Add PKCS#11 library support
- Dominant language
- C#
- Stars
- 581
- Forks
- 116
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 8
Description
We use this library to sign Nuget packages with certificates stored in Azure Key Vault. However, we'd prefer to not directly talk to Azure Key Vault, but instead use a PKCS#11 library to request signatures from Azure Key Vault. Our PKCS#11 library serves as a standardized authentication and management layer for keys and certificates that we use for other, non-nuget signatures. If this tool supported PKCS#11, we could use this interface for all types of signing. Additionally, it would allow users to sign packages in a wider range of HSM backends beyond just Azure Key Vault, though this isn't the main motivation for us.
Would this project consider accepting a Pull Request that contained a PKCS#11 implementation? It seems like it would need to satisfy [these](https://github.com/dotnet/sign/blob/main/src/Sign.Core/ISignatureAlgorithmProvider.cs)[ two](https://github.com/dotnet/sign/blob/main/src/Sign.Core/ICertificateProvider.cs) interfaces if we're reading the code correctly.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.