dotnet / dotnet/sign

Add PKCS#11 library support

Open
#707 9 comments 1 reaction 0 assignees View on GitHub
feature-request help wanted Priority:2
Dominant language
C#
Stars
581
Forks
116
Avg merge
1d 2h
Merged PRs (30d)
8

Description

We use this library to sign Nuget packages with certificates stored in Azure Key Vault. However, we'd prefer to not directly talk to Azure Key Vault, but instead use a PKCS#11 library to request signatures from Azure Key Vault. Our PKCS#11 library serves as a standardized authentication and management layer for keys and certificates that we use for other, non-nuget signatures. If this tool supported PKCS#11, we could use this interface for all types of signing. Additionally, it would allow users to sign packages in a wider range of HSM backends beyond just Azure Key Vault, though this isn't the main motivation for us.

Would this project consider accepting a Pull Request that contained a PKCS#11 implementation? It seems like it would need to satisfy [these](https://github.com/dotnet/sign/blob/main/src/Sign.Core/ISignatureAlgorithmProvider.cs)[ two](https://github.com/dotnet/sign/blob/main/src/Sign.Core/ICertificateProvider.cs) interfaces if we're reading the code correctly.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.