infra/pki
Raito Bezarius 1bb6e8a681 feat: sign the ICA1 CSR
This introduces a bunch of facilities for PKI manipulations.

Signed-off-by: Raito Bezarius <masterancpp@gmail.com>
2024-12-31 17:50:23 +01:00
..
cacerts feat: sign the ICA1 CSR 2024-12-31 17:50:23 +01:00
csr feat: sign the ICA1 CSR 2024-12-31 17:50:23 +01:00
policies feat: sign the ICA1 CSR 2024-12-31 17:50:23 +01:00
.envrc feat: sign the ICA1 CSR 2024-12-31 17:50:23 +01:00
default.nix feat: sign the ICA1 CSR 2024-12-31 17:50:23 +01:00
README.md feat: sign the ICA1 CSR 2024-12-31 17:50:23 +01:00
shell.nix feat: sign the ICA1 CSR 2024-12-31 17:50:23 +01:00

PKI management

This is our expressions to generate and manage our PKI in the project.

We are using NitroHSMs for the offline storage and OpenBao server for the online operations.