You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
smallstep-certificates/kms
Mariano Cano 6d644880bd Allow to kms signers to define the SignatureAlgorithm
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.

On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
3 years ago
..
apiv1 Address (most) PR comments 3 years ago
awskms Fix credentials file parameter on awskms 3 years ago
cloudkms Allow to kms signers to define the SignatureAlgorithm 3 years ago
pkcs11 gofmt linting errors 3 years ago
softkms Add tests for CreateDecrypter 3 years ago
sshagentkms Add non-TLS server and improve crypto.Decrypter interface 3 years ago
uri Make kms uri compatible with Go 1.17. 3 years ago
yubikey gofmt linting errors 3 years ago
kms.go Move load of kms to main package. 4 years ago
kms_test.go Fix unit tests. 4 years ago