smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
Herman Slatman	7ad90d10b3	Refactor initialization of SCEP authority	3 years ago
Mariano Cano	ccc403cf89	Fix comments, and return an error instead of fatal.	4 years ago
Anton Lundin	3e6137110b	Add support for using ssh-agent as a KMS This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se>	4 years ago

Author

SHA1

Message

Date

Herman Slatman

7ad90d10b3

Refactor initialization of SCEP authority

Mariano Cano

ccc403cf89

Fix comments, and return an error instead of fatal.

Anton Lundin

3e6137110b

Add support for using ssh-agent as a KMS

This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys
for issuing ssh certificates signed by a key managed by a ssh-agent. It
uses the golang.org/x/crypto package to get a native Go implementation
to talk to a ssh-agent.

This was primarly written to be able to use gpg-agent to provide the
keys stored in a YubiKeys openpgp interface, but can be used for other
setups like proxying a ssh-agent over network.

That way the signing key for ssh certificates can be kept in a
"sign-only" hsm.

This code was written for my employer Intinor AB, but for simplicity
sake gifted to me to contribute upstream.

Signed-off-by: Anton Lundin <glance@acc.umu.se>

3 Commits (7948f65ac0bee1e8705c3374eab085c0870af00f)