Cloud Foundations Keymaster Versions Save

Short term certificate based identity system (ssh/x509 ca + openidc)

v1.15.3

3 weeks ago
  • fixes package build side issue

v1.15.2

3 weeks ago

Enhancements:

  • ssh attributes now can use defined using posix extensions (useful for github name transformations)
  • client is more slient by default
  • update jquery to latest (3.7.1)
  • generic golang depenency updates

Fixes:

  • Client: Fix webauthn on linux. Now works out of the box (1.15.1)
  • Client: Bug on respecting $HOME environment variable directory for some operations (1.15.1)
  • Client: Fix on fallback when fido2 keys not present.
  • generic golang depenency updates

v1.14.1

6 months ago

New:

  • Added ability to require agent confirmation, enabled by setting in config file only

Bugfixes:

  • Client: Allow missing u2f devices to fallback on to other 2fa methods (broken when using new webauthn hostlib)
  • Minor updates for october dependencies

v1.13.4

8 months ago

v1.13.3

10 months ago
  • Added compabilitu for webauthn for MacOS and Windows cli.
  • Fixed issue with duplicate credentials registered in OKTA

Other fixes (from previous changes not released):

  • Fixed JWKS ul on Ed25519 public keys
  • Added Service Methods for smallstack compatibilty

v1.12.0

1 year ago

Added the abiliity for keymasterd to add generic ssh extensions. With the primary goal to genertate github enterprise roles.

v1.11.2

1 year ago

v1.11.0

1 year ago
  • Add cache control for static files.
  • Add global rate limit for password attempts.
  • Use Origin header in preference to Referer.
  • Add FIDOv2 protocol support for token registration and web authentication.
  • Refactor AWS role certificate support into a package.
  • Small documentation improvements.
  • Other bugfixes.

v1.10.1

2 years ago

Fixes issue #141 and should fix issue #2 .

v1.10.0

2 years ago
  • keymaster binary will periodically refresh certificates in aws-role-cert mode
  • Documentation improvements
  • keymaster-eventmond: make tables easier to read