smallstep-certificates

mariano/validity

master

root-not-found-error-message

relative-paths-config

fix-1637

dependabot/go_modules/github.com/slackhq/nebula-1.9.3

dependabot/go_modules/github.com/google/go-tpm-0.9.1

wire-acme-extensions

mariano/init-provisioners

herman/wire-dpop-struct

herman/fix-nebula-curve-param

herman/wrapped-listener

herman/configure-server-http-timeout

josh/fips

herman/acme-macos-properties

josh/webhook-error-response-content

user-regex

max/nebula-sign-curve

carl/bootstrap-error-clarity

max/capabilities

herman/acme-cname-txt

max/test

herman/acme-da-roots

backports

but

collections

update-step-env-vars

panos/api/flow

errors-internal

docker-dns-names

docker-init

carl/sysd-update

carl/readmes

carl/ssh-host-matchbug

nosql-0.3.2

dcow/challenge-retry

ssh

printAud

getHosts

ssh-config

certificate-transparency

seb/ct-local

seb/markdown-issues

seb/anchors

v0.25.3-rc7

v0.25.3-rc6

v0.25.3-rc4

v0.25.3-rc.1

v0.22.2-rc14

v0.22.2-rc13

v0.0.1-rc.1

v0.0.1-rc.2

v0.0.1-rc.3

v0.10.0

v0.11.0

v0.11.0-rc.1

v0.11.0-rc.2

v0.11.0-rc.3

v0.11.0-rc.4

v0.12.0

v0.13.0

v0.13.1

v0.13.2

v0.13.3

v0.14.0

v0.14.0-rc.1

v0.14.0-rc.10.badger2

v0.14.0-rc.14

v0.14.0-rc.15

v0.14.0-rc.16

v0.14.0-rc.2

v0.14.0-rc.3

v0.14.0-rc.4.badger2

v0.14.0-rc.5

v0.14.0-rc.6

v0.14.0-rc.7

v0.14.0-rc.8

v0.14.0-rc.9

v0.14.0.rc.11.badger2

v0.14.0.rc.12.badger2

v0.14.0.rc.13.badger2

v0.14.1

v0.14.2

v0.14.3

v0.14.3-rc.1.badger2

v0.14.3-rc.2.32bitbadger2

v0.14.4

v0.14.5

v0.14.5-rc.1.100MB.badgerV2

v0.14.5-rc.2.100MB.badgerV2

v0.14.5-rc.3.cullACMEOrders

v0.14.5-rc.4

v0.14.6

v0.14.7-rc.1.docker-buildx

v0.14.7-rc.2.deb-name-test

v0.15.0

v0.15.0-rc.1

v0.15.1

v0.15.1-rc.1

v0.15.10

v0.15.11

v0.15.12

v0.15.12-rc1

v0.15.12-rc2

v0.15.12-rc3

v0.15.12-rc4

v0.15.12-rc5

v0.15.13

v0.15.14

v0.15.15

v0.15.16

v0.15.16-rc1.test-arm6

v0.15.16-rc2.test-arm6

v0.15.16-rc3.test-arm6

v0.15.16-rc4

v0.15.16-rc5

v0.15.16-rc6

v0.15.16-rc7

v0.15.2

v0.15.2-rc.1

v0.15.3

v0.15.4

v0.15.5

v0.15.5-rc.1

v0.15.6

v0.15.7

v0.15.7-rc.1

v0.15.8

v0.15.9

v0.15.9-rc1

v0.15.9-rc10

v0.15.9-rc11

v0.15.9-rc12

v0.15.9-rc13

v0.15.9-rc14

v0.15.9-rc15

v0.15.9-rc16

v0.15.9-rc17

v0.15.9-rc18

v0.15.9-rc19

v0.15.9-rc2

v0.15.9-rc3

v0.15.9-rc4

v0.15.9-rc5

v0.15.9-rc6

v0.15.9-rc7

v0.15.9-rc8

v0.15.9-rc9

v0.16.0

v0.16.0-rc.1

v0.16.0-rc.2

v0.16.1

v0.16.2

v0.16.3

v0.16.4

v0.17.0

v0.17.0-rc1

v0.17.1

v0.17.2

v0.17.2-rc1

v0.17.3

v0.17.3-rc1

v0.17.3-rc2

v0.17.3-rc3

v0.17.3-rc4

v0.17.3-rc5

v0.17.3-rc6

v0.17.3-rc7

v0.17.3-rc8

v0.17.3-rc9

v0.17.4

v0.17.4-rc1

v0.17.5

v0.17.5-rc1

v0.17.6

v0.17.6-rc1

v0.17.6-rc2

v0.17.7-rc1

v0.18.0

v0.18.1

v0.18.1-rc1

v0.18.1-rc2

v0.18.1-rc3

v0.18.2

v0.18.3-rc1

v0.18.3-rc2

v0.18.3-rc3

v0.18.3-rc4

v0.19.0

v0.20.0

v0.21.0

v0.22.0

v0.22.1

v0.22.2-rc10

v0.22.2-rc11

v0.22.2-rc12

v0.22.2-rc15

v0.22.2-rc16

v0.22.2-rc17

v0.22.2-rc18

v0.22.2-rc2

v0.22.2-rc3

v0.22.2-rc4

v0.22.2-rc5

v0.22.2-rc6

v0.22.2-rc7

v0.22.2-rc8

v0.22.2-rc9

v0.23.0

v0.23.0-rc.1

v0.23.0-rc.2

v0.23.0-rc.3

v0.23.1

v0.23.1-rc.1

v0.23.2

v0.24.0

v0.24.0-rc.2

v0.24.0-rc1

v0.24.1

v0.24.2

v0.24.3-rc.1

v0.24.3-rc.2

v0.24.3-rc.3

v0.24.3-rc.4

v0.24.3-rc.5

v0.24.3-rc1

v0.25.0

v0.25.1

v0.25.2

v0.25.3-rc2

v0.25.3-rc3

v0.25.3-rc5

v0.26.0

v0.26.0-rc1

v0.26.0-rc2

v0.26.1

v0.26.2

v0.8.1

v0.8.1-rc.1

v0.8.1-rc.2

v0.8.2

v0.8.2-rc.1

v0.8.3

v0.8.4

v0.8.4-rc.1

v0.8.4-rc.2

v0.8.5

v0.8.5-rc.1

v0.8.5-rc.2

v0.8.5-rc.3

v0.8.5-rc.4

v0.8.5-rc.5

v0.9.0

v0.9.0-rc.1

v0.9.1

v0.9.1-rc.1

v0.9.1-rc.2

v0.9.2

v0.9.2-rc.1

Commit Graph

Author	SHA1	Message	Date
Anton Lundin	3e6137110b	Add support for using ssh-agent as a KMS This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se>	4 years ago

Author

SHA1

Message

Date

Anton Lundin

3e6137110b

Add support for using ssh-agent as a KMS

This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys
for issuing ssh certificates signed by a key managed by a ssh-agent. It
uses the golang.org/x/crypto package to get a native Go implementation
to talk to a ssh-agent.

This was primarly written to be able to use gpg-agent to provide the
keys stored in a YubiKeys openpgp interface, but can be used for other
setups like proxying a ssh-agent over network.

That way the signing key for ssh certificates can be kept in a
"sign-only" hsm.

This code was written for my employer Intinor AB, but for simplicity
sake gifted to me to contribute upstream.

Signed-off-by: Anton Lundin <glance@acc.umu.se>

1 Commits (b91affdd34ae30e6c6e3ef61ea2fa8ac30944aed)