cashier - Mirror of Cashier, a SSH Certificate Authority (CA).

Age	Commit message (Collapse)	Author
2020-04-13	Simplify	Ben Burwell

2018-08-09	Only request a reason from the client if the server requires it	Niall Sheridan

2017-02-11	Revert "Remove the oauth_callback_url config option"	Niall Sheridan

2017-02-09	Remove the oauth_callback_url config option	Niall Sheridan
	Infer the redirect url from the request instead
2017-01-27	Remove datastore	Kevin Lyda

2017-01-27	Remove DatastoreConversion test	Niall Sheridan
	It's going away
2017-01-27	Remove mongo support	Kevin Lyda
	Resolves #40
2017-01-25	Switch to scl, an extension of hcl	Niall Sheridan

2017-01-24	Log the datastore warning as a single line	Niall Sheridan

2017-01-15	Add more context to errors	Niall Sheridan

2016-12-28	Add LetsEncrypt support	Niall Sheridan
	When configured the server will request a TLS certificate for the specified server name from LetsEncrypt
2016-10-17	Unmarshal the config using mapstructure directly.	Niall Sheridan
	Avoid unmarshalling into an intermediate struct. Better tests.
2016-10-11	Replace the 'datastore' option with a 'database' option	Niall Sheridan
	The 'datastore' string option is deprecated and will be removed in a future version. The new 'database' map option is preferred.
2016-10-06	Add support for Hashicorp Vault	Niall Sheridan
	Vault is supported for the following: As a well-known filesystem for TLS cert, TLS key and SSH signing key. For configuration secrets for cookie_secret, csrf_secret, oauth_client_id and oauth_client_secret options.
2016-08-27	Allow setting some config from environment	Niall Sheridan

2016-08-26	First attempt at dropping privileges	sid77

2016-08-20	Replace Fatals with Errors	Niall Sheridan

2016-08-20	Run some tests in parallel	Niall Sheridan

2016-08-20	Use references to config structs	Niall Sheridan

2016-08-16	Allow selecting which ip to listen on	Niall Sheridan

2016-07-24	Add a page for revoking certs	Niall Sheridan
	Add a template for revocation Use DATETIME type to store created/expires times Require auth for the /admin and /revoke endpoints
2016-07-03	first pass at a certificate store	Niall Sheridan

2016-06-30	Configurable logfile location	Niall Sheridan

2016-06-14	Add support for a users whitelist	Marco Bonetti

2016-06-05	Add AWS S3 and Google GCS virtual filesystems.	Niall Sheridan
	This allows the signing key to be read directly from S3 using a path like /s3/<bucket>/<path/to/signing.key> or /gcs/<bucket>/<path/to/signing.key>.
2016-05-29	Switch from json to hcl configs	Niall Sheridan
	This is backward-compatible with the JSON config format - this is a non-breaking change. HCL treats config blocks as repeated fields so the config has to be unmarshalled into a struct comprised of []Server, []Auth, []SSH first.
2016-05-29	Remove unneeded template_dir	Niall Sheridan

2016-05-22	Make template directory configurable	Niall Sheridan

2016-05-21	Remove database config. Not needed.	Niall Sheridan

2016-05-18	Don't use jwt, it doesn't buy a whole lot for this application	Niall Sheridan

2016-05-09	Placeholder for database config.	Niall Sheridan

2016-04-23	Add config file tests	Niall Sheridan

2016-04-23	Refactor to use an io.Reader for easier testing	Niall Sheridan

2016-04-21	Just make ProviderOpts a map[string]string.	Niall Sheridan
	I have no idea why I made it a map[string]interface{} and it's a pain to deal with.
2016-04-21	Some small fixes.	Niall Sheridan
	Rename 'GoogleOpts' to 'ProviderOpts'. Rename Principals to AdditionalPrincipals to match the config option.
2016-04-21	use correct config parameter	Niall Sheridan

2016-04-18	Initial commit	Niall Sheridan