You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
smallstep-certificates/cas/apiv1
Mariano Cano 6d644880bd Allow to kms signers to define the SignatureAlgorithm
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.

On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
3 years ago
..
extension.go Fix typos. 4 years ago
extension_test.go Add missing tests 4 years ago
options.go Add an option to avoid password prompts on step cas 3 years ago
options_test.go leverage intermediate_ca.crt for appending certs. 4 years ago
registry.go Improve initialization of SCEP authority 4 years ago
registry_test.go Do not use go 1.15 methods. 4 years ago
requests.go Add support for revocation using an extra provisioner in the RA. 4 years ago
services.go Allow to kms signers to define the SignatureAlgorithm 3 years ago
services_test.go Return a non-implemented error in stepcas.RenewCertificate. 4 years ago