You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
smallstep-certificates/kms/pkcs11
Herman Slatman 2d85d4c1c1 Add non-TLS server and improve crypto.Decrypter interface
A server without TLS was added to serve the SCEP endpoints. According
to the RFC, SCEP has to be served via HTTP. The `sscep` client, for
example, will stop any URL that does not start with `http://` from
being used, so serving SCEP seems to be the right way to do it.

This commit adds a second server for which no TLS configuration is
configured. A distinct field in the configuration, `insecureAddress`
was added to specify the address for the insecure server.

The SCEP endpoints will also still be served via HTTPS. Some clients
may be able to work with that.

This commit also improves how the crypto.Decrypter interface is
handled for the different types of KMSes supported by step. The
apiv1.Decrypter interface was added. Currently only SoftKMS
implements this interface, providing a crypto.Decrypter required
for SCEP operations.
3 years ago
..
benchmark_test.go Add benchmarks for signing operations. 4 years ago
opensc_test.go Rename nitrokey initialization to opensc. 4 years ago
other_test.go Permit linting and testing without CGO support. 4 years ago
pkcs11.go Add non-TLS server and improve crypto.Decrypter interface 3 years ago
pkcs11_no_cgo.go Add fake implementation of pkcs11 key manager without cgo. 4 years ago
pkcs11_test.go Avoid closing pkcs#11 context twice. 4 years ago
setup_test.go Complete tests. 4 years ago
softhsm2_test.go Permit linting and testing without CGO support. 4 years ago
yubihsm2_test.go Permit linting and testing without CGO support. 4 years ago