You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
42 lines
1013 B
Go
42 lines
1013 B
Go
package kms
|
|
|
|
import (
|
|
"context"
|
|
"strings"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/smallstep/certificates/kms/apiv1"
|
|
|
|
// Enabled kms interfaces.
|
|
_ "github.com/smallstep/certificates/kms/cloudkms"
|
|
_ "github.com/smallstep/certificates/kms/softkms"
|
|
|
|
// Experimental kms interfaces.
|
|
_ "github.com/smallstep/certificates/kms/yubikey"
|
|
)
|
|
|
|
// KeyManager is the interface implemented by all the KMS.
|
|
type KeyManager = apiv1.KeyManager
|
|
|
|
// CertificateManager is the interface implemented by the KMS that can load and
|
|
// store x509.Certificates.
|
|
type CertificateManager = apiv1.CertificateManager
|
|
|
|
// New initializes a new KMS from the given type.
|
|
func New(ctx context.Context, opts apiv1.Options) (KeyManager, error) {
|
|
if err := opts.Validate(); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
t := apiv1.Type(strings.ToLower(opts.Type))
|
|
if t == apiv1.DefaultKMS {
|
|
t = apiv1.SoftKMS
|
|
}
|
|
|
|
fn, ok := apiv1.LoadKeyManagerNewFunc(t)
|
|
if !ok {
|
|
return nil, errors.Errorf("unsupported kms type '%s'", t)
|
|
}
|
|
return fn(ctx, opts)
|
|
}
|