Skip to content
#

certificates

Star

Here are 550 public repositories matching this topic...

Language: All
Filter by language
All 550 Python 83 Shell 81 Go 79 C# 41 Java 29 JavaScript 27 PowerShell 18 HTML 14 PHP 10 Ruby 10
Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated
certificates

smallstep / certificates

Star
Open

Add option to require HSM pin on step-ca startup.

2
kism
kism commented Jul 31, 2021

What would you like to be added

I'd like to have the option to not have the HSM pin stored in a configuration file, but instead be required to be entered manually by an operator each time the CA is started.

Why this is needed

Having HSM pins sitting on the file system weakens the security in cases of hardware being stolen.

In theory if the PIN is not known then stealing a server a

Read more
enhancement good first issue quickfix
Find more good first issues →

Improve this page

Add a description, image, and links to the certificates topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the certificates topic, visit your repo's landing page and select "manage topics."

Learn more