) 2021-07-15 01:56:37 -04:00
pathmanager Use %q for quoted strings where appropriate (#15216) 2022-08-03 12:32:45 -06:00
pluginutil Check if plugin version matches running version (#17182) 2022-09-21 12:25:04 -07:00
pointerutil Add int64 pointerutil (#7973) 2019-12-05 14:02:36 -08:00
policyutil Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
roottoken Add helper for encoding/decoding root tokens and OTP generation in SDK module (#10504) (#10505) 2021-12-01 08:05:49 -05:00
salt Send a test message before committing a new audit device. (#10520) 2020-12-16 16:00:32 -06:00
strutil Swap out sdk/helper libs with implementations in go-secure-stdlib (#12088) 2021-07-15 01:56:37 -04:00
template update gofumpt to 0.3.1 and reformat the repo (#17055) 2022-09-07 17:31:20 -07:00
tlsutil Swap out sdk/helper libs with implementations in go-secure-stdlib (#12088) 2021-07-15 01:56:37 -04:00
tokenutil Migrate to sdk/internalshared libs in go-secure-stdlib (#12090) 2021-07-15 20:17:31 -04:00
useragent sdk/useragent: plugin version string consistent with Vault version string (#14912) 2022-04-05 10:07:33 -07:00
wrapping Expose secret_id_accessor as WrappedAccessor when wrapping secret-id creation. (#12425) 2021-09-16 10:47:49 -07:00
xor Add helper for encoding/decoding root tokens and OTP generation in SDK module (#10504) (#10505) 2021-12-01 08:05:49 -05:00