Patrick Uiterwijk
|
7b1b8b68e3
|
Define the 05/06 yubikeys in the binding list
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2018-11-10 00:26:47 +01:00 |
|
Patrick Uiterwijk
|
8ce164c3b9
|
I did the import with another nickname... silly me
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2018-11-10 00:10:35 +01:00 |
|
Patrick Uiterwijk
|
d599582e65
|
Jinja2 wants elif...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2018-11-09 23:59:38 +01:00 |
|
Patrick Uiterwijk
|
002011cdeb
|
Fill in p11 serials for sv05 and 06
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2018-11-09 23:52:21 +01:00 |
|
Patrick Uiterwijk
|
739d63e63b
|
Add sv05 and 06 keys to the config
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2018-11-09 23:46:02 +01:00 |
|
Patrick Uiterwijk
|
e9f0047575
|
Also sync out the keys for vault 05 and 06
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2018-11-09 23:44:06 +01:00 |
|
Patrick Uiterwijk
|
490d1785ea
|
Use the new package for pkcs11 in openssl
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
|
2018-11-09 23:20:22 +01:00 |
|
Kevin Fenzi
|
4fea617129
|
need name here
|
2018-11-09 21:09:50 +00:00 |
|
Patrick Uiterwijk
|
b8ce5b232d
|
Update sigul config
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2018-08-18 11:34:23 +00:00 |
|
Kevin Fenzi
|
6e63d49c01
|
increase the sigul max rpm size again
|
2017-06-18 19:50:07 +00:00 |
|
Kevin Fenzi
|
6b20d863a3
|
some last sign vault fixes
|
2017-03-03 20:09:53 +00:00 |
|
Patrick Uiterwijk
|
a8cb95ecaf
|
Make both sigul vaults know their counterparts public key
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2017-02-20 23:17:56 +00:00 |
|
Patrick Uiterwijk
|
90628ec565
|
Add public yubikey stuff
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-19 21:04:57 +00:00 |
|
Patrick Uiterwijk
|
77e0fb600b
|
Remove lenient username check in sigul
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-10-19 20:38:29 +00:00 |
|
Kevin Fenzi
|
4b297e330d
|
this is a copy, not a file
|
2016-10-19 19:17:26 +00:00 |
|
Kevin Fenzi
|
36f621bc48
|
texlive src.rpm is over 2GB now, bump signing size to 4GB until it passes that
|
2016-10-05 18:03:09 +00:00 |
|
Kevin Fenzi
|
b704d6b898
|
Add polkit rules to allow sigul user to access smartcard/yubikey for autosign binding.
|
2016-09-24 17:54:28 +00:00 |
|
Patrick Uiterwijk
|
46ced0ed73
|
Add yubikey tooling
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-09-23 11:41:45 +00:00 |
|
Kevin Fenzi
|
4b60d56915
|
link gpg1 only on rhel
|
2016-09-21 20:54:47 +00:00 |
|
Kevin Fenzi
|
c3502f1463
|
and install gnupg on fedora
|
2016-09-21 20:53:04 +00:00 |
|
Kevin Fenzi
|
d2b4b8ca30
|
this is just p11kit
|
2016-09-21 20:51:04 +00:00 |
|
Kevin Fenzi
|
cdba42510f
|
gnupg1 only exists in our rhel7 repo
|
2016-09-21 20:48:30 +00:00 |
|
Kevin Fenzi
|
93351f9b5d
|
this needs to be package to work on both fedora and rhel
|
2016-09-21 20:44:45 +00:00 |
|
Patrick Uiterwijk
|
a0b92a81b0
|
For yubikeys, we will also need engine_pkcs11
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-09-16 20:04:40 +00:00 |
|
Patrick Uiterwijk
|
c9d150a4db
|
Add rhel7ah to sigul server
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-09-13 16:44:29 +00:00 |
|
Patrick Uiterwijk
|
08b2be4a61
|
Make roles out of sigul, and update configs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
|
2016-09-12 23:18:17 +00:00 |
|