Fix GPG keys and adjust pkcs11 code to work for softhsm2 and IBM's grep11 module

containers / ocicrypt

Encryption libraries for Encrypted OCI Container images

Apache License 2.0

133 stars 31 forks source link

Fix GPG keys and adjust pkcs11 code to work for softhsm2 and IBM's grep11 module #29

Closed stefanberger closed 3 years ago

stefanberger commented 3 years ago

This PR fixes the expired GPG keys and modifies the pkcs11 code once more to accommodate the softhsm2 module and the somewhat differently working grep11 module.

stefanberger commented 3 years ago

We now have 2 pkcs11 modules that require sha1 as the hash for RSA OAEP. Related discussion here. I changed this to be the default now.