6 commits

Author	SHA1	Message	Date
Mariano Cano	a8260a3289	Add missing test.	2021-02-01 14:25:49 -08:00
Mariano Cano	d9da150a5f	Fix test.	2021-01-27 20:23:45 -08:00
Mariano Cano	8dca652bc7	Add support for PKCS #11 KMS. ... The implementation works with YubiHSM2. Unit tests are still pending. Fixes #301	2021-01-26 20:03:53 -08:00
Anton Lundin	3e6137110b	Add support for using ssh-agent as a KMS ... This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se>	2020-11-04 09:06:23 +01:00
Mariano Cano	82fb96588e	Fix unit tests.	2020-05-19 17:45:15 -07:00
Mariano Cano	264179cda3	Add tests for kms and kms/apiv1 packages.	2020-01-15 17:56:50 -08:00