open-vault/builtin/logical/pki
Jeff Mitchell 45a442e593 Set some basic key usages by default.
Some programs (such as OpenVPN) don't like it if you don't include key
usages. This adds a default set that should suffice for most extended
usages. However, since things get twitchy when these are set in ways
various crypto stacks don't like, it's fully controllable by the user.

Fixes #1476
2016-06-22 16:08:24 -04:00
..
backend.go Backend() functions should return 'backend' objects. 2016-06-10 15:53:02 -04:00
backend_test.go Set some basic key usages by default. 2016-06-22 16:08:24 -04:00
ca_util.go Disallow 1024-bit RSA keys. 2016-02-19 14:33:02 -05:00
cert_util.go Set some basic key usages by default. 2016-06-22 16:08:24 -04:00
crl_util.go Don't revoke CA certificates with leases. 2016-05-09 19:53:28 -04:00
fields.go Add ability to exclude adding the CN to SANs. 2016-03-17 16:28:40 -04:00
path_config_ca.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_config_crl.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_config_urls.go WriteOperation -> UpdateOperation 2016-01-08 13:03:03 -05:00
path_fetch.go Add PKI listing 2016-06-08 11:50:59 -04:00
path_intermediate.go Add "tidy/" which allows removing expired certificates. 2016-02-24 21:24:48 -05:00
path_issue_sign.go Add serial_number back to path_issue_sign responses in PKI 2016-03-08 09:25:48 -05:00
path_revoke.go Don't revoke CA certificates with leases. 2016-05-09 19:53:28 -04:00
path_roles.go Set some basic key usages by default. 2016-06-22 16:08:24 -04:00
path_root.go Don't revoke CA certificates with leases. 2016-05-09 19:53:28 -04:00
path_tidy.go Be more explicit about buffer type 2016-02-24 22:05:39 -05:00
secret_certs.go s/logical.ErrorResponse/fmt.Errorf in revocation functions of secrets 2016-05-26 10:04:11 -04:00