certificates/cas
Mariano Cano 6d644880bd Allow to kms signers to define the SignatureAlgorithm
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.

On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
2021-09-08 17:48:50 -07:00
..
apiv1 Allow to kms signers to define the SignatureAlgorithm 2021-09-08 17:48:50 -07:00
cloudcas Fix typos in comments. 2021-06-23 09:35:14 +02:00
softcas Allow to kms signers to define the SignatureAlgorithm 2021-09-08 17:48:50 -07:00
stepcas Add an option to avoid password prompts on step cas 2021-08-04 16:16:35 -07:00
cas.go Enable default cas implementation. 2020-11-03 12:45:31 -08:00
cas_test.go leverage intermediate_ca.crt for appending certs. 2020-12-23 22:41:10 -06:00