1744 Commits (335435decfd395879f6f087f1a919ec371d5f1fb)

 

All Branches   

Search

Author	SHA1	Message	Date
Mariano Cano	57075d9518	Phony travis.	3 years ago
Mariano Cano	1ddddb6bc7	Permit linting and testing without CGO support. ... Use CGO for testing and building in travis. Fixes #471	3 years ago
Mariano Cano	ddd6bc16d7	Merge pull request #457 from smallstep/pkcs11 ... Add support for PKCS #11 KMS.	3 years ago
Mariano Cano	e446e22520	Remove extra default.	3 years ago
Mariano Cano	3648c3fab6	Fix error message when --kms is not passed.	3 years ago
Mariano Cano	d03c088ab7	Add test cases for uris with only the schema.	3 years ago
Mariano Cano	f6cbd9dc88	Fix typos.	3 years ago
Mariano Cano	b487edbd13	Clarify comment.	3 years ago
Mariano Cano	ebaeae9008	Avoid closing pkcs#11 context twice.	3 years ago
Mariano Cano	f289d1ee1f	Update to crypto11 v1.2.4 ... This version now includes my changes to delete a certificate.	3 years ago
Carl Tashian	c1a2697806	Merge pull request #458 from smallstep/systemd ... Add systemd files	3 years ago
Mariano Cano	f425a81d36	Enforce the use of id and label when generating objects.	3 years ago
Mariano Cano	dd6a43ad13	Add fake implementation of pkcs11 key manager without cgo. ... This allows other binaries to import pkcs11 directly even if they are compiled without cgo.	3 years ago
Mariano Cano	4fbf7569fa	Merge branch 'master' into pkcs11	3 years ago
Mariano Cano	1d47a7284d	Upgrade nosql with a version of badger compatible with 32bits	3 years ago
Mariano Cano	fbd2208044	Close key manager for safe reloads when a cgo module is used.	3 years ago
Mariano Cano	97c8cd10cd	Test with CGO enabled	3 years ago
Mariano Cano	1d2146166b	Close key manager.	3 years ago
Mariano Cano	3fdab93ab8	Add missing file.	3 years ago
Mariano Cano	a8260a3289	Add missing test.	3 years ago
Mariano Cano	41eff69fb3	Fix linting errors.	3 years ago
Mariano Cano	128d07f148	Use new GetEncoded method.	3 years ago
Mariano Cano	b28db61d5d	Add missing close causing panic with softhsm2.	3 years ago
Mariano Cano	a74fc7a0b2	Remove unnecessary methods and add missing tests.	3 years ago
Carl Tashian	aaabdca61a	Typofix	3 years ago
Carl Tashian	52a0edd29d	Add readme	3 years ago
Carl Tashian	05daf22a1e	Add SystemCallArchitectures=native	3 years ago
Carl Tashian	73fc350b84	Add note about PKCS#11	3 years ago
Mariano Cano	51ac28656e	Fix protection level for host keys in cloudkms script. ... Fixes #460	3 years ago
Mariano Cano	7f9d7eadc9	Attempt to delete key and certificate with the same name. ... Nitrokey will override the label of the key with the certificate one. If they are stored with the same id.	3 years ago
Mariano Cano	162c535705	Add option to not store certificates in the pkcs11 module.	3 years ago
Mariano Cano	50e9018a44	Fix missing return.	3 years ago
Mariano Cano	84a3c8c984	Rename nitrokey initialization to opensc.	3 years ago
Mariano Cano	b7afc92758	Complete tests.	3 years ago
Mariano Cano	3a479cb0e8	Add support for nitrokey.	3 years ago
Mariano Cano	e78d45a060	Add benchmarks for signing operations.	3 years ago
Mariano Cano	673675fa89	Convert pkcs11 tests to use tags.	3 years ago
Mariano Cano	6c113542c8	Fix ecdsa signature verification test.	3 years ago
Carl Tashian	9fd0964e1c	Add SystemCallFilter=@system-service	3 years ago
Carl Tashian	2af73881d7	Add ProtectHome=true	3 years ago
Mariano Cano	35bf9b787e	Implement ecdsa.VerifyASN1 to be compatible with go < 1.15	3 years ago
Mariano Cano	d9da150a5f	Fix test.	3 years ago
Mariano Cano	294f84b8d4	Add initial set of unit tests for pkcs11 kms.	3 years ago
Carl Tashian	82f82d438c	Add systemd files	3 years ago
Mariano Cano	6c0cf99b24	Upgrade nosql with a 32-bit version of badger.	3 years ago
Mariano Cano	a6c784d5dd	Add missing pkcs11 package.	3 years ago
Mariano Cano	8dca652bc7	Add support for PKCS #11 KMS. ... The implementation works with YubiHSM2. Unit tests are still pending. Fixes #301	3 years ago
Mariano Cano	c61222de1d	Upgrade nosql version. ... nosql has newer version of badgers v1 and v2.	3 years ago
Max	fc93d60c5d	Merge pull request #453 from smallstep/max/csr-san-empty ... Allow empty SAN in CSR for validation ...	3 years ago
max furman	16665c97f0	Allow empty SAN in CSR for validation ... ... - The default template will always use the SANs from the token. - If there are any SANs they must be validated against the token.	3 years ago