smallstep-certificates/kms/pkcs11
Herman Slatman 8c5b12e21d
Add non-TLS server and improve crypto.Decrypter interface
A server without TLS was added to serve the SCEP endpoints. According
to the RFC, SCEP has to be served via HTTP. The `sscep` client, for
example, will stop any URL that does not start with `http://` from
being used, so serving SCEP seems to be the right way to do it.

This commit adds a second server for which no TLS configuration is
configured. A distinct field in the configuration, `insecureAddress`
was added to specify the address for the insecure server.

The SCEP endpoints will also still be served via HTTPS. Some clients
may be able to work with that.

This commit also improves how the crypto.Decrypter interface is
handled for the different types of KMSes supported by step. The
apiv1.Decrypter interface was added. Currently only SoftKMS
implements this interface, providing a crypto.Decrypter required
for SCEP operations.
2021-03-12 14:18:36 +01:00
..
benchmark_test.go Add benchmarks for signing operations. 2021-01-28 19:46:48 -08:00
opensc_test.go Rename nitrokey initialization to opensc. 2021-01-28 19:51:17 -08:00
other_test.go Permit linting and testing without CGO support. 2021-02-12 13:18:30 -08:00
pkcs11_no_cgo.go Add fake implementation of pkcs11 key manager without cgo. 2021-02-04 12:32:30 -08:00
pkcs11_test.go Avoid closing pkcs#11 context twice. 2021-02-08 19:16:57 -08:00
pkcs11.go Add non-TLS server and improve crypto.Decrypter interface 2021-03-12 14:18:36 +01:00
setup_test.go Complete tests. 2021-01-28 19:48:08 -08:00
softhsm2_test.go Permit linting and testing without CGO support. 2021-02-12 13:18:30 -08:00
yubihsm2_test.go Permit linting and testing without CGO support. 2021-02-12 13:18:30 -08:00