Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add an OCSP responder to Vault's PKI plugin #16723

Merged
merged 15 commits into from Aug 22, 2022
Merged

Add an OCSP responder to Vault's PKI plugin #16723

merged 15 commits into from Aug 22, 2022

Commits on Aug 19, 2022

  1. Refactor existing CRL function to storage getRevocationConfig

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    6d1bb3f View commit details
    Browse the repository at this point in the history

  2. Introduce ocsp_disable config option in config/crl

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    39aa448 View commit details
    Browse the repository at this point in the history

  3. Introduce OCSPSigning usage flag on issuer

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    226de19 View commit details
    Browse the repository at this point in the history

  4. Add ocsp-request passthrough within lower layers of Vault

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    83adbd8 View commit details
    Browse the repository at this point in the history

  5. Add OCSP responder to Vault PKI

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    5c4d11c View commit details
    Browse the repository at this point in the history

  6. Add API documentation for OCSP

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    2ba5d65 View commit details
    Browse the repository at this point in the history

  7. Add cl

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    46dfab1 View commit details
    Browse the repository at this point in the history

  8. Revert PKI storage migration modifications for OCSP

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    0ac25e1 View commit details
    Browse the repository at this point in the history

  9. Smaller PR feedback items 

     - pki.mdx doc update
 - parens around logical.go comment to indicate DER encoded request is
   related to OCSP and not the snapshots
 - Use AllIssuers instead of writing them all out
 - Drop zero initialization of crl config's Disable flag if not present
 - Upgrade issuer on the fly instead of an initial migration
    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    a85e8fd View commit details
    Browse the repository at this point in the history

  10. Additional clean up backing out the writeRevocationConfig refactoring

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    f0c8ff4 View commit details
    Browse the repository at this point in the history

  11. Remove Dirty issuer flag and update comment about not writing upgrade to 

    storage
    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    2e48792 View commit details
    Browse the repository at this point in the history

  12. Address PR feedback and return Unknown response when mismatching issuer

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    2296498 View commit details
    Browse the repository at this point in the history

  13. make fmt

    @stevendpclark
    stevendpclark committed Aug 19, 2022
    Copy the full SHA
    b431863 View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2022

  1. PR Feedback.

    @stevendpclark
    stevendpclark committed Aug 22, 2022
    Copy the full SHA
    954cafd View commit details
    Browse the repository at this point in the history

  2. More PR feedback 

     - Leverage ocsp response constant
 - Remove duplicate errors regarding unknown issuers
    @stevendpclark
    stevendpclark committed Aug 22, 2022
    Copy the full SHA
    0603dd0 View commit details
    Browse the repository at this point in the history