6 Commits

Author	SHA1	Message	Date
John Maguire	a56a97e5c3	Add ability to encrypt CA private key at rest (#386) ... Fixes #8. `nebula-cert ca` now supports encrypting the CA's private key with a passphrase. Pass `-encrypt` in order to be prompted for a passphrase. Encryption is performed using AES-256-GCM and Argon2id for KDF. KDF parameters default to RFC recommendations, but can be overridden via CLI flags `-argon-memory`, `-argon-parallelism`, and `-argon-iterations`.	2023-04-03 13:59:38 -04:00
Nate Brown	e31006d546	Be more clear about ipv4 in nebula-cert (#604)	2021-12-07 21:40:30 -06:00
Nathan Brown	d4b81f9b8d	Add QR code support to nebula-cert (#297)	2021-02-11 18:53:25 -06:00
Nate Brown	328db6bb82	Root constraint usage and support in nebula-cert	2019-12-17 17:59:21 -08:00
Wade Simmons	df43f6466e	gofmt	2019-12-11 23:15:57 -05:00
Slack Security Team	f22b4b584d	Public Release	2019-11-19 17:00:20 +00:00