Commit Graph

6 Commits (7fac8c96c3148f1ace9e0377883a6f050fa67c22)

Author SHA1 Message Date
Herman Slatman e7a988b2cd
Pin golangci-lint to v1.43.0 and fix issues 3 years ago
Mariano Cano 6d644880bd Allow to kms signers to define the SignatureAlgorithm
CloudKMS keys signs data using an specific signature algorithm, in RSA keys,
this can be PKCS#1 RSA or RSA-PSS, if the later is used, x509.CreateCertificate
will fail unless the template SignatureCertificate is properly set.

On contrast, AWSKMS RSA keys, are just RSA keys, and can sign with PKCS#1 or
RSA-PSS schemes, so right now the way to enforce one or the other is to used
templates.
3 years ago
Mariano Cano 163eb7029c Refactor cloudkms signer to return an error on the constructor. 3 years ago
Mariano Cano d30a95236d Use always go.step.sm/crypto 4 years ago
Mariano Cano fa8116497c Make Signer public and add contructor NewCloudKMS. 4 years ago
Mariano Cano dff498f17f Add tests for cloudkms. 4 years ago