You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
smallstep-certificates/authority
Anton Lundin 3e6137110b Add support for using ssh-agent as a KMS
This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys
for issuing ssh certificates signed by a key managed by a ssh-agent. It
uses the golang.org/x/crypto package to get a native Go implementation
to talk to a ssh-agent.

This was primarly written to be able to use gpg-agent to provide the
keys stored in a YubiKeys openpgp interface, but can be used for other
setups like proxying a ssh-agent over network.

That way the signing key for ssh certificates can be kept in a
"sign-only" hsm.

This code was written for my employer Intinor AB, but for simplicity
sake gifted to me to contribute upstream.

Signed-off-by: Anton Lundin <glance@acc.umu.se>
4 years ago
..
provisioner Add all AWS certificates used to verify base64 signatures. 4 years ago
testdata Add test case for error executing template. 4 years ago
authority.go Add support for using ssh-agent as a KMS 4 years ago
authority_test.go Remove unnecessary properties. 4 years ago
authorize.go Create a hash of a token if a token id is empty. 4 years ago
authorize_test.go Create a hash of a token if a token id is empty. 4 years ago
config.go Move cas options under authority. 4 years ago
config_test.go Use go.step.sm/crypto/jose 4 years ago
options.go Remove unnecessary properties. 4 years ago
provisioners.go Simplify statuscoder error generators. 4 years ago
provisioners_test.go Remove all references to old apiError. 4 years ago
root.go Simplify statuscoder error generators. 4 years ago
root_test.go Use always go.step.sm/crypto 4 years ago
ssh.go Make clearer what's an unsigned cert. 4 years ago
ssh_test.go Use go.step.sm/crypto/jose 4 years ago
tls.go Fix typo. 4 years ago
tls_options.go Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates. 4 years ago
tls_options_test.go Move TLSOption, TLSVersion, CipherSuites and ASN1DN to certificates. 4 years ago
tls_test.go Remove unnecessary properties. 4 years ago
types.go Move Duration to a new file and move tests to provisioner package. 5 years ago
types_test.go Move Duration to a new file and move tests to provisioner package. 5 years ago
version.go Add missing version.go file. 4 years ago