spiffe / spiffe-helper

The SPIFFE Helper is a tool that can be used to retrieve and manage SVIDs on behalf of a workload
Apache License 2.0
43 stars 40 forks source link

Support Workload RSA Private Key #87

Closed fdeantoni closed 5 months ago

fdeantoni commented 1 year ago

It is possible to configure the Spire agent to generate private keys using RSA format instead of default ECC (see property workload_x509_svid_key_type). Unfortunately spiffe-helper assumes all private keys to be of type EC (see function writeKey at line 224. I don't know if correct but perhaps the type used can be determined from the certificate instead?