Plugin kms-pkcs11 version v0.3.0 — binaries. Verification data: checksums, GPG signatures, and SBOMs.
Release notes
This release adds support for ML-DSA and EdDSA (primarily Ed25519) keys, which can now be used via External Keys!
It also includes a minor bug fix around session handling and adds opt-in compatibility with Thales Luna HSMs operated in FIPS mode, which enables non-standard PKCS#11 semantics.
Relevant PRs in go-kms-wrapping:
- https://github.com/openbao/go-kms-wrapping/pull/154
- https://github.com/openbao/go-kms-wrapping/pull/160
- https://github.com/openbao/go-kms-wrapping/pull/162
Read more about supported algorithms:
- https://openbao.org/docs/next/api/system/external-keys/plugins/pkcs11
Binaries
Precompiled archives from the official GitHub release.
Linux
- openbao-plugin-kms-pkcs11_linux_amd64_v1.tar.gzSign in to download
c112c670e1bc…Verified - openbao-plugin-kms-pkcs11_linux_arm64_v8.tar.gzSign in to download
9485217db9f2…Verified
Verification
- SHA256 checksums
- 2 files verified, 6 not covered by upstream checksums.
- Checksum manifest authenticity
- Not checked on this mirror.
- GPG signatures
- Detached signatures mirrored alongside the artifacts.
- Sigstore provenance
- Not published for this release.
- SBOM
- SPDX documents mirrored for this release.
Checksum coverage is required for: arch_pkg, binary. A release with an unverified file in one of those classes is not published.
Checksums
- checksums-kms-pkcs11.txtSign in to download
974e463bb7cd…N/A
Signatures
Release source
Browse release tree
All files for kms-pkcs11-v0.3.0Sign in to download All kms-pkcs11 versions