Commit graph

8 commits

Author SHA1 Message Date
max furman
9cfdd2f3df [action] change step-certificates to step-ca where possible 2021-03-02 11:58:42 -08:00
Anton Lundin
3e6137110b Add support for using ssh-agent as a KMS
This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys
for issuing ssh certificates signed by a key managed by a ssh-agent. It
uses the golang.org/x/crypto package to get a native Go implementation
to talk to a ssh-agent.

This was primarly written to be able to use gpg-agent to provide the
keys stored in a YubiKeys openpgp interface, but can be used for other
setups like proxying a ssh-agent over network.

That way the signing key for ssh certificates can be kept in a
"sign-only" hsm.

This code was written for my employer Intinor AB, but for simplicity
sake gifted to me to contribute upstream.

Signed-off-by: Anton Lundin <glance@acc.umu.se>
2020-11-04 09:06:23 +01:00
Mariano Cano
deac15327f Add docs for AWS KMS. 2020-05-20 12:30:32 -07:00
Mariano Cano
3e40cb89a7 Add some docs for YubiKey configuration. 2020-05-15 12:24:25 -07:00
Mariano Cano
32c2558b58 Replace project in output. 2020-02-21 10:55:42 -08:00
Mariano Cano
334d191563 Fix docs. 2020-02-21 10:53:22 -08:00
Mariano Cano
8604c31818 Fix in documentation. 2020-02-21 10:51:43 -08:00
Mariano Cano
55e661bd26 Add initial docs for cloud kms. 2020-02-18 19:07:42 -08:00