Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Smart Card support #66

Open
jerome-jutteau opened this issue Apr 2, 2021 · 0 comments
Open

Smart Card support #66

jerome-jutteau opened this issue Apr 2, 2021 · 0 comments
Assignees

Comments

@jerome-jutteau
Copy link
Contributor

osc-cli allows users to specify certificate options to establish API connection (using API Access Rules and Client Certificates).

Users using a smart card / smart key would love to be able to use it with osc-cli

jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
@jerome-jutteau jerome-jutteau self-assigned this May 26, 2021
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 May 26, 2021
closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 1, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 1, 2021
closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 3, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 3, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 7, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 7, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 9, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 9, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 16, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 16, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 16, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 16, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 18, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Jun 18, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Jun 18, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Jun 18, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Aug 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Aug 3, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Aug 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Aug 3, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Aug 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Aug 3, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Aug 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau referenced this issue in jerome-jutteau/osc-cli2 Aug 3, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Aug 3, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Aug 3, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Sep 2, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Sep 2, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Sep 24, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Sep 24, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Oct 29, 2021
This should work with pkcs11 and other ssl engines.

You will need to setup those new options in your configuration profile:
- ssl_engine_id (pkcs11, ...)
- ssl_engine_path (path to pkcs11 lib, ...)
- ssl_module_path (path to opensc, softhsm, ...)

And setup:
- x509_client_cert
- x509_client_key

Check `config.smartcard.example.json` example file.

ref #66

Signed-off-by: Jérôme Jutteau <[email protected]>
jerome-jutteau added a commit that referenced this issue Oct 29, 2021
Add some tests for:
- softhsm (v2)
- yubikey (disabled by default)

Test configuration must be setup in tests/config.env

closes #66

Signed-off-by: Jérôme Jutteau <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant