Plugin kms-pkcs11 version v0.2.1 — binaries. Verification data: checksums, GPG signatures, and SBOMs.
Release notes
This release contains a small bug fix over v0.2.0 to ensure that the plugin does not panic trying to use hash functions that are not available in Go. This can occur when the Transit engine is used with hash_algorithm=mldsa-mu in OpenBao v2.7.0+, and the signing request is delegated to an asymmetric PKCS#11 key via External Keys.
For more context, see:
- https://github.com/openbao/openbao/pull/4009
- https://github.com/openbao/go-kms-wrapping/pull/153
Binaries
Precompiled archives from the official GitHub release.
Linux
- openbao-plugin-kms-pkcs11_linux_amd64_v1.tar.gzSign in to download
ed18e461bb2b…Verified - openbao-plugin-kms-pkcs11_linux_arm64_v8.tar.gzSign in to download
d402f8857a88…Verified
Verification
- SHA256 checksums
- 2 files verified, 6 not covered by upstream checksums.
- Checksum manifest authenticity
- Not checked on this mirror.
- GPG signatures
- Detached signatures mirrored alongside the artifacts.
- Sigstore provenance
- Not published for this release.
- SBOM
- SPDX documents mirrored for this release.
Checksum coverage is required for: arch_pkg, binary. A release with an unverified file in one of those classes is not published.
Checksums
- checksums-kms-pkcs11.txtSign in to download
37992fe6d936…N/A
Signatures
Release source
Browse release tree
All files for kms-pkcs11-v0.2.1Sign in to download All kms-pkcs11 versions