8 Commits

Author	SHA1	Message	Date
max furman	9cfdd2f3df	[action] change step-certificates to step-ca where possible	2021-03-02 11:58:42 -08:00
Anton Lundin	3e6137110b	Add support for using ssh-agent as a KMS ... This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se>	2020-11-04 09:06:23 +01:00
Mariano Cano	deac15327f	Add docs for AWS KMS.	2020-05-20 12:30:32 -07:00
Mariano Cano	3e40cb89a7	Add some docs for YubiKey configuration.	2020-05-15 12:24:25 -07:00
Mariano Cano	32c2558b58	Replace project in output.	2020-02-21 10:55:42 -08:00
Mariano Cano	334d191563	Fix docs.	2020-02-21 10:53:22 -08:00
Mariano Cano	8604c31818	Fix in documentation.	2020-02-21 10:51:43 -08:00
Mariano Cano	55e661bd26	Add initial docs for cloud kms.	2020-02-18 19:07:42 -08:00