nebula/cert
Jack Doan 35603d1c39
add PKCS11 support (#1153)
* add PKCS11 support

* add pkcs11 build option to the makefile, add a stub pkclient to avoid forcing CGO onto people

* don't print the pkcs11 option on nebula-cert keygen if not compiled in

* remove linux-arm64-pkcs11 from the all target to fix CI

* correctly serialize ec keys

* nebula-cert: support PKCS#11 for sign and ca

* fix gofmt lint

* clean up some logic with regard to closing sessions

* pkclient: handle empty correctly for TPM2

* Update Makefile and Actions

---------

Co-authored-by: Morgan Jones <me@numin.it>
Co-authored-by: John Maguire <contact@johnmaguire.me>
2024-09-09 17:51:58 -04:00
..
ca.go Cache cert verification methods (#871) 2023-05-17 10:14:26 -04:00
cert.go add PKCS11 support (#1153) 2024-09-09 17:51:58 -04:00
cert.pb.go Have lighthouses ack updates to reduce test packet traffic (#851) 2023-05-05 14:44:03 -05:00
cert.proto Support NIST curve P256 (#769) 2023-05-04 17:50:23 -04:00
cert_test.go Fix test on master (#860) 2023-05-04 20:11:33 -05:00
crypto.go cert: fix dropped errors (#961) 2023-09-07 13:54:01 -04:00
crypto_test.go Add ability to encrypt CA private key at rest (#386) 2023-04-03 13:59:38 -04:00
errors.go Always disconnect block listed hosts (#858) 2023-05-04 16:09:42 -05:00
Makefile IPv6 support for outside (udp) (#369) 2021-03-18 20:37:24 -05:00
README.md Public Release 2019-11-19 17:00:20 +00:00

cert

This is a library for interacting with nebula style certificates and authorities.

A protobuf definition of the certificate format is also included

Compiling the protobuf definition

Make sure you have protoc installed.

To compile for go with the same version of protobuf specified in go.mod:

make