nebula

0 Fork 0

mirror of https://github.com/slackhq/nebula.git synced 2026-11-15 18:36:52 +01:00

Author	SHA1	Message	Date
JackDoan	656164b259	cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM	2026-10-14 14:40:52 -05:00
JackDoan	4d37a3140f	nebula-cert: Make version 3 CAs, keys and certificates, and pq-extend v2 certificates in place	2026-10-14 11:06:40 -05:00
Nate Brown	3c121e7ab1	Allow for `-` to stand in for stdin/out (#1714 )	2026-05-15 15:36:08 -05:00
dependabot[bot]andWade Simmons	d2adebf26d	Bump golangci/golangci-lint-action from 6 to 7 (#1361 ) gofmt / Run gofmt (push) Successful in 10s Details smoke-extra / Run extra smoke tests (push) Failing after 19s Details smoke / Run multi node smoke test (push) Failing after 1m26s Details Build and test / Build all and test on ubuntu-linux (push) Failing after 19m6s Details Build and test / Build and test on linux with boringcrypto (push) Failing after 2m32s Details Build and test / Build and test on linux with pkcs11 (push) Failing after 2m36s Details Build and test / Build and test on macos-latest (push) Has been cancelled Details Build and test / Build and test on windows-latest (push) Has been cancelled Details * Bump golangci/golangci-lint-action from 6 to 7 Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6 to 7. - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](https://github.com/golangci/golangci-lint-action/compare/v6...v7) --- updated-dependencies: - dependency-name: golangci/golangci-lint-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * use latest golangci-lint * pin to v2.0 * golangci-lint migrate * make the tests happy --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Wade Simmons <wsimmons@slack-corp.com>	2025-04-01 13:24:19 -04:00
Caleb Jasik	088af8edb2	Enable running testifylint in CI (#1350 ) gofmt / Run gofmt (push) Successful in 10s Details smoke-extra / Run extra smoke tests (push) Failing after 18s Details smoke / Run multi node smoke test (push) Failing after 1m28s Details Build and test / Build all and test on ubuntu-linux (push) Failing after 19m44s Details Build and test / Build and test on linux with boringcrypto (push) Failing after 3m1s Details Build and test / Build and test on linux with pkcs11 (push) Failing after 3m6s Details Build and test / Build and test on macos-latest (push) Has been cancelled Details Build and test / Build and test on windows-latest (push) Has been cancelled Details	2025-03-10 17:38:14 -05:00
Caleb Jasik	612637f529	Fix `testifylint` lint errors (#1321 ) gofmt / Run gofmt (push) Successful in 11s Details smoke-extra / Run extra smoke tests (push) Failing after 19s Details smoke / Run multi node smoke test (push) Failing after 1m28s Details Build and test / Build all and test on ubuntu-linux (push) Failing after 19m3s Details Build and test / Build and test on linux with boringcrypto (push) Failing after 2m44s Details Build and test / Build and test on linux with pkcs11 (push) Failing after 2m54s Details Build and test / Build and test on macos-latest (push) Has been cancelled Details Build and test / Build and test on windows-latest (push) Has been cancelled Details * Fix bool-compare * Fix empty * Fix encoded-compare * Fix error-is-as * Fix error-nil * Fix expected-actual * Fix len	2025-03-10 10:18:34 -04:00
Nate Brown Jack Doan brad-defined Jack Doan	d97ed57a19	V2 certificate format (#1216 ) Co-authored-by: Nate Brown <nbrown.us@gmail.com> Co-authored-by: Jack Doan <jackdoan@rivian.com> Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com> Co-authored-by: Jack Doan <me@jackdoan.com>	2025-03-06 11:28:26 -06:00
Nate Brown	08ac65362e	Cert interface (#1212 )	2024-10-10 18:00:22 -05:00
Jack Doan Morgan Jones John Maguire	35603d1c39	add PKCS11 support (#1153 ) * add PKCS11 support * add pkcs11 build option to the makefile, add a stub pkclient to avoid forcing CGO onto people * don't print the pkcs11 option on nebula-cert keygen if not compiled in * remove linux-arm64-pkcs11 from the all target to fix CI * correctly serialize ec keys * nebula-cert: support PKCS#11 for sign and ca * fix gofmt lint * clean up some logic with regard to closing sessions * pkclient: handle empty correctly for TPM2 * Update Makefile and Actions --------- Co-authored-by: Morgan Jones <me@numin.it> Co-authored-by: John Maguire <contact@johnmaguire.me>	2024-09-09 17:51:58 -04:00
guangwu	276978377a	chore: remove refs to deprecated io/ioutil (#987 ) Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>	2023-10-31 10:35:13 -04:00
Wade Simmons	e0185c4b01	Support NIST curve P256 (#769 ) * Support NIST curve P256 This change adds support for NIST curve P256. When you use `nebula-cert ca` or `nebula-cert keygen`, you can specify `-curve P256` to enable it. The curve to use is based on the curve defined in your CA certificate. Internally, we use ECDSA P256 to sign certificates, and ECDH P256 to do Noise handshakes. P256 is not supported natively in Noise Protocol, so we define `DHP256` in the `noiseutil` package to implement support for it. You cannot have a mixed network of Curve25519 and P256 certificates, since the Noise protocol will only attempt to parse using the Curve defined in the host's certificate. * verify the curves match in VerifyPrivateKey This would have failed anyways once we tried to actually use the bytes in the private key, but its better to detect the issue up front with a better error message. * add cert.Curve argument to Sign method * fix mismerge * use crypto/ecdh This is the preferred method for doing ECDH functions now, and also has a boringcrypto specific codepath. * remove other ecdh uses of crypto/elliptic use crypto/ecdh instead	2023-05-04 17:50:23 -04:00
Wade Simmons	df43f6466e	gofmt	2019-12-11 23:15:57 -05:00
Slack Security Team	f22b4b584d	Public Release	2019-11-19 17:00:20 +00:00