nebula/cmd
John Maguire a56a97e5c3
Add ability to encrypt CA private key at rest (#386)
Fixes #8.

`nebula-cert ca` now supports encrypting the CA's private key with a
passphrase. Pass `-encrypt` in order to be prompted for a passphrase.
Encryption is performed using AES-256-GCM and Argon2id for KDF. KDF
parameters default to RFC recommendations, but can be overridden via CLI
flags `-argon-memory`, `-argon-parallelism`, and `-argon-iterations`.
2023-04-03 13:59:38 -04:00
..
nebula switch to new sync/atomic helpers in go1.19 (#728) 2022-10-31 13:37:41 -04:00
nebula-cert Add ability to encrypt CA private key at rest (#386) 2023-04-03 13:59:38 -04:00
nebula-service Use config.yml consistently (not config.yaml) (#789) 2022-12-19 11:45:15 -06:00