open-vault/sdk/helper
Alexander Scheel 04bb7eef15
Update transit public keys for Ed25519 support (#20727)
* Refine documentation for public_key

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Support additional key types in importing version

This originally left off the custom support for Ed25519 and RSA-PSS
formatted keys that we've added manually.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add support for Ed25519 keys

Here, we prevent importing public-key only keys with derived Ed25519
keys. Notably, we still allow import of derived Ed25519 keys via private
key method, though this is a touch weird: this private key must have
been packaged in an Ed25519 format (and parseable through Go as such),
even though it is (strictly) an HKDF key and isn't ever used for Ed25519.

Outside of this, importing non-derived Ed25519 keys works as expected.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add public-key only export method to Transit

This allows the existing endpoints to retain private-key only, including
empty strings for versions which lack private keys. On the public-key
endpoint, all versions will have key material returned.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Update tests for exporting via public-key interface

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add public-key export option to docs

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-05-24 11:26:35 -04:00
..
authmetadata adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
base62 adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
certutil pki: add subject key identifier to read key response (#20642) 2023-05-18 16:49:22 +00:00
cidrutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
compressutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
consts VAULT-15547 First pass at agent/proxy decoupling (#20548) 2023-05-17 09:38:34 -04:00
cryptoutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
custommetadata adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
dbtxn adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
docker Add dns resolver to PKI Binary Cluster (#20485) 2023-05-03 17:32:39 +00:00
errutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
hclutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
identitytpl adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
jsonutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
kdf adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
keysutil Update transit public keys for Ed25519 support (#20727) 2023-05-24 11:26:35 -04:00
ldaputil Correct Default for MaximumPageSize (#20453) 2023-05-17 20:56:53 +00:00
license adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
locksutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
logging adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
mlock adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
nonce Add nonce service to sdk/helpers, use in PKI (#20688) 2023-05-23 19:44:05 +00:00
ocsp Move OCSP/PKI interop test to PKI engine (#20273) 2023-04-20 14:57:20 +00:00
parseutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
password adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pathmanager adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pluginutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
pointerutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
policyutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
roottoken adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
salt adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
strutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
template adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
testcluster adding support for four cluster docker based test scenario (#20492) 2023-05-03 10:49:45 -07:00
testhelpers/schema Fix response structure validation tests for non-2xx responses (#19726) 2023-03-23 16:33:44 -04:00
tlsutil adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
tokenutil UI: remove references to comma separation for string array edit types (#20163) 2023-04-19 16:16:30 +00:00
useragent adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
wrapping adding copyright header (#19555) 2023-03-15 09:00:52 -07:00
xor adding copyright header (#19555) 2023-03-15 09:00:52 -07:00