Commit Graph

1687 Commits (f71e27e787fff9feb9b62b8aec04c5cacaae7bca)
 

Author SHA1 Message Date
Mariano Cano b487edbd13 Clarify comment. 3 years ago
Mariano Cano ebaeae9008 Avoid closing pkcs#11 context twice. 3 years ago
Mariano Cano f289d1ee1f Update to crypto11 v1.2.4
This version now includes my changes to delete a certificate.
3 years ago
Carl Tashian c1a2697806
Merge pull request #458 from smallstep/systemd
Add systemd files
3 years ago
Mariano Cano f425a81d36 Enforce the use of id and label when generating objects. 3 years ago
Mariano Cano dd6a43ad13 Add fake implementation of pkcs11 key manager without cgo.
This allows other binaries to import pkcs11 directly even if they
are compiled without cgo.
3 years ago
Mariano Cano 4fbf7569fa Merge branch 'master' into pkcs11 3 years ago
Mariano Cano 1d47a7284d Upgrade nosql with a version of badger compatible with 32bits 3 years ago
Mariano Cano fbd2208044 Close key manager for safe reloads when a cgo module is used. 3 years ago
Mariano Cano 97c8cd10cd Test with CGO enabled 3 years ago
Mariano Cano 1d2146166b Close key manager. 3 years ago
Mariano Cano 3fdab93ab8 Add missing file. 3 years ago
Mariano Cano a8260a3289 Add missing test. 3 years ago
Mariano Cano 41eff69fb3 Fix linting errors. 3 years ago
Mariano Cano 128d07f148 Use new GetEncoded method. 3 years ago
Mariano Cano b28db61d5d Add missing close causing panic with softhsm2. 3 years ago
Mariano Cano a74fc7a0b2 Remove unnecessary methods and add missing tests. 3 years ago
Carl Tashian aaabdca61a Typofix 3 years ago
Carl Tashian 52a0edd29d Add readme 3 years ago
Carl Tashian 05daf22a1e Add SystemCallArchitectures=native 3 years ago
Carl Tashian 73fc350b84 Add note about PKCS#11 3 years ago
Mariano Cano 51ac28656e Fix protection level for host keys in cloudkms script.
Fixes #460
3 years ago
Mariano Cano 7f9d7eadc9 Attempt to delete key and certificate with the same name.
Nitrokey will override the label of the key with the certificate one.
If they are stored with the same id.
3 years ago
Mariano Cano 162c535705 Add option to not store certificates in the pkcs11 module. 3 years ago
Mariano Cano 50e9018a44 Fix missing return. 3 years ago
Mariano Cano 84a3c8c984 Rename nitrokey initialization to opensc. 3 years ago
Mariano Cano b7afc92758 Complete tests. 3 years ago
Mariano Cano 3a479cb0e8 Add support for nitrokey. 3 years ago
Mariano Cano e78d45a060 Add benchmarks for signing operations. 3 years ago
Mariano Cano 673675fa89 Convert pkcs11 tests to use tags. 3 years ago
Mariano Cano 6c113542c8 Fix ecdsa signature verification test. 3 years ago
Carl Tashian 9fd0964e1c Add SystemCallFilter=@system-service 3 years ago
Carl Tashian 2af73881d7 Add ProtectHome=true 3 years ago
Mariano Cano 35bf9b787e Implement ecdsa.VerifyASN1 to be compatible with go < 1.15 3 years ago
Mariano Cano d9da150a5f Fix test. 3 years ago
Mariano Cano 294f84b8d4 Add initial set of unit tests for pkcs11 kms. 3 years ago
Carl Tashian 82f82d438c Add systemd files 3 years ago
Mariano Cano 6c0cf99b24 Upgrade nosql with a 32-bit version of badger. 3 years ago
Mariano Cano a6c784d5dd Add missing pkcs11 package. 3 years ago
Mariano Cano 8dca652bc7 Add support for PKCS #11 KMS.
The implementation works with YubiHSM2. Unit tests are still pending.

Fixes #301
3 years ago
Mariano Cano c61222de1d Upgrade nosql version.
nosql has newer version of badgers v1 and v2.
3 years ago
Max fc93d60c5d
Merge pull request #453 from smallstep/max/csr-san-empty
Allow empty SAN in CSR for validation ...
3 years ago
max furman 16665c97f0 Allow empty SAN in CSR for validation ...
- The default template will always use the SANs from the token.
- If there are any SANs they must be validated against the token.
3 years ago
Mariano Cano 00c6f08612
Merge pull request #440 from mkkeffeler/smallstep-by-provisioner-appendedcert
Begins to fix issue 87
4 years ago
Miclain Keffeler ffbfcfb1f2 format. 4 years ago
Miclain K Keffeler 7a1eb43bb1
Update options.go 4 years ago
Miclain K Keffeler f3396bf964
Update softcas.go 4 years ago
Mariano Cano 71a8e87eec Update go.sum with new version of go-piv. 4 years ago
Mariano Cano 6598ea9d73
Merge pull request #441 from gaffneyd4/gaffneyd4/x32
Bump go-piv to v1.7.0 for x32 overflow fix
4 years ago
Derek Gaffney 8416bd633d Bump go-piv to v1.7.0 for x32 overflow fix 4 years ago