Adds support for PKCS#11 v2.20 and/or KMIP 1.2 compatible HSMs.
Includes backward compatible extensions to the krill.conf syntax.
Includes HSM related developer docs.
Excludes HSM specific API (REST, krillc, Prometheus) or UI extensions.
* Enable the multi-user feature by default.
* Explain the matrix elements used and order them logically.
* FIX: Bump Terraform action version to resolve "Error: The `add-path` command is disabled".
Hopefully also addresses the failure with the community plugin due to the GH Actions security patch which discontinued the GH Actions add-path functionality.
- Assumes that the target system has ca-certificates installed already.
- Vendor OpenSSL to support Ubuntu 16.04 which only has OpenSSL 1.0.0.
- Use an Ubuntu 16.04 compatible version of libgcc1 (don't use cargo-deb $auto
depends as the GH 16.04 runner has a much newer libgcc1 package than stock
Ubuntu 16.04).
- Use GH caching to avoid repeat compilation of unchanging cargo deb and krill
dependencies.
- Sanity check the created DEB in targeted O/S versions.