Commit Graph

8 Commits (80cbcb652b26435ce5eabbcb39215c80c09f3923)

Author SHA1 Message Date
max furman 9cfdd2f3df [action] change step-certificates to step-ca where possible 3 years ago
Anton Lundin 3e6137110b Add support for using ssh-agent as a KMS
This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys
for issuing ssh certificates signed by a key managed by a ssh-agent. It
uses the golang.org/x/crypto package to get a native Go implementation
to talk to a ssh-agent.

This was primarly written to be able to use gpg-agent to provide the
keys stored in a YubiKeys openpgp interface, but can be used for other
setups like proxying a ssh-agent over network.

That way the signing key for ssh certificates can be kept in a
"sign-only" hsm.

This code was written for my employer Intinor AB, but for simplicity
sake gifted to me to contribute upstream.

Signed-off-by: Anton Lundin <glance@acc.umu.se>
4 years ago
Mariano Cano deac15327f Add docs for AWS KMS. 4 years ago
Mariano Cano 3e40cb89a7 Add some docs for YubiKey configuration. 4 years ago
Mariano Cano 32c2558b58 Replace project in output. 4 years ago
Mariano Cano 334d191563 Fix docs. 4 years ago
Mariano Cano 8604c31818 Fix in documentation. 4 years ago
Mariano Cano 55e661bd26 Add initial docs for cloud kms. 4 years ago