smallstep-certificates

Commit Graph

Author	SHA1	Message	Date
max furman	f88f58440f	add //nolint for new 1.16 deprecation warnings - dsa - pem.DecryptPEMBlock	3 years ago
Mariano Cano	ccc403cf89	Fix comments, and return an error instead of fatal.	4 years ago
Anton Lundin	3e6137110b	Add support for using ssh-agent as a KMS This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se>	4 years ago

Author

SHA1

Message

Date

max furman

f88f58440f

add //nolint for new 1.16 deprecation warnings

- dsa
- pem.DecryptPEMBlock

Mariano Cano

ccc403cf89

Fix comments, and return an error instead of fatal.

Anton Lundin

3e6137110b

Add support for using ssh-agent as a KMS

This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys
for issuing ssh certificates signed by a key managed by a ssh-agent. It
uses the golang.org/x/crypto package to get a native Go implementation
to talk to a ssh-agent.

This was primarly written to be able to use gpg-agent to provide the
keys stored in a YubiKeys openpgp interface, but can be used for other
setups like proxying a ssh-agent over network.

That way the signing key for ssh certificates can be kept in a
"sign-only" hsm.

This code was written for my employer Intinor AB, but for simplicity
sake gifted to me to contribute upstream.

Signed-off-by: Anton Lundin <glance@acc.umu.se>

3 Commits (9eb757797ec4e514a80199d666dd66e9e1f29ff2)