nebula

Commit Graph

Author	SHA1	Message	Date
guangwu	276978377a	chore: remove refs to deprecated io/ioutil (#987 ) Signed-off-by: guoguangwu <guoguangwu@magic-shield.com>	2023-10-31 10:35:13 -04:00
Wade Simmons	e0185c4b01	Support NIST curve P256 (#769 ) * Support NIST curve P256 This change adds support for NIST curve P256. When you use `nebula-cert ca` or `nebula-cert keygen`, you can specify `-curve P256` to enable it. The curve to use is based on the curve defined in your CA certificate. Internally, we use ECDSA P256 to sign certificates, and ECDH P256 to do Noise handshakes. P256 is not supported natively in Noise Protocol, so we define `DHP256` in the `noiseutil` package to implement support for it. You cannot have a mixed network of Curve25519 and P256 certificates, since the Noise protocol will only attempt to parse using the Curve defined in the host's certificate. * verify the curves match in VerifyPrivateKey This would have failed anyways once we tried to actually use the bytes in the private key, but its better to detect the issue up front with a better error message. * add cert.Curve argument to Sign method * fix mismerge * use crypto/ecdh This is the preferred method for doing ECDH functions now, and also has a boringcrypto specific codepath. * remove other ecdh uses of crypto/elliptic use crypto/ecdh instead	2023-05-04 17:50:23 -04:00
Nathan Brown	d4b81f9b8d	Add QR code support to `nebula-cert` (#297 )	2021-02-11 18:53:25 -06:00
Wade Simmons	aba42f9fa6	enforce the use of goimports (#248 ) * enforce the use of goimports Instead of enforcing `gofmt`, enforce `goimports`, which also asserts a separate section for non-builtin packages. * run `goimports` everywhere * exclude generated .pb.go files	2020-06-30 18:53:30 -04:00
Wade Simmons	df43f6466e	gofmt	2019-12-11 23:15:57 -05:00
Slack Security Team	f22b4b584d	Public Release	2019-11-19 17:00:20 +00:00

6 Commits