Skip to content

Support ECDSAP256SHA256 with real KMIP servers. #986

Description

@ximon18

See NLnetLabs/domain-kmip#5. We don't have this issue with Cascade-HSM-Bridge as Cascade and Cascade-HSM-Bridge each know what the other expects, but with a real KMIP HSM that we connect to directly instead of connecting to the bridge (which if for PKCS#11 HSMs) it isn't currently possible (at least with Securosys Cloud HSM, and maybe/probably? with other HSMs too).

It's unclear to me if https://cascade.docs.nlnetlabs.nl/en/latest/hsms.html is incorrect in stating support for Fortanix DSM via KMIP. I did test with Fortanix DSM, but am unsure if it definitely worked with ECDSAP256SHA256 or only with RSA, and the free trial I used has since expired.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    HSMHardware Security Module related.bugSomething isn't workingtestingAutomatic verification of Cascade's correctness and reliability.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions