Add support for PKCS#11 tokens to openssh_cert. (#95)

This adds the parameter pkcs11_provider, which can be set to the name of
or path to a PKCS#11 library (e.g. libpkcs11.so). ssh-keygen will then
use this library to have the token make any required signatures.
If this is used, signing_key needs to be set to a file containing the
public key that matches the private key on the token.
This commit is contained in:
s-hamann
2020-08-04 15:59:24 +00:00
committed by GitHub
parent 1847b3ead7
commit a72f9f53a4
2 changed files with 25 additions and 0 deletions

View File

@@ -0,0 +1,2 @@
minor_changes:
- "openssh_cert - add support for PKCS#11 tokens (https://github.com/ansible-collections/community.crypto/pull/95)."