Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add support for ignoring certificates with pkcs11 #3334

Merged
merged 1 commit into from
Nov 6, 2023

Commits on Nov 2, 2023

  1. add support for ignoring certificates with pkcs11

    This commit adds a new environment variable,
    COSIGN_PKCS11_IGNORE_CERTIFICATE, which will skip loading certificates
    into a PKCS11 key when set to "1". This is desirable when you want to
    sign with a private key that has a certificate associated with it, but
    do not want that certificate to be included with the signature for
    verification. Certificates are already optional for keys from non-PKCS11
    sources via the --certificate command line flag.
    
    Signed-off-by: dylrich <dylan.richardson@mongodb.com>
    dylrich committed Nov 2, 2023
    Configuration menu
    Copy the full SHA
    ac202c9 View commit details
    Browse the repository at this point in the history