smallstep-certificates

Author	SHA1	Message	Date
Anton Lundin	3e6137110b	Add support for using ssh-agent as a KMS This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se>	4 years ago
Mariano Cano	f100b2d0e3	Make the YubiKey management key configurable. With this change the default management key is not required as the user is able to set its own. Fixes #323	4 years ago
Mariano Cano	c32abb76cd	Add initial implementation to support AWS KMS.	4 years ago
Mariano Cano	63e36ecd7a	Refactor the initialization of KeyManagers.	4 years ago
Mariano Cano	6868190fff	Add initial support for yubikey.	4 years ago
Mariano Cano	3f8de17a40	Cleanup types and add initial support for the options required for PKCS11.	5 years ago
Mariano Cano	d13754166a	Add support for cloudkms and softkms.	5 years ago