Commit Graph

173 Commits

Author SHA1 Message Date
Erik Godding Boye
bbafeeef67 fix #3619: Handle CA issuer working as intermediate correctly
Signed-off-by: Erik Godding Boye <egboye@gmail.com>
2021-04-06 19:45:48 +02:00
Ashley Davis
ef5aa91f35
improve comment to match the function definition
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-03-19 13:59:33 +00:00
Ashley Davis
b246c92a45
clarify exact curve types of current ECDSA keys
it's conceivable that in the future we could have Ed25519 certs,
which would also have a key size of 256 but would be a new named entry
here

Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
2021-03-19 13:59:30 +00:00
Josh Soref
895cb51ed9 spelling: nonexistent
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2021-03-04 13:04:38 -05:00
Mitsuo Heijo
ffa79f6b8d
Fix build on go1.16
Signed-off-by: Mitsuo Heijo <mitsuo.heijo@gmail.com>
2021-02-26 22:47:56 +09:00
Maartje Eyskens
7078a5c7b8 Rename the User Agent fields
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-15 17:25:18 +01:00
Maartje Eyskens
ab0cd57dc5 Use The cert-manager Authors.
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-11 19:04:13 +01:00
Maartje Eyskens
1788a9d758 Update copyright to cert-manager project
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-12-08 19:04:49 +01:00
Mateusz Gozdek
27fa2f1ec4
Fix various typos found by codespell
Found by running this command:

codespell -S .git,*.png,go.sum -L keypair,iam,ans,unknwon,tage,ths,creater

Signed-off-by: Mateusz Gozdek <mgozdekof@gmail.com>
2020-11-07 14:55:13 +01:00
Raphaël Pinson
b2d719d6c3
Add encode_usages_in_request to Certificate spec (fix #3301)
Signed-off-by: Raphaël Pinson <raphael.pinson@camptocamp.com>
2020-10-16 15:40:32 +02:00
Maartje Eyskens
52bda8a33f Fix validation in CSR
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-10-08 15:24:56 +02:00
jetstack-bot
4a13dd72f3
Merge pull request #3279 from meyskens/fix-double-signing-validation
Fix double "signing" KU validation
2020-09-22 10:27:51 +01:00
Maartje Eyskens
e01bf377de Split out logic
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-09-17 14:46:23 +02:00
Maartje Eyskens
ce8ca4ca20 Fixes validation when teh 2 signing keys are set
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-09-14 11:05:44 +02:00
Maartje Eyskens
e989384c96 Update tests
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-09-07 09:30:11 +02:00
Maartje Eyskens
8d15ec6bc8 Only encode EKUs if there are EKUs to be encoded
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-09-07 09:00:53 +02:00
Lars Lehtonen
ae8afe2257
pkg/util/pki: fix dropped errors
Signed-off-by: Lars Lehtonen <lars.lehtonen@gmail.com>
2020-09-03 19:32:24 -07:00
Maartje Eyskens
3154be722c Implement feedback
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-25 14:44:43 +02:00
Maartje Eyskens
abb56fb0b5 Add CSR validation
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-25 10:39:24 +02:00
Maartje Eyskens
f6610fb744 Support key usages
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-24 20:10:01 +02:00
Maartje Eyskens
0e17b9d237 Add boilerplate
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-24 11:21:41 +02:00
Maartje Eyskens
d15054e4ea Add extended key usages into CSR
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-24 10:22:58 +02:00
Richard Wall
01b5d0fa88 Fix tests in ./pkg/controller/certificates/...
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:28:06 +01:00
Richard Wall
81eb53f597 ./hack/update-all.sh
Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:28:06 +01:00
Richard Wall
a70298180a Run a script to update v1alpha2 usage to v1
Script is available at https://github.com/jetstack/cert-manager/pull/3201

Signed-off-by: Richard Wall <richard.wall@jetstack.io>
2020-08-20 14:26:51 +01:00
Maartje Eyskens
9dd00905e9 Update klog
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>

klog v2

Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-08-12 10:59:41 +02:00
JoshVanL
49ee468161
Adds integration test for issuer controller secret annotations, and
fixes GenerateTempalate func

Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-08-06 11:08:13 +01:00
Haoxiang Zhou
4f26537ff7 Set visibility to public
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-07-02 16:12:47 +01:00
Haoxiang Zhou
fe80b7d760 Moved predicate package to pkg/util
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-07-02 12:23:15 +01:00
James Munnelly
1adfe16690 Bulk fix of non-test staticcheck failures
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-06-26 12:25:08 +01:00
Haoxiang Zhou
5bcea49921 Issuing controller encodes private keys to PKCS1/PKCS8 as requested by user
Signed-off-by: Haoxiang Zhou <haoxiang.zhou@jetstack.io>
2020-06-18 15:26:14 +01:00
James Munnelly
9cb68d1d91 Remove serverAuth default usage & remove unused DefaultKeyUsage functions
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-30 15:57:12 +01:00
James Munnelly
212ef42a66 util/pki: allow certificates only specifying IP, URI or Email SANs to be signed
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-21 09:49:32 +01:00
JoshVanL
a6a8ee29e3 Moves issuing controller secret handler into secretsManager struct
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-15 16:16:08 +01:00
James Munnelly
75c8fcef8c pkg/util: add EqualKeyUsagesUnsorted function
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:26:21 +01:00
James Munnelly
8b3b9dc5eb Remove defaulting of Organization name
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-15 12:25:29 +01:00
jetstack-bot
fba7b09ac8
Merge pull request #2725 from JoshVanL/ctl-version
cert-manager-ctl CLI with version
2020-04-08 12:45:15 +01:00
JoshVanL
49d3bde7eb
Move cmd signal handler into shared util
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-02 11:02:33 +01:00
James Munnelly
e36c1acf1c Add '-ubi' suffix to AppVersion in UBI artifacts
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-04-01 19:34:34 +01:00
JoshVanL
19bc4734b6
Adds cert-manager-ctl with version command
Signed-off-by: JoshVanL <vleeuwenjoshua@gmail.com>
2020-04-01 18:54:19 +01:00
James Munnelly
acff2b12bb Fix JKS keystore functionality and add additional tests
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-03-23 10:02:42 +00:00
jetstack-bot
00b101de76
Merge pull request #2597 from meyskens/emailsans
Add Email SANs
2020-03-03 16:31:56 +00:00
Maartje Eyskens
1c27fcb8d9 Fix CSR validation for Email SANs
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-03-03 15:02:51 +01:00
Josh Soref
126edc1095 spelling: convenient
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
2020-02-24 16:32:23 -05:00
Maartje Eyskens
d3a623314c Add EmailSANs field
Signed-off-by: Maartje Eyskens <maartje@eyskens.me>
2020-02-21 08:49:00 +01:00
James Munnelly
22f4f1e1f2 Add release-tars targets to construct cert-manager release artifacts
Signed-off-by: James Munnelly <james@munnelly.eu>
2020-01-30 21:02:58 +00:00
Joshua Mathianas
39cc63a205 resolve failing unit tests
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 11:34:44 -05:00
Joshua Mathianas
b096e0f0af Made requested changes from review
Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 09:41:16 -05:00
Joshua Mathianas
e33e28c4fd add backwards compatability for using existing common name or organization if x509name ones are not set
add ability to specify more subject attributes for csr

Signed-off-by: Joshua Mathianas <mathianasj@gmail.com>
2020-01-16 07:50:26 -05:00
James Munnelly
361fdfac3f Don't log misleading error messages
Signed-off-by: James Munnelly <james@munnelly.eu>
2019-12-16 16:31:18 +00:00