Venafi / vcert-java

Java client SDK designed to simplify integrations by automating key generation and certificate enrollment using Venafi machine identity services.
Apache License 2.0
9 stars 11 forks source link

Support EC keys for VaaS #101

Open angelmoo opened 2 years ago

angelmoo commented 2 years ago

Now VaaS support generating certificates using EC keys, and creating CIT that accepts EC keys.

for requesting a CIT or updating a CIT:

{ "keyTypes": [ { "keyType": "RSA", "keyLengths": [ 1024, 2048, 3072, 4096 ] }, { "keyType": "EC", "keyCurves": [ "P256", "P384", "P521", "ED25519" ] } ],

and for requesting a certificate:

{ "csrAttributes": { "keyTypeParameters": { "keyType": "EC", "keyLength": null, "keyCurve": "P256" }

Chages are needed on Vcert to support these new behavior.