-
Notifications
You must be signed in to change notification settings - Fork 163
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SPKI: Generate keys #3004
SPKI: Generate keys #3004
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 6 of 7 files at r1.
Reviewable status: 6 of 7 files reviewed, 3 unresolved discussions (waiting on @lukedirtwalker and @oncilla)
go/tools/scion-pki/internal/v2/conf/as.go, line 132 at r1 (raw file):
return err } if !a.Issuer.isZero() {
would it make sense to integrate the isZero check directly into validate? basically zero always validates. Would make the code here slightly more streamlined.
go/tools/scion-pki/internal/v2/keys/cmd.go, line 28 at r1 (raw file):
Long: ` 'keys' can be used to generate all the necessary keys used in the SCION control plane PKI as well as the AS master key.
do we still have an AS master key? didn't the terminology change?
go/tools/scion-pki/internal/v2/keys/gen.go, line 110 at r1 (raw file):
} // Check if out directory exists and if not create it. _, err = os.Stat(a.outDir)
Wait checking this for every key gen is a bit weird. This should be in the top level gen method.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 1 of 7 files at r1.
Reviewable status: all files reviewed, 3 unresolved discussions (waiting on @oncilla)
Add key generation capability for v2 to scion-pki tool.
7298294
to
3800964
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewable status: all files reviewed, 2 unresolved discussions (waiting on @lukedirtwalker and @scrye)
go/tools/scion-pki/internal/v2/conf/as.go, line 132 at r1 (raw file):
Previously, lukedirtwalker (Lukas Vogel) wrote…
would it make sense to integrate the isZero check directly into validate? basically zero always validates. Would make the code here slightly more streamlined.
Done.
go/tools/scion-pki/internal/v2/keys/cmd.go, line 28 at r1 (raw file):
Previously, lukedirtwalker (Lukas Vogel) wrote…
do we still have an AS master key? didn't the terminology change?
Yes. It is a symmetric key to derive the HF mac key for example.
It is not strictly part of the PKI, but somehow v1 supports it, so I left support in.
go/tools/scion-pki/internal/v2/keys/gen.go, line 110 at r1 (raw file):
Previously, lukedirtwalker (Lukas Vogel) wrote…
Wait checking this for every key gen is a bit weird. This should be in the top level gen method.
Done.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 2 of 2 files at r2.
Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @lukedirtwalker and @scrye)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewed 1 of 1 files at r3.
Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @lukedirtwalker and @scrye)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reviewable status:
complete! all files reviewed, all discussions resolved (waiting on @scrye)
Add key generation capability for v2 to scion-pki tool.
This change is![Reviewable](https://camo.githubusercontent.com/1541c4039185914e83657d3683ec25920c672c6c5c7ab4240ee7bff601adec0b/68747470733a2f2f72657669657761626c652e696f2f7265766965775f627574746f6e2e737667)