5 Commits

Include renames

Author	SHA1	Message	Date
JackDoan	656164b259	cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM	2026-10-14 14:40:52 -05:00
JackDoan	1a8fb8d67e	cert: Add version 3 certificates, a v2 certificate extended with ML-KEM-1024 or ML-DSA-87 keys and an ML-DSA-87 CA signature	2026-10-14 10:47:41 -05:00
Nate Brown	08ac65362e	Cert interface (#1212)	2024-10-10 18:00:22 -05:00
Lars Lehtonen	dbdb48f182	cert: fix dropped errors (#961)	2023-09-07 13:54:01 -04:00
John Maguire	a56a97e5c3	Add ability to encrypt CA private key at rest (#386) ... Fixes #8. `nebula-cert ca` now supports encrypting the CA's private key with a passphrase. Pass `-encrypt` in order to be prompted for a passphrase. Encryption is performed using AES-256-GCM and Argon2id for KDF. KDF parameters default to RFC recommendations, but can be overridden via CLI flags `-argon-memory`, `-argon-parallelism`, and `-argon-iterations`.	2023-04-03 13:59:38 -04:00