search

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
16.93k stars 1.7k forks source link

[algs][0] Protobuf types and key generation #43152

Closed nklaassen closed 2 hours ago

nklaassen commented 1 week ago

This PR begins the implementation of RFD 136 - Modern Signature Algorithms. It defines the protobuf types for configuring the current suite via the cluster_auth_preference, and introduces partial definitions for the suites and basic functions for generating key material.

Further PRs will build on this to support generating keys matching the currently configured algorithm suite for each key purpose.

nklaassen commented 1 day ago

If we aren't going to ship this until v17 would it be less work if we dropped the backports and omitted the -dev suites and subsequent deprecation process?

A bit less work later I guess, and if we end up having to use the enum values somewhere we won't be skipping 2-4. I switched to just using the v1 suite names