Alan Parra ecf9e5c7d1 Enforce device extensions for SSH access (#19574) ...

Add device-aware authorization for SSH access, including both long-lived and
single-use certificates.

If the device trust mode is set to "required", then the presence of the
corresponding extensions is enforced. (Requires Teleport Enterprise.)

Adds logic related to TLS validation and single-use certificates as well, where
appropriate. TLS device-aware validation is not wired into Teleport yet, but
will be in follow up PRs.

gravitational/teleport.e#514

2022-12-21 22:54:13 +00:00

..

authn

Implement client-side device authentication (#19377)

2022-12-16 14:24:56 +00:00

authz

Enforce device extensions for SSH access (#19574)

2022-12-21 22:54:13 +00:00

config

Enforce device extensions for SSH access (#19574)

2022-12-21 22:54:13 +00:00

enroll

Return user-friendly messages for common enroll errors (#19115)

2022-12-07 20:10:14 +00:00

native

Add tsh device debug commands (#19166)

2022-12-09 10:38:52 -03:00

testenv

Implement client-side device authentication (#19377)

2022-12-16 14:24:56 +00:00

errors_test.go

Return user-friendly messages for common enroll errors (#19115)

2022-12-07 20:10:14 +00:00

errors.go

Return user-friendly messages for common enroll errors (#19115)

2022-12-07 20:10:14 +00:00

friendly_enums.go

Wire the Device Trust client into API/Auth clients (#18366)

2022-11-16 20:38:32 +00:00