katie/yk-pkg-sign
Archived
Watch
1
0
Fork
You've already forked yk-pkg-sign
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Sign OpenBSD packages using a Yubikey
This repository has been archived on 2026-05-30. You can view files and clone it, but you cannot make any changes to its state, such as pushing and creating new issues, pull requests or comments.
30 commits 1 branch 0 tags 146 KiB
  • Rust 100%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
katie 1c4cf454b9
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details
Update README.md
2026-05-30 09:14:40 -04:00
.vscode rename project 2026-03-19 05:29:09 -04:00
src sign the correct data 2026-03-27 05:32:47 -04:00
.gitignore cargo init 2026-03-14 04:15:33 -04:00
.woodpecker.yml rust nightly 2026-03-15 18:26:19 -04:00
Cargo.toml add export command 2026-03-23 03:47:23 -04:00
LICENSE cargo init 2026-03-14 04:15:33 -04:00
README.md Update README.md 2026-05-30 09:14:40 -04:00

README.md

yk-pkg-sign

Sign OpenBSD packages using a YubiKey.

Update: I discovered that this isn't currently possible because YubiKeys don't support sufficiently-large payloads for signing operations to be able to sign an OpenBSD package manifest. This tool should be compatible with HSMs which do support larger payloads, but I haven't tested any of them to see which ones those are.