certificates/kms/sshagentkms/testdata/priv.pem

Add support for using ssh-agent as a KMS This adds a new KMS, SSHAgentKMS, which is a KMS to provide signing keys for issuing ssh certificates signed by a key managed by a ssh-agent. It uses the golang.org/x/crypto package to get a native Go implementation to talk to a ssh-agent. This was primarly written to be able to use gpg-agent to provide the keys stored in a YubiKeys openpgp interface, but can be used for other setups like proxying a ssh-agent over network. That way the signing key for ssh certificates can be kept in a "sign-only" hsm. This code was written for my employer Intinor AB, but for simplicity sake gifted to me to contribute upstream. Signed-off-by: Anton Lundin <glance@acc.umu.se> 2020-11-03 13:26:46 +00:00			`-----BEGIN EC PRIVATE KEY-----`
			`Proc-Type: 4,ENCRYPTED`
			`DEK-Info: AES-256-CBC,1fcec5dfbf3327f61bfe5ab6ae8a0626`

			`V39b/pNHMbP80TXSHLsUY6UOTCzf3KwIxvj1e7S9brNMJJc9b3UiloMBJIYBkl00`
			`NKI8JU4jSlcerR58DqsTHIELiX6a+RJLe3/iR2/5Gru+CmmWJ68jQu872WCgh6Ms`
			`o8TzhyGx74ETmdKn5CdtylsnKMa9heW3tBLFAbNCgKc=`
			`-----END EC PRIVATE KEY-----`