open-vault/builtin/logical/pki
Alexander Scheel d8c5456f8a
Add dns resolver to PKI Binary Cluster (#20485)
* Export DockerAPI for use by other consumers

As usage of DockerCluster gets more advanced, some users may want to
interact with the container nodes of the cluster. While, if you already
have a DockerAPI instance lying around you can reuse that safely, for
use cases where an existing e.g., docker/testhelpers's runner instance
is not available, reusing the existing cluster's DockerAPI is easiest.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add ability to exec commands without runner

When modifying DockerTestCluster's containers manually, we might not
have a Runner instance; instead, expose the ability to run commands via
a DockerAPI instance directly, as they're awfully convenient.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add DNS resolver into ACME tests

This updates the pkiext_binary tests to use an adjacent DNS resolver,
allowing these tests to eventually be extended to solve DNS challenges,
as modifying the /etc/hosts file does not allow this.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Fix loading DNS resolver onto network

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Fix bug with DNS configuration validation

Both conditionals here were inverted: address being empty means a bad
specification was given, and the parse being nil means that it was not a
valid IP address.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Fix specifying TXT records, allow removing records

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-05-03 17:32:39 +00:00
..
cmd/pki adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
dnstest Add dns resolver to PKI Binary Cluster (#20485) 2023-05-03 17:32:39 +00:00
acme_authorizations.go In ACME responses only return Type, Value fields (#20480) 2023-05-03 09:53:33 -04:00
acme_challenge_engine.go Add PKI ACME IP SANS test case (#20398) 2023-04-27 16:05:23 -04:00
acme_challenges.go Add custom DNS resolver to ACME configuration (#20400) 2023-04-27 15:30:29 -04:00
acme_challenges_test.go Add custom DNS resolver to ACME configuration (#20400) 2023-04-27 15:30:29 -04:00
acme_errors.go Add the ability to disable ACME through an OS environment variable (#20369) 2023-04-26 17:21:00 +00:00
acme_jws.go Add acme challenge validation engine (#20221) 2023-04-19 12:31:19 -04:00
acme_state.go Add custom DNS resolver to ACME configuration (#20400) 2023-04-27 15:30:29 -04:00
acme_state_test.go Move all ACME wrappers into a dedicated go file (#20174) 2023-04-14 14:12:31 -04:00
acme_wrappers.go Integrate acme config enable/disable into tests (#20407) 2023-04-27 20:31:13 +00:00
acme_wrappers_test.go Integrate acme config enable/disable into tests (#20407) 2023-04-27 20:31:13 +00:00
backend.go Add custom DNS resolver to ACME configuration (#20400) 2023-04-27 15:30:29 -04:00
backend_test.go Update to tidy status and docs (#20442) 2023-05-01 14:26:29 +00:00
ca_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
ca_util.go Add support to load roles and issuers within ACME wrapper (#20333) 2023-04-25 13:29:07 +00:00
cert_util.go Better ACME wildcard validation (#20289) 2023-04-21 12:54:19 -04:00
cert_util_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
chain_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
chain_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
config_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
crl_test.go Implement ACME CSR signing and certificate retrieval (#20266) 2023-04-21 09:38:06 -04:00
crl_util.go Add warnings to crl rebuilds, allowing notifying operator of empty issuer equivalency sets (#20253) 2023-04-19 16:55:37 +00:00
fields.go Add support to load roles and issuers within ACME wrapper (#20333) 2023-04-25 13:29:07 +00:00
integration_test.go Move OCSP/PKI interop test to PKI engine (#20273) 2023-04-20 14:57:20 +00:00
key_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
managed_key_util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_acme_account.go Enforce ACME accounts to a specific directory path (#20363) 2023-04-26 12:47:31 -04:00
path_acme_authorizations.go Add tests for fetching ACME authorizations and challenges (#20205) 2023-04-17 17:52:54 +00:00
path_acme_challenges.go Add acme challenge validation engine (#20221) 2023-04-19 12:31:19 -04:00
path_acme_directory.go Add a helper function to build ACME API patterns (#20180) 2023-04-14 18:48:33 +00:00
path_acme_nonce.go Add a helper function to build ACME API patterns (#20180) 2023-04-14 18:48:33 +00:00
path_acme_order.go In ACME responses only return Type, Value fields (#20480) 2023-05-03 09:53:33 -04:00
path_acme_order_test.go Validate identifiers against role when creating order (#20410) 2023-04-28 19:21:26 +00:00
path_acme_revoke.go Add ACME revocation handlers (#20340) 2023-04-25 16:48:30 -04:00
path_acme_test.go In ACME responses only return Type, Value fields (#20480) 2023-05-03 09:53:33 -04:00
path_config_acme.go Add dns resolver to PKI Binary Cluster (#20485) 2023-05-03 17:32:39 +00:00
path_config_ca.go Show existing keys, issuers on PKI import (#20441) 2023-05-01 14:07:31 +00:00
path_config_cluster.go openapi: Add display attributes for PKI plugin (#19422) 2023-04-06 11:10:01 -04:00
path_config_crl.go Add warnings to crl rebuilds, allowing notifying operator of empty issuer equivalency sets (#20253) 2023-04-19 16:55:37 +00:00
path_config_urls.go openapi: Add display attributes for PKI plugin (#19422) 2023-04-06 11:10:01 -04:00
path_fetch.go openapi: Add display attributes for PKI plugin (#19422) 2023-04-06 11:10:01 -04:00
path_fetch_issuers.go Fix reading issuer's enable_aia_url_templating value (#20354) 2023-04-25 16:48:05 -04:00
path_fetch_keys.go openapi: Add display attributes for PKI plugin (#19422) 2023-04-06 11:10:01 -04:00
path_intermediate.go Show existing keys, issuers on PKI import (#20441) 2023-05-01 14:07:31 +00:00
path_issue_sign.go Add support to load roles and issuers within ACME wrapper (#20333) 2023-04-25 13:29:07 +00:00
path_manage_issuers.go Show existing keys, issuers on PKI import (#20441) 2023-05-01 14:07:31 +00:00
path_manage_keys.go openapi: Add display attributes for PKI plugin (#19422) 2023-04-06 11:10:01 -04:00
path_manage_keys_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_ocsp.go Remove extraneous certificate from OCSP response (#20201) 2023-04-17 16:40:26 +00:00
path_ocsp_test.go Skip OcspHigherLevel test failures if we trigger redirection bug (#20461) 2023-05-02 14:44:09 +00:00
path_resign_crls.go openapi: Add display attributes for PKI plugin (#19422) 2023-04-06 11:10:01 -04:00
path_resign_crls_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_revoke.go Add ACME revocation handlers (#20340) 2023-04-25 16:48:30 -04:00
path_roles.go Add support to load roles and issuers within ACME wrapper (#20333) 2023-04-25 13:29:07 +00:00
path_roles_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
path_root.go Add warnings to crl rebuilds, allowing notifying operator of empty issuer equivalency sets (#20253) 2023-04-19 16:55:37 +00:00
path_sign_issuers.go openapi: Add display attributes for PKI plugin (#19422) 2023-04-06 11:10:01 -04:00
path_tidy.go Update to tidy status and docs (#20442) 2023-05-01 14:26:29 +00:00
path_tidy_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
periodic.go Fix building unified delta WAL, unified delta CRLs (#20058) 2023-04-11 18:02:58 +00:00
secret_certs.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage.go Add acme challenge validation engine (#20221) 2023-04-19 12:31:19 -04:00
storage_migrations.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage_migrations_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage_test.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
storage_unified.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
test_helpers.go Initial ACME new-nonce API (#19822) 2023-03-29 18:22:48 +00:00
util.go adding copyright header (#19555) 2023-03-15 09:00:52 -07:00