Commits on Apr 9, 2022

1. Add intermediate CA implementation with KMS-backed signer …

   This CA implementation will use an on-disk certificate chain and a
   remote KMS signer to sign certificates. There is validation on server
   startup that the provided chain matches the provided key.
   
   I've also added a utility to generate the intermediate certificate by
   calling GCP CA Service. This will be used to set up Fulcio.
   
   This also refactors the code to add an intermediate CA struct that
   implements the common methods. This makes it simple to add new
   intermediate CA types, with each only needing to provide a method to
   fetch a signer and certificate chain.
   
   Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>

   

   haydentherapper committed Apr 9, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 057be29
   • Browse repository at this point

   Copy the full SHA

   057be29 View commit details

   Browse the repository at this point in the history