alexvanin/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity

Fix protection level for host keys in cloudkms script.

Browse source 
Fixes #460
This commit is contained in:
Mariano Cano 2021-01-29 16:11:25 -08:00
parent 7f9d7eadc9
commit 51ac28656e
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
cmd/step-cloudkms-init/main.go
View file

@ -234,7 +234,7 @@ func createSSH(c *cloudkms.CloudKMS, project, location, keyRing string, protecti
resp, err = c.CreateKey(&apiv1.CreateKeyRequest{ resp, err = c.CreateKey(&apiv1.CreateKeyRequest{
Name: parent + "/ssh-host-key", Name: parent + "/ssh-host-key",
SignatureAlgorithm: apiv1.ECDSAWithSHA256, SignatureAlgorithm: apiv1.ECDSAWithSHA256,
ProtectionLevel: apiv1.Software, ProtectionLevel: protectionLevel,
}) })
if err != nil { if err != nil {
return err return err