vault-pki-backend-venafi
vault-pki-backend-venafi copied to clipboard
Venafi PKI Secrets Engine plugin for HashiCorp Vault that enables certificate enrollment using Venafi machine identity services.
**BUSINESS PROBLEM** Today the integration does not support JWT as an authentication method for the plugin. Adding JWT support would bring the integration to parity with other Venafi integrations. VCert...
**BUSINESS PROBLEM** Some cloud services require certificates in PKCS12 format. This format is not supported by Venafi Secrets Engine today. **PROPOSED SOLUTION** Add support to getting Certificates in PKCS12 format....
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0. Commits 9d2ee97 ssh: implement strict KEX protocol changes 4e5a261 ssh: close net.Conn on all NewServerConn errors 152cdb1 x509roots/fallback: update bundle fdfe1f8 ssh: defer channel...
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.0 to 3.0.1. Release notes Sourced from github.com/go-jose/go-jose/v3's releases. Version 3.0.1 Fixed Security issue: an attacker specifying a large "p2c" value can cause JSONWebEncryption.Decrypt and JSONWebEncryption.DecryptMulti to...
**PROBLEM SUMMARY** When specifying allowed_domains parameter on the role, the role should only issue certificates within the provided allowed domains. This may be one of many constraints not being enforced....
**PROBLEM SUMMARY** When using the backend plugin with a Microsoft ADCS Certificate Authority the shortest validity that can be received by the CA is 24 h **STEPS TO REPRODUCE** Install...
**BUSINESS PROBLEM** As of Vault version 1.13.x, the default pki now supports some health check endpoints. https://developer.hashicorp.com/vault/docs/commands/pki/health-check This would provide a framework to enhance the backend plugin to support different...
Hi Team, I have a customer that is running into some error messages while they are using the Vault-PKI-Backend-Venafi. They would like to know the reason for these errors so...
**BUSINESS PROBLEM** When getting a certificate from Venafi Secrets Engine you get the certificate_chain, but in our case we need the ca_chain. I noticed that ca_chain is available on POST...
feat: added .github/dependabot.yml to monitor go deps